Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Knm5lRJ-P5aFlAES0719Fj43s-o.roa
File: Knm5lRJ-P5aFlAES0719Fj43s-o.roa (raw, json)
Hash identifier: zaH/To9Z6MmxAmgXCyF9TSMSJ+KPoQwORYlNqp3ihd8=
Subject key identifier: 2A:79:B9:95:12:7E:3F:96:85:94:01:12:D3:BD:7D:16:3E:37:B3:EA
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FF62ED43E75993EF2A6C79E4F89110FBA
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Knm5lRJ-P5aFlAES0719Fj43s-o.roa
Signing time: Wed 12 Aug 2026 13:34:51 +0000
ROA not before: Wed 12 Aug 2026 13:34:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 46.102.237.0/24 maxlen: 24
72.35.240.0/24 maxlen: 24
72.35.241.0/24 maxlen: 24
72.35.243.0/24 maxlen: 24
72.35.244.0/24 maxlen: 24
78.17.20.0/24 maxlen: 24
78.17.21.0/24 maxlen: 24
78.17.30.0/24 maxlen: 24
78.17.31.0/24 maxlen: 24
78.17.58.0/24 maxlen: 24
78.17.61.0/24 maxlen: 24
78.17.81.0/24 maxlen: 24
78.17.168.0/24 maxlen: 24
78.17.229.0/24 maxlen: 24
89.125.223.0/24 maxlen: 24
89.125.242.0/24 maxlen: 24
89.125.245.0/24 maxlen: 24
103.245.228.0/24 maxlen: 24
104.143.194.0/24 maxlen: 24
104.143.195.0/24 maxlen: 24
104.143.200.0/24 maxlen: 24
140.225.196.0/24 maxlen: 24
140.225.205.0/24 maxlen: 24
153.76.192.0/24 maxlen: 24
153.76.197.0/24 maxlen: 24
153.76.201.0/24 maxlen: 24
153.76.206.0/24 maxlen: 24
153.76.207.0/24 maxlen: 24
153.76.209.0/24 maxlen: 24
153.76.210.0/24 maxlen: 24
153.76.219.0/24 maxlen: 24
153.76.220.0/24 maxlen: 24
153.76.222.0/24 maxlen: 24
153.76.223.0/24 maxlen: 24
162.35.227.0/24 maxlen: 24
206.245.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:2e:d4:3e:75:99:3e:f2:a6:c7:9e:4f:89:11:0f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 12 13:34:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a79b995127e3f9685940112d3bd7d163e37b3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ab:81:1e:bd:ba:55:51:d0:2c:b5:b5:dd:51:
cb:84:67:a5:87:f0:55:52:74:54:80:16:71:f3:ff:
15:e6:20:f1:2c:37:cb:0e:02:67:ab:cd:fc:85:9c:
de:2e:cc:24:f8:a9:b6:c3:67:db:ab:d9:11:9d:69:
89:6c:39:ad:46:13:1c:eb:ea:88:97:e7:d0:6e:7f:
44:73:23:e4:d2:29:9a:5e:e2:6d:7c:e3:e0:85:08:
90:f5:9d:2a:d9:14:67:d0:20:6b:e7:e6:96:4e:b1:
56:a9:34:a0:1e:4e:7b:8b:ce:79:c0:37:b4:13:ce:
27:cc:a2:05:78:01:a4:97:b7:84:5b:0f:4c:2c:38:
5b:06:20:b1:ce:3a:d0:c2:2c:ee:fe:04:8a:47:0e:
ef:ac:5f:7e:d7:e1:c0:40:44:61:84:d9:7c:c0:d1:
6e:88:db:23:b7:47:cc:67:aa:a2:6a:ad:b7:b7:7b:
b1:33:5f:a8:5d:bd:ff:c0:96:73:07:75:04:4f:98:
3d:2d:ee:83:2e:fa:c9:4d:15:24:97:17:aa:d9:ee:
77:e0:54:0d:b3:b7:54:47:76:d2:4d:12:0f:80:6d:
66:7d:e1:ad:1a:41:21:e2:93:22:a3:09:3d:26:b9:
00:50:8d:ef:8a:7d:e7:ba:18:3c:93:e8:6a:58:7b:
3b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:79:B9:95:12:7E:3F:96:85:94:01:12:D3:BD:7D:16:3E:37:B3:EA
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Knm5lRJ-P5aFlAES0719Fj43s-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
