Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/Kn6pNMJ21QdhHsuAl8WLfOPOkgw.roa
File: Kn6pNMJ21QdhHsuAl8WLfOPOkgw.roa (raw, json)
Hash identifier: LKs9IYE65ZsbkD0HX6Uw0NvXdkd8X9uC3RZE4DqImaU=
Subject key identifier: 2A:7E:A9:34:C2:76:D5:07:61:1E:CB:80:97:C5:8B:7C:E3:CE:92:0C
Certificate issuer: /CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
Certificate serial: 019FF04AF1AFC7571748DC36CE59E6306D66
Authority key identifier: 3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/Kn6pNMJ21QdhHsuAl8WLfOPOkgw.roa
Signing time: Tue 11 Aug 2026 10:07:51 +0000
ROA not before: Tue 11 Aug 2026 10:07:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215272
IP address blocks: 5.44.44.0/24 maxlen: 24
45.128.205.0/24 maxlen: 24
45.129.186.0/24 maxlen: 24
62.182.102.0/24 maxlen: 24
103.167.18.0/24 maxlen: 24
103.167.19.0/24 maxlen: 24
155.212.244.0/24 maxlen: 24
185.244.50.0/24 maxlen: 24
185.251.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:4a:f1:af:c7:57:17:48:dc:36:ce:59:e6:30:6d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
Validity
Not Before: Aug 11 10:07:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a7ea934c276d507611ecb8097c58b7ce3ce920c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:69:1a:c5:5b:13:1b:f9:b7:09:9b:20:53:7a:
eb:48:de:08:5e:4f:4e:bf:b9:78:ca:9a:4a:08:5a:
6a:c2:9f:a4:b2:64:60:8f:86:1b:bf:26:7c:98:79:
d0:77:43:81:d3:71:56:cf:dd:5d:82:6b:9c:7c:ef:
44:c8:a3:80:ab:39:fd:2d:3d:46:84:2f:fa:33:45:
87:ff:3e:6d:ef:d0:64:37:97:45:fe:51:ca:9b:60:
2f:08:85:83:d3:f2:41:82:dc:cb:84:89:b9:72:22:
df:fc:37:63:3b:90:8f:7e:d7:96:31:cb:3d:58:c2:
42:6e:a5:07:4d:52:e1:ab:29:d7:5a:c2:32:4e:cc:
ff:a8:be:e6:37:88:db:8c:9a:08:2d:53:e8:c3:58:
93:25:0b:bd:8e:da:9b:96:dc:97:eb:1e:cc:4e:42:
02:ed:ae:15:c1:20:06:d6:1d:6f:0c:0c:fe:6b:e2:
6a:a5:39:08:1c:1c:c3:96:98:b3:9d:64:f0:57:3b:
f9:44:2d:8c:bb:98:d4:69:bf:73:c8:be:73:6e:ab:
a2:0c:13:fb:d0:8b:54:00:d7:28:64:58:33:26:5c:
cb:93:5c:cb:61:97:f9:2a:b7:b7:2b:d6:12:17:fd:
60:5d:38:7f:a1:8b:00:bd:fd:5a:c1:49:6a:a3:2f:
e5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7E:A9:34:C2:76:D5:07:61:1E:CB:80:97:C5:8B:7C:E3:CE:92:0C
X509v3 Authority Key Identifier:
keyid:3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/Kn6pNMJ21QdhHsuAl8WLfOPOkgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.44.0/24
45.128.205.0/24
45.129.186.0/24
62.182.102.0/24
103.167.18.0/23
155.212.244.0/24
185.244.50.0/24
185.251.38.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:11:d2:71:37:75:c8:cc:bb:ce:a2:ca:d6:e5:0a:a5:29:34:
