Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/kARhTFJUG24FhoZJwgZHu6JVwkc.roa
File: kARhTFJUG24FhoZJwgZHu6JVwkc.roa (raw, json)
Hash identifier: MkTE/ZDG2mo+gEfKZCicGyB+1HeOi8xWStL1hlszwLY=
Subject key identifier: 90:04:61:4C:52:54:1B:6E:05:86:86:49:C2:06:47:BB:A2:55:C2:47
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019FF5B8B7991DBF3D2A87298BB642A34BE3
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/kARhTFJUG24FhoZJwgZHu6JVwkc.roa
Signing time: Wed 12 Aug 2026 11:25:51 +0000
ROA not before: Wed 12 Aug 2026 11:25:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201341
IP address blocks: 189.81.16.0/23 maxlen: 23
189.81.18.0/23 maxlen: 23
189.81.22.0/23 maxlen: 23
189.81.30.0/23 maxlen: 23
189.81.42.0/23 maxlen: 23
189.81.46.0/23 maxlen: 23
189.81.50.0/23 maxlen: 23
189.81.52.0/23 maxlen: 23
189.81.110.0/23 maxlen: 23
189.81.120.0/23 maxlen: 23
189.81.128.0/23 maxlen: 23
189.81.130.0/23 maxlen: 23
189.81.136.0/23 maxlen: 23
189.81.138.0/23 maxlen: 23
189.81.146.0/23 maxlen: 23
189.81.154.0/23 maxlen: 23
189.81.158.0/23 maxlen: 23
189.81.172.0/23 maxlen: 23
189.81.176.0/23 maxlen: 23
189.81.190.0/23 maxlen: 23
189.81.198.0/23 maxlen: 23
189.81.200.0/23 maxlen: 23
189.81.208.0/23 maxlen: 23
189.81.228.0/23 maxlen: 23
189.81.240.0/23 maxlen: 23
189.81.244.0/23 maxlen: 23
189.81.252.0/23 maxlen: 23
189.104.8.0/23 maxlen: 23
189.104.14.0/23 maxlen: 23
189.104.24.0/23 maxlen: 23
189.104.26.0/23 maxlen: 23
189.104.30.0/23 maxlen: 23
189.104.40.0/23 maxlen: 23
189.104.56.0/23 maxlen: 23
189.104.58.0/23 maxlen: 23
189.104.62.0/23 maxlen: 23
189.104.74.0/23 maxlen: 23
189.104.76.0/23 maxlen: 23
189.104.82.0/23 maxlen: 23
189.104.88.0/23 maxlen: 23
189.104.154.0/23 maxlen: 23
189.104.176.0/23 maxlen: 23
189.104.190.0/23 maxlen: 23
189.104.194.0/23 maxlen: 23
189.104.206.0/23 maxlen: 23
189.104.216.0/23 maxlen: 23
189.104.228.0/23 maxlen: 23
189.104.232.0/23 maxlen: 23
189.104.236.0/23 maxlen: 23
189.104.240.0/23 maxlen: 23
189.104.250.0/23 maxlen: 23
205.188.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:b8:b7:99:1d:bf:3d:2a:87:29:8b:b6:42:a3:4b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Aug 12 11:25:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9004614c52541b6e05868649c20647bba255c247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:cf:4d:92:06:bd:1e:58:03:97:b8:76:60:
49:1a:3c:d2:7f:54:7c:45:9b:00:0d:bc:d4:f7:1e:
10:0d:f9:75:f6:45:fe:17:bb:b1:df:fd:9a:25:3d:
cb:77:32:b8:40:f1:58:db:83:ba:1a:2b:91:54:6d:
