Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/KSGyq1u2s8sAeJIRWt4Y0OUm09U.roa
File: KSGyq1u2s8sAeJIRWt4Y0OUm09U.roa (raw, json)
Hash identifier: tMxVqONkBOzadJJ+tuGfBPHIKHobgwareJq8Kh279WY=
Subject key identifier: 29:21:B2:AB:5B:B6:B3:CB:00:78:92:11:5A:DE:18:D0:E5:26:D3:D5
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A1377FE6B13BE3CEF8B355BA6FE1888728
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/KSGyq1u2s8sAeJIRWt4Y0OUm09U.roa
Signing time: Tue 13 Oct 2026 23:01:31 +0000
ROA not before: Tue 13 Oct 2026 23:01:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212667
IP address blocks: 2.59.48.0/24 maxlen: 24
31.222.240.0/24 maxlen: 24
31.222.243.0/24 maxlen: 24
37.221.80.0/24 maxlen: 24
45.11.22.0/24 maxlen: 24
45.14.220.0/24 maxlen: 24
45.14.221.0/24 maxlen: 24
45.89.68.0/24 maxlen: 24
45.89.71.0/24 maxlen: 24
45.147.168.0/22 maxlen: 22
94.158.188.0/24 maxlen: 24
176.56.35.0/24 maxlen: 24
176.56.36.0/24 maxlen: 24
185.234.8.0/24 maxlen: 24
193.201.114.0/24 maxlen: 24
194.32.240.0/24 maxlen: 24
195.69.148.0/24 maxlen: 24
195.96.150.0/24 maxlen: 24
212.18.100.0/24 maxlen: 24
212.18.122.0/24 maxlen: 24
212.52.4.0/24 maxlen: 24
213.109.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:7f:e6:b1:3b:e3:ce:f8:b3:55:ba:6f:e1:88:87:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Oct 13 23:01:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2921b2ab5bb6b3cb007892115ade18d0e526d3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:a3:31:ea:14:da:81:5f:e8:1f:bb:12:5f:
c2:e9:8e:fa:da:c2:9b:c9:82:b7:47:ed:19:43:1b:
ce:44:2f:b3:99:a8:37:73:a8:87:ac:e8:e4:2a:ef:
4f:92:95:62:ff:0b:87:e1:ef:73:75:4b:db:c0:c4:
69:2f:aa:40:63:8c:75:ad:74:8b:5f:84:8d:9d:8c:
bc:09:29:25:dd:9e:fe:8a:20:2b:64:ff:31:60:d4:
f5:51:95:56:75:69:29:1e:35:e3:86:2f:5a:8a:34:
82:0e:68:29:06:ef:2d:7d:90:57:7c:09:dc:34:c4:
f1:2b:76:2b:50:0d:3a:cb:8a:7c:31:46:ff:c8:53:
ea:95:c0:25:b4:1a:4a:40:80:16:38:98:be:bc:25:
90:6b:e8:2d:dd:38:9c:6d:69:3f:86:1a:16:77:26:
65:a8:a8:6a:76:ea:6a:1b:47:01:a8:5a:4e:b3:35:
a7:0d:51:77:ec:0e:c4:7e:9b:99:04:f1:c4:8e:7b:
e6:2e:5e:55:25:ba:1a:63:f5:78:b3:2a:6f:49:5a:
a1:f0:44:c1:bc:c7:b0:ac:66:f0:19:3b:85:57:4f:
55:2e:e4:41:a1:02:4b:95:02:db:66:b2:f3:0a:be:
59:46:74:39:5f:6d:92:92:32:e6:74:5d:dd:3f:d0:
8a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:21:B2:AB:5B:B6:B3:CB:00:78:92:11:5A:DE:18:D0:E5:26:D3:D5
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/KSGyq1u2s8sAeJIRWt4Y0OUm09U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.48.0/24
31.222.240.0/24
31.222.243.0/24
37.221.80.0/24
45.11.22.0/24
