Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/Kt3WssTVExomZWHJCqXl8pbqTeI.roa
File: Kt3WssTVExomZWHJCqXl8pbqTeI.roa (raw, json)
Hash identifier: sMdfEY5PN8jhtfsylFmunzan1olQaOOSvuDOe68g4ws=
Subject key identifier: 2A:DD:D6:B2:C4:D5:13:1A:26:65:61:C9:0A:A5:E5:F2:96:EA:4D:E2
Certificate issuer: /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial: 019F245AE298A7EC0E1AC4D0AE8ED2445899
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/Kt3WssTVExomZWHJCqXl8pbqTeI.roa
Signing time: Thu 02 Jul 2026 19:42:43 +0000
ROA not before: Thu 02 Jul 2026 19:42:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209341
IP address blocks: 85.187.128.0/19 maxlen: 24
85.187.152.0/22 maxlen: 24
114.129.152.0/22 maxlen: 24
185.62.136.0/22 maxlen: 24
185.141.188.0/22 maxlen: 24
185.143.44.0/22 maxlen: 24
185.146.20.0/22 maxlen: 24
185.166.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:24:5a:e2:98:a7:ec:0e:1a:c4:d0:ae:8e:d2:44:58:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
Validity
Not Before: Jul 2 19:42:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2addd6b2c4d5131a266561c90aa5e5f296ea4de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:75:0d:1e:7d:49:40:cb:e4:07:a8:62:5e:c8:
eb:73:16:65:fa:df:cc:13:2a:cb:29:12:f1:a9:ce:
a7:7d:df:4c:42:61:71:4f:06:e9:e8:ae:cf:26:3d:
6a:62:14:ff:3c:52:db:b1:79:cf:c2:00:d7:76:e2:
7a:ed:e9:68:53:43:93:9a:d3:73:c7:7f:02:a8:d9:
a8:f1:cb:7c:b4:da:d9:e5:79:e4:d3:98:e2:96:a0:
9c:0d:92:37:c5:97:11:f3:66:63:90:f9:49:89:d9:
71:c9:86:76:5d:2d:c1:be:a4:8b:06:4b:69:f7:b0:
7d:c0:11:23:a2:52:fb:91:36:8e:da:7c:62:43:01:
a7:77:bb:3a:c5:c2:3d:ce:be:43:5d:d3:40:5c:90:
f2:4c:da:c2:8a:77:79:cc:1a:70:95:49:25:e1:88:
c7:bf:05:18:24:78:fb:89:6e:b8:51:19:ac:a4:62:
67:3a:ac:fc:24:d0:79:4c:2c:3d:61:56:74:ef:0b:
9a:c2:f9:71:86:bf:89:86:d1:b4:a7:5b:3b:f5:53:
04:a1:0c:2d:24:a1:d5:59:e8:0b:e9:08:b3:61:0a:
80:cc:1b:df:88:c6:38:f1:87:da:84:c2:5a:c3:10:
17:40:c2:ab:f9:99:2c:01:4b:31:6c:8e:d5:f7:5c:
ce:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DD:D6:B2:C4:D5:13:1A:26:65:61:C9:0A:A5:E5:F2:96:EA:4D:E2
X509v3 Authority Key Identifier:
keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/Kt3WssTVExomZWHJCqXl8pbqTeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.128.0/19
114.129.152.0/22
185.62.136.0/22
185.141.188.0/22
185.143.44.0/22
185.146.20.0/22
185.166.145.0/24
Signature Algorithm: sha256WithRSAEncryption
84:bc:40:6a:36:00:6f:69:b2:ec:ff:03:5e:5a:27:83:a6:ca:
c8:8d:71:7b:9b:78:07:f9:1f:a3:fa:de:0a:a3:2c:b4:7a:73:
e5:56:5a:1a:ad:a5:51:a3:a2:52:a7:ed:b0:a9:27:9e:8a:cb:
36:64:52:6f:bd:0b:26:47:ac:59:a6:18:16:dc:e5:d6:fe:ce:
7a:58:c5:fb:cb:9f:56:56:f9:1b:3a:1d:19:1e:52:bc:c2:a9:
ef:40:af:8d:af:34:78:25:1b:a1:dd:3f:8b:39:72:36:a3:0b:
5b:f9:2a:6c:0b:6b:93:8c:ee:a0:fc:8f:4a:ce:54:05:27:29:
c3:ff:54:9a:9c:f1:ac:66:5a:63:7c:ae:b3:ea:d2:80:00:85:
63:57:f7:e8:4d:36:f9:d7:b4:7b:db:3c:ce:19:ac:f5:b6:e9:
f3:29:86:0c:84:c1:6d:49:da:24:68:b8:2c:d3:20:0c:e3:3f:
14:24:4a:e3:32:a3:da:4d:4e:66:60:d1:37:1d:c4:fb:88:0c:
b0:bd:a2:12:1e:6f:fd:89:aa:ff:52:6d:4d:de:82:7e:ac:f4:
85:17:25:9d:75:52:04:bd:14:e2:c8:19:af:4d:63:49:12:e0:
49:6e:39:bb:d6:9b:27:5f:5a:b3:01:f9:40:89:e1:9c:ac:bd:
99:60:c2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:59:30 2026 by rpki-client