Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/KBK_IegT4XBrwYx8r4b-tnjR70M.roa
File: KBK_IegT4XBrwYx8r4b-tnjR70M.roa (raw, json)
Hash identifier: rAm3e5hUCKU34GyFOGNlY8O7ipIvWmF/9A0VU7+orZA=
Subject key identifier: 28:12:BF:21:E8:13:E1:70:6B:C1:8C:7C:AF:86:FE:B6:78:D1:EF:43
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 01A060DDC176651FADC01DA82C403E7DB784
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/KBK_IegT4XBrwYx8r4b-tnjR70M.roa
Signing time: Wed 02 Sep 2026 06:45:40 +0000
ROA not before: Wed 02 Sep 2026 06:45:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204986
IP address blocks: 95.86.150.0/24 maxlen: 24
95.86.151.0/24 maxlen: 24
95.86.156.0/24 maxlen: 24
95.86.157.0/24 maxlen: 24
95.86.163.0/24 maxlen: 24
185.233.180.0/22 maxlen: 22
185.233.180.0/23 maxlen: 23
185.233.180.0/24 maxlen: 24
185.233.181.0/24 maxlen: 24
185.233.182.0/23 maxlen: 23
185.233.182.0/24 maxlen: 24
185.233.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:dd:c1:76:65:1f:ad:c0:1d:a8:2c:40:3e:7d:b7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Sep 2 06:45:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2812bf21e813e1706bc18c7caf86feb678d1ef43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:c3:36:09:5a:8f:53:dd:0a:0a:ca:ab:e2:
9f:42:19:c7:71:09:e1:1f:b2:8a:51:7a:c9:78:7d:
35:af:0b:c7:47:78:d5:85:7d:90:3b:ba:cb:23:d8:
58:2b:4f:d9:9a:93:56:9b:2f:41:ff:f3:8a:68:b4:
a2:4e:c2:8c:b3:e3:2e:73:35:03:23:9b:78:78:a9:
93:09:50:3f:5a:3b:83:38:4d:48:75:d7:31:90:b2:
e9:07:ad:78:03:3e:cf:0e:03:58:96:57:13:9b:b0:
2d:90:27:53:a3:3f:58:62:f2:30:30:9a:dc:3a:eb:
59:c5:9a:9f:e3:bd:74:49:ab:d1:c2:e7:80:35:64:
da:25:6c:5e:33:f9:3e:08:29:3f:9a:28:cc:fd:a6:
6f:a0:73:24:78:97:27:0d:e0:c9:56:24:9e:a4:a4:
63:1a:61:27:7a:a5:00:15:12:e4:87:88:6b:a1:f5:
47:48:17:92:6d:27:00:62:c4:95:1d:fa:51:1b:6f:
60:11:1a:fb:4e:a9:29:a2:78:3b:e1:76:f6:b0:bf:
d3:6b:79:ee:51:8d:4d:59:10:a7:93:03:44:ec:9b:
65:bb:07:e1:9f:9c:49:bd:a5:7f:db:d5:c1:c6:06:
81:21:cd:8e:b7:a3:a8:fd:6b:1b:9d:f7:cf:ae:9c:
89:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:12:BF:21:E8:13:E1:70:6B:C1:8C:7C:AF:86:FE:B6:78:D1:EF:43
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/KBK_IegT4XBrwYx8r4b-tnjR70M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.86.150.0/23
95.86.156.0/23
95.86.163.0/24
185.233.180.0/22
Signature Algorithm: sha256WithRSAEncryption
19:cf:7b:23:3c:f4:27:ab:cf:ed:80:fc:70:2a:ce:fb:fd:f9:
ad:bf:93:37:7b:58:f1:bd:8e:2a:50:66:6f:4e:2a:bb:3c:59:
c6:51:a3:b9:af:72:b8:d2:b7:d6:68:41:d0:4d:7a:03:3e:c7:
d0:d4:9d:19:5c:c8:12:e6:c9:0f:f2:e2:47:98:5a:98:69:a5:
d1:53:21:0f:cd:3f:c8:c2:b9:71:1c:1e:50:c4:01:b1:bb:a8:
df:44:71:5e:3a:af:db:a1:61:f8:fe:c2:5c:19:31:8e:df:10:
ad:ea:c9:d6:f9:81:a2:1a:e8:00:fc:e6:cb:1d:9f:e3:4c:3d:
f9:ad:ca:9f:7d:96:fd:2b:4d:c1:fb:cc:81:9e:1b:22:3c:99:
8c:73:27:b8:fb:b8:ac:8e:c6:b7:a2:8e:b1:f7:b3:59:44:09:
fe:c4:75:87:53:4e:63:77:7a:46:1d:97:37:95:04:58:9b:28:
90:8b:2c:b1:04:29:89:f4:1e:0f:36:30:bc:a1:6e:a0:54:b6:
b3:a6:7d:9b:d9:93:d9:22:19:f7:50:66:4e:dd:2a:74:38:97:
58:3a:5d:4d:bc:4e:00:39:c4:98:42:3d:98:a7:ec:a3:d0:74:
e7:eb:1d:fd:3c:38:d1:bd:94:fd:5c:9d:1a:0b:47:1a:9f:86:
34:3d:5d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:11:28 2026 by rpki-client