45.14.220.0/23
45.89.68.0/24
45.89.71.0/24
45.147.168.0/22
94.158.188.0/24
176.56.35.0-176.56.36.255
185.234.8.0/24
193.201.114.0/24
194.32.240.0/24
195.69.148.0/24
195.96.150.0/24
212.18.100.0/24
212.18.122.0/24
212.52.4.0/24
213.109.206.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d7:c1:a7:22:74:a2:0d:b2:2e:96:d4:f2:fb:ff:65:dd:c9:
6a:55:28:f1:a6:a5:36:14:2e:61:82:de:3d:f2:79:1b:f3:41:
92:c2:d0:98:a4:8f:3c:c6:8e:ba:62:06:f9:85:41:10:88:8b:
2c:dc:7b:92:94:a5:31:26:c5:e4:76:b1:61:77:b2:e7:5e:31:
81:3d:46:6f:a8:1d:df:94:fb:2d:20:34:c9:cd:85:1c:0c:c8:
a7:36:e5:f1:fa:7b:77:c4:28:5f:50:8f:7a:f3:4b:38:5f:5e:
ae:81:87:fa:55:7e:72:d2:dd:09:d8:94:ab:d9:52:9b:ba:14:
40:0c:98:bb:a9:68:2a:71:c1:7b:e3:b8:50:cc:5e:a5:03:1f:
84:a4:5d:e8:f7:b9:24:32:39:bd:5a:1f:3b:29:9a:f1:f0:9f:
0d:2b:5a:95:35:84:e9:67:d3:a3:4b:41:c4:a4:8d:e2:37:9f:
98:90:24:6f:01:59:82:6a:74:1d:54:4e:6e:e3:c0:73:5f:f5:
1e:30:ff:42:eb:db:3a:ce:b1:c0:25:85:a8:57:b0:75:9e:fc:
3c:ee:fb:4d:3f:52:1f:2c:fb:3f:80:3a:cc:60:b4:57:6f:20:
a3:27:83:80:98:7a:bd:ac:ea:37:be:05:2d:cc:1a:d8:58:bc:
e7:21:c8:88
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISAaE3f+axO+PO+LNVum/hiIcoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjYxMDEzMjMwMTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTIxYjJhYjViYjZiM2NiMDA3ODkyMTE1YWRlMThkMGU1MjZkM2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG+jMeoU2oFf6B+7El/C6Y762sKb
yYK3R+0ZQxvORC+zmag3c6iHrOjkKu9PkpVi/wuH4e9zdUvbwMRpL6pAY4x1rXSL
X4SNnYy8CSkl3Z7+iiArZP8xYNT1UZVWdWkpHjXjhi9aijSCDmgpBu8tfZBXfAnc
NMTxK3YrUA06y4p8MUb/yFPqlcAltBpKQIAWOJi+vCWQa+gt3TicbWk/hhoWdyZl
qKhqdupqG0cBqFpOszWnDVF37A7EfpuZBPHEjnvmLl5VJboaY/V4sypvSVqh8ETB
vMewrGbwGTuFV09VLuRBoQJLlQLbZrLzCr5ZRnQ5X22SkjLmdF3dP9CKawIDAQAB
o4ICiDCCAoQwHQYDVR0OBBYEFCkhsqtbtrPLAHiSEVreGNDlJtPVMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvS1NHeXExdTJzOHNBZUpJUld0NFkwT1VtMDlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijCBhwQCAAEwgYADBAAC
OzADBAAf3vADBAAf3vMDBAAl3VADBAAtCxYDBAEtDtwDBAAtWUQDBAAtWUcDBAIt
k6gDBABenrwwDAMEALA4IwMEALA4JAMEALnqCAMEAMHJcgMEAMIg8AMEAMNFlAME
AMNglgMEANQSZAMEANQSegMEANQ0BAMEANVtzjANBgkqhkiG9w0BAQsFAAOCAQEA
GtfBpyJ0og2yLpbU8vv/Zd3JalUo8aalNhQuYYLePfJ5G/NBksLQmKSPPMaOumIG
+YVBEIiLLNx7kpSlMSbF5HaxYXey514xgT1Gb6gd35T7LSA0yc2FHAzIpzbl8fp7
d8QoX1CPevNLOF9eroGH+lV+ctLdCdiUq9lSm7oUQAyYu6loKnHBe+O4UMxepQMf
hKRd6Pe5JDI5vVofOyma8fCfDStalTWE6WfTo0tBxKSN4jefmJAkbwFZgmp0HVRO
buPAc1/1HjD/QuvbOs6xwCWFqFewdZ78PO77TT9SHyz7P4A6zGC0V28goyeDgJh6
vazqN74FLcwa2Fi85yHIiA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:00:19 2026 by rpki-client