72.35.240.0/23
72.35.243.0-72.35.244.255
78.17.20.0/23
78.17.30.0/23
78.17.58.0/24
78.17.61.0/24
78.17.81.0/24
78.17.168.0/24
78.17.229.0/24
89.125.223.0/24
89.125.242.0/24
89.125.245.0/24
103.245.228.0/24
104.143.194.0/23
104.143.200.0/24
140.225.196.0/24
140.225.205.0/24
153.76.192.0/24
153.76.197.0/24
153.76.201.0/24
153.76.206.0/23
153.76.209.0-153.76.210.255
153.76.219.0-153.76.220.255
153.76.222.0/23
162.35.227.0/24
206.245.145.0/24
Signature Algorithm: sha256WithRSAEncryption
71:de:50:47:43:d8:a1:94:c8:6b:b2:dd:8c:89:dc:fe:83:26:
ce:a8:c6:0c:a1:66:fa:94:8c:9d:52:25:85:ad:88:bc:c5:ed:
33:65:51:ca:7a:31:0f:23:74:3e:8d:ad:8b:74:3f:95:e6:c6:
90:92:3b:d6:b2:88:b8:73:3d:3c:c9:64:3b:1e:f0:b9:a7:1b:
2e:81:59:19:99:54:f7:95:c6:90:b2:54:55:94:c4:86:4e:94:
7f:62:12:28:05:d6:79:52:1a:4b:dd:54:b2:1c:ef:e9:87:08:
81:c7:5f:a7:4a:86:d4:df:bf:07:e5:c6:d1:fe:ba:b3:33:4c:
cc:4a:53:4d:53:a6:d8:d7:2c:ba:63:83:f6:fb:b5:c2:45:b0:
f0:f3:f0:ea:8e:05:c5:0e:11:25:bc:6a:2c:9d:b2:d5:9f:0d:
db:9d:bd:1f:a9:34:92:9d:7a:91:1c:00:22:8e:fb:41:f4:89:
1b:62:60:0e:89:3c:b6:56:a5:0d:ad:a9:e6:0a:23:7b:3c:fd:
34:83:0a:17:1f:8b:d7:3b:aa:d6:f9:46:80:fa:71:be:8e:77:
35:36:47:97:34:cc:c2:49:1d:cb:c4:2e:70:f0:63:65:37:b8:
45:55:d7:55:a9:33:a7:23:c4:bd:ba:5a:49:55:92:29:8b:1a:
ba:45:c4:48
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgISAZ/2LtQ+dZk+8qbHnk+JEQ+6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwODEyMTMzNDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTc5Yjk5NTEyN2UzZjk2ODU5NDAxMTJkM2JkN2QxNjNlMzdiM2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlquBHr26VVHQLLW13VHLhGelh/BV
UnRUgBZx8/8V5iDxLDfLDgJnq838hZzeLswk+Km2w2fbq9kRnWmJbDmtRhMc6+qI
l+fQbn9EcyPk0imaXuJtfOPghQiQ9Z0q2RRn0CBr5+aWTrFWqTSgHk57i855wDe0
E84nzKIFeAGkl7eEWw9MLDhbBiCxzjrQwizu/gSKRw7vrF9+1+HAQERhhNl8wNFu
iNsjt0fMZ6qiaq23t3uxM1+oXb3/wJZzB3UET5g9Le6DLvrJTRUklxeq2e534FQN
s7dUR3bSTRIPgG1mfeGtGkEh4pMiowk9JrkAUI3vin3nuhg8k+hqWHs7MwIDAQAB
o4ICwjCCAr4wHQYDVR0OBBYEFCp5uZUSfj+WhZQBEtO9fRY+N7PqMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvS25tNWxSSi1QNWFGbEFFUzA3MTlGajQzcy1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHXBggrBgEFBQcBBwEB/wSBxzCBxDCBwQQCAAEwgboDBAAu
Zu0DBAFII/AwDAMEAEgj8wMEAEgj9AMEAU4RFAMEAU4RHgMEAE4ROgMEAE4RPQME
AE4RUQMEAE4RqAMEAE4R5QMEAFl93wMEAFl98gMEAFl99QMEAGf15AMEAWiPwgME
AGiPyAMEAIzhxAMEAIzhzQMEAJlMwAMEAJlMxQMEAJlMyQMEAZlMzjAMAwQAmUzR
AwQAmUzSMAwDBACZTNsDBACZTNwDBAGZTN4DBACiI+MDBADO9ZEwDQYJKoZIhvcN
AQELBQADggEBAHHeUEdD2KGUyGuy3YyJ3P6DJs6oxgyhZvqUjJ1SJYWtiLzF7TNl
Ucp6MQ8jdD6NrYt0P5XmxpCSO9ayiLhzPTzJZDse8LmnGy6BWRmZVPeVxpCyVFWU
xIZOlH9iEigF1nlSGkvdVLIc7+mHCIHHX6dKhtTfvwflxtH+urMzTMxKU01TptjX
LLpjg/b7tcJFsPDz8OqOBcUOESW8aiydstWfDdudvR+pNJKdepEcACKO+0H0iRti
YA6JPLZWpQ2tqeYKI3s8/TSDChcfi9c7qtb5RoD6cb6OdzU2R5c0zMJJHcvELnDw
Y2U3uEVV11WpM6cjxL26WklVkimLGrpFxEg=
-----END CERTIFICATE-----
Generated at Wed Aug 26 17:24:07 2026 by rpki-client