70:06:c4:30:ab:a2:3f:39:d6:4c:28:7c:70:bc:c5:1d:c0:fe:
3a:41:c7:5a:f0:f3:8d:48:03:e0:e4:19:89:48:d0:ed:53:9b:
ba:2f:7a:b3:09:26:09:d7:31:6f:32:32:fe:da:34:06:1a:8b:
2c:8d:c1:31:b7:72:a8:a9:12:dd:b8:ee:e9:6c:fe:8a:31:99:
f0:1f:b8:b2:fe:57:d1:8a:28:05:e7:5a:c1:8a:d0:51:1a:76:
81:00:8a:dc:70:f7:3b:80:ec:6a:29:d7:7f:84:87:dc:98:b0:
6f:1a:28:0a:a3:66:e6:17:1b:a3:69:83:c6:ea:8c:8f:19:87:
7b:45:a4:0b:8b:8d:4c:80:2d:43:d9:6e:92:98:f9:68:f6:d7:
ca:b8:2d:79:ad:ac:ff:ce:05:94:88:fe:7d:79:5e:c6:af:4f:
6d:b0:05:d0:ee:9c:fa:5e:21:a2:56:cf:dd:2a:be:f3:c5:79:
c1:45:29:60:c4:a1:1c:fc:97:92:21:e6:bb:c9:2f:bb:3d:43:
5c:ae:13:67:65:f4:c7:89:04:36:10:18:99:9d:2e:0b:59:86:
89:e0:3b:48:c2:ab:89:f4:a5:98:72:7f:11:86:be:59:a5:88:
21:38:b0:14
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZ/wSvGvx1cXSNw2zlnmMG1mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMWYxNGQzN2ZiZGM4N2FlN2M5YzdiOTE1M2VhZWE1ZDRj
NTU0OWIwHhcNMjYwODExMTAwNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTdlYTkzNGMyNzZkNTA3NjExZWNiODA5N2M1OGI3Y2UzY2U5MjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomkaxVsTG/m3CZsgU3rrSN4IXk9O
v7l4yppKCFpqwp+ksmRgj4YbvyZ8mHnQd0OB03FWz91dgmucfO9EyKOAqzn9LT1G
hC/6M0WH/z5t79BkN5dF/lHKm2AvCIWD0/JBgtzLhIm5ciLf/DdjO5CPfteWMcs9
WMJCbqUHTVLhqynXWsIyTsz/qL7mN4jbjJoILVPow1iTJQu9jtqbltyX6x7MTkIC
7a4VwSAG1h1vDAz+a+JqpTkIHBzDlpiznWTwVzv5RC2Mu5jUab9zyL5zbquiDBP7
0ItUANcoZFgzJlzLk1zLYZf5Kre3K9YSF/1gXTh/oYsAvf1awUlqoy/lTQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFCp+qTTCdtUHYR7LgJfFi3zjzpIMMB8GA1UdIwQY
MBaAFDwfFNN/vch658nHuRU+rqXUxVSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEI4VTAzLTl5SHJueWNlNUZUNnVwZFRGVkpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMWI3NGMtMTZhYy00ODMxLWI2YzUt
ZjFjNmJmMWU0YmE3LzEvS242cE5NSjIxUWRoSHN1QWw4V0xmT1BPa2d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9mMWI3NGMtMTZhYy00ODMxLWI2YzUtZjFjNmJmMWU0YmE3
LzEvUEI4VTAzLTl5SHJueWNlNUZUNnVwZFRGVkpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQABSwsAwQA
LYDNAwQALYG6AwQAPrZmAwQBZ6cSAwQAm9T0AwQAufQyAwQAufsmMA0GCSqGSIb3
DQEBCwUAA4IBAQAfEdJxN3XIzLvOosrW5QqlKTRwBsQwq6I/OdZMKHxwvMUdwP46
Qcda8PONSAPg5BmJSNDtU5u6L3qzCSYJ1zFvMjL+2jQGGossjcExt3KoqRLduO7p
bP6KMZnwH7iy/lfRiigF51rBitBRGnaBAIrccPc7gOxqKdd/hIfcmLBvGigKo2bm
FxujaYPG6oyPGYd7RaQLi41MgC1D2W6SmPlo9tfKuC15raz/zgWUiP59eV7Gr09t
sAXQ7pz6XiGiVs/dKr7zxXnBRSlgxKEc/JeSIea7yS+7PUNcrhNnZfTHiQQ2EBiZ
nS4LWYaJ4DtIwquJ9KWYcn8Rhr5ZpYghOLAU
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:28:11 2026 by rpki-client