97:6c:e5:d4:1a:be:4b:c4:af:f3:51:70:fc:f9:21:
ab:02:1e:90:13:ff:f9:3d:b4:b2:9f:39:72:67:0a:
a8:e6:bd:42:29:31:2f:e6:54:76:62:b6:cd:16:d0:
8e:e5:ac:17:28:d6:65:47:75:2c:48:b6:92:b0:e9:
ca:2b:da:da:84:4e:0d:fc:97:b0:a5:9b:b7:f6:c8:
4d:aa:00:46:a8:08:13:62:87:9a:b9:9f:2e:70:9e:
a0:00:b1:84:89:5a:b7:9f:0b:bd:4d:9c:32:e2:ec:
29:4c:bd:99:85:d2:ae:83:04:92:20:93:c9:10:e0:
45:9b:af:e9:e1:f0:8f:89:e5:b8:62:f9:0c:2c:9d:
cf:b8:07:35:f0:66:56:05:89:ba:0d:8f:5d:f0:2f:
f1:c0:4b:6c:e3:e0:e3:91:b2:d4:d2:d0:ee:88:f6:
af:4a:78:37:e2:63:08:dd:35:3e:2a:93:3f:0a:81:
50:54:ac:5f:f8:92:2e:34:e1:0d:90:56:3f:3f:de:
f0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:04:61:4C:52:54:1B:6E:05:86:86:49:C2:06:47:BB:A2:55:C2:47
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/kARhTFJUG24FhoZJwgZHu6JVwkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.81.16.0/22
189.81.22.0/23
189.81.30.0/23
189.81.42.0/23
189.81.46.0/23
189.81.50.0-189.81.53.255
189.81.110.0/23
189.81.120.0/23
189.81.128.0/22
189.81.136.0/22
189.81.146.0/23
189.81.154.0/23
189.81.158.0/23
189.81.172.0/23
189.81.176.0/23
189.81.190.0/23
189.81.198.0-189.81.201.255
189.81.208.0/23
189.81.228.0/23
189.81.240.0/23
189.81.244.0/23
189.81.252.0/23
189.104.8.0/23
189.104.14.0/23
189.104.24.0/22
189.104.30.0/23
189.104.40.0/23
189.104.56.0/22
189.104.62.0/23
189.104.74.0-189.104.77.255
189.104.82.0/23
189.104.88.0/23
189.104.154.0/23
189.104.176.0/23
189.104.190.0/23
189.104.194.0/23
189.104.206.0/23
189.104.216.0/23
189.104.228.0/23
189.104.232.0/23
189.104.236.0/23
189.104.240.0/23
189.104.250.0/23
205.188.108.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:ca:f3:8d:4e:d7:c5:f8:f2:29:ec:ba:30:5f:58:bc:4b:bd:
f5:d8:d3:3b:bf:64:f8:d0:da:64:8d:03:5a:9a:0f:ca:66:5e:
ee:71:10:f9:ce:a1:6a:22:6b:55:38:94:87:23:9c:0e:3f:2c:
f4:7a:30:93:5e:fb:a5:93:67:52:3c:27:b1:c0:70:b3:d5:f1:
37:de:7c:fc:48:04:4e:c8:28:9b:30:bc:90:04:43:86:a4:9a:
a6:d7:13:5b:6e:b0:03:c8:7c:46:1a:6f:f8:54:20:ec:26:fd:
6c:df:19:2a:19:4a:71:27:8a:da:56:67:51:64:f4:09:ca:02:
c7:bc:81:7e:fe:8e:ca:ac:05:f6:fc:78:17:2d:6e:8a:df:95:
5d:3b:0c:11:a5:c1:41:31:44:5b:17:76:74:25:4f:f9:37:e4:
6a:af:86:b9:c1:07:8d:db:fe:3e:3b:13:48:71:6c:f7:34:0b:
3a:8d:c2:2d:71:9e:47:c7:3c:85:ad:72:22:12:70:9b:3e:c4:
ec:16:34:e2:7a:bf:58:51:10:e4:a2:6d:7c:85:b6:e0:32:a1:
ba:ad:c8:b3:69:46:d3:82:7c:e7:1d:b0:1b:e4:0e:37:52:4c:
13:91:bb:82:cf:dd:8b:1b:71:9b:cc:5c:13:8e:66:58:5b:fc:
06:15:d0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:57:29 2026 by rpki-client