Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/KaDCW-vC8OxSYgmvnlwc2RGGcso.roa
File: KaDCW-vC8OxSYgmvnlwc2RGGcso.roa (raw, json)
Hash identifier: Gw4saiquCFr7/vJ07qJKsW4oGWHTcwpcNkMJOpqv4XE=
Subject key identifier: 29:A0:C2:5B:EB:C2:F0:EC:52:62:09:AF:9E:5C:1C:D9:11:86:72:CA
Certificate issuer: /CN=011ccd009b2a6eabc5418574b637c6c402219c68
Certificate serial: 019F2368AC332C00E6706B3BEA38C4D1E1BC
Authority key identifier: 01:1C:CD:00:9B:2A:6E:AB:C5:41:85:74:B6:37:C6:C4:02:21:9C:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARzNAJsqbqvFQYV0tjfGxAIhnGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/KaDCW-vC8OxSYgmvnlwc2RGGcso.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 83.151.192.0/24 maxlen: 24
83.151.193.0/24 maxlen: 24
83.151.194.0/24 maxlen: 24
83.151.195.0/24 maxlen: 24
88.202.208.0/23 maxlen: 23
88.202.208.0/24 maxlen: 24
88.202.209.0/24 maxlen: 24
88.202.210.0/24 maxlen: 24
88.202.211.0/24 maxlen: 24
88.212.156.0/24 maxlen: 24
88.212.157.0/24 maxlen: 24
88.212.158.0/24 maxlen: 24
88.212.159.0/24 maxlen: 24
185.8.132.0/24 maxlen: 24
185.8.133.0/24 maxlen: 24
185.8.134.0/24 maxlen: 24
185.8.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARzNAJsqbqvFQYV0tjfGxAIhnGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ac:33:2c:00:e6:70:6b:3b:ea:38:c4:d1:e1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011ccd009b2a6eabc5418574b637c6c402219c68
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29a0c25bebc2f0ec526209af9e5c1cd9118672ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a7:8e:24:0c:e3:bd:f3:9a:59:f7:f5:2c:61:
1b:c6:84:5a:83:4c:71:48:44:17:8e:48:1b:a0:ca:
8b:4b:0c:2b:4d:ec:da:43:fe:42:27:19:fd:73:97:
36:05:84:79:ef:49:77:0e:85:0c:9d:a4:31:cb:37:
b1:3a:d7:17:31:ed:9b:8b:e0:9c:c7:ec:a4:bc:0c:
f4:ea:0c:9c:37:62:cc:6a:fa:63:cb:35:63:19:2a:
59:13:d9:35:50:7e:03:de:8c:fe:fc:ab:c6:a7:9f:
ca:39:bf:78:5b:71:00:eb:d4:ae:c0:ea:7c:64:f3:
0e:a3:91:83:39:dc:16:89:87:3b:98:3f:58:95:3e:
99:07:3a:40:a5:b1:6e:17:a1:82:5e:05:85:50:1a:
de:00:fd:53:1c:63:59:71:6e:7c:44:78:ed:4e:4d:
ff:cc:c0:f6:e2:8a:b1:83:f3:d6:2f:01:0a:74:af:
59:1e:e3:ee:7b:5f:8c:15:f7:1a:e5:3f:74:8f:b6:
ec:2b:69:b1:16:53:4f:b0:02:2b:fe:f3:49:02:3c:
09:05:7e:30:fb:10:eb:db:ff:82:07:87:4f:40:2a:
ba:91:53:90:66:20:ae:73:73:1f:16:e7:1c:e2:d6:
64:b8:bc:63:55:82:79:d2:4e:78:8b:f4:d5:88:18:
03:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A0:C2:5B:EB:C2:F0:EC:52:62:09:AF:9E:5C:1C:D9:11:86:72:CA
X509v3 Authority Key Identifier:
keyid:01:1C:CD:00:9B:2A:6E:AB:C5:41:85:74:B6:37:C6:C4:02:21:9C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARzNAJsqbqvFQYV0tjfGxAIhnGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/KaDCW-vC8OxSYgmvnlwc2RGGcso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.151.192.0/22
88.202.208.0/22
88.212.156.0/22
185.8.132.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:53:26:71:d2:f8:67:14:b8:80:f2:91:e6:37:ad:2e:7b:bf:
f1:dc:b4:b8:0e:eb:7e:6d:00:c2:e6:af:8f:df:cf:90:47:9c:
55:61:1c:d1:06:7f:f1:38:84:70:8a:91:9e:de:34:8b:af:ba:
25:b4:35:75:55:8a:3e:c3:a7:4b:67:21:bb:d1:83:81:9f:6f:
bc:6d:4c:96:ed:d5:18:68:3d:bf:bb:b5:f0:e7:a1:ec:f1:85:
af:48:1f:26:78:f0:7b:96:47:c6:cd:c0:de:fa:18:d2:1f:21:
61:60:ba:5a:39:cf:c6:2f:4f:b5:7b:d7:48:6e:50:4e:ba:2a:
9b:dc:98:83:97:0b:93:36:95:d2:01:ce:e7:a5:77:c2:73:58:
bc:a2:bf:a0:c0:ef:79:ae:06:8f:10:a9:24:4a:93:10:60:ae:
a4:da:bb:b0:37:32:87:4b:26:14:74:e3:08:0c:10:e9:a4:44:
87:ad:35:6e:72:42:1f:59:50:d6:c1:3e:31:83:e5:f5:7d:0d:
68:6a:2e:61:11:f8:d5:ad:d4:b0:ae:31:97:e1:30:9b:85:86:
43:db:aa:fb:5f:c7:94:ae:b3:c7:1b:56:65:07:7c:06:e9:f6:
44:4b:a0:62:b2:70:72:cf:8f:a5:c5:7a:e8:27:48:b5:d1:5a:
f7:33:5f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:58:27 2026 by rpki-client