Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KsZqHI6u_xfXjLHBGjqu7U9RQ9Q.roa
File: KsZqHI6u_xfXjLHBGjqu7U9RQ9Q.roa (raw, json)
Hash identifier: 99kVOGvRyikfqETQMSt/sza+UJxHykUkFrOtRmic5OM=
Subject key identifier: 2A:C6:6A:1C:8E:AE:FF:17:D7:8C:B1:C1:1A:3A:AE:ED:4F:51:43:D4
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A06CB2535363A4E2DB860DF9F418BAAC2E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KsZqHI6u_xfXjLHBGjqu7U9RQ9Q.roa
Signing time: Fri 04 Sep 2026 13:53:41 +0000
ROA not before: Fri 04 Sep 2026 13:53:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 46.102.237.0/24 maxlen: 24
72.35.240.0/24 maxlen: 24
72.35.241.0/24 maxlen: 24
72.35.243.0/24 maxlen: 24
72.35.244.0/24 maxlen: 24
78.17.20.0/24 maxlen: 24
78.17.21.0/24 maxlen: 24
78.17.23.0/24 maxlen: 24
78.17.30.0/24 maxlen: 24
78.17.31.0/24 maxlen: 24
78.17.58.0/24 maxlen: 24
78.17.61.0/24 maxlen: 24
78.17.81.0/24 maxlen: 24
78.17.168.0/24 maxlen: 24
78.17.229.0/24 maxlen: 24
89.125.223.0/24 maxlen: 24
89.125.242.0/24 maxlen: 24
89.125.245.0/24 maxlen: 24
103.245.228.0/24 maxlen: 24
104.143.194.0/24 maxlen: 24
104.143.195.0/24 maxlen: 24
104.143.200.0/24 maxlen: 24
140.225.196.0/24 maxlen: 24
140.225.205.0/24 maxlen: 24
153.76.192.0/24 maxlen: 24
153.76.197.0/24 maxlen: 24
153.76.201.0/24 maxlen: 24
153.76.206.0/24 maxlen: 24
153.76.207.0/24 maxlen: 24
153.76.209.0/24 maxlen: 24
153.76.210.0/24 maxlen: 24
153.76.219.0/24 maxlen: 24
153.76.220.0/24 maxlen: 24
153.76.222.0/24 maxlen: 24
153.76.223.0/24 maxlen: 24
162.35.227.0/24 maxlen: 24
206.245.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:b2:53:53:63:a4:e2:db:86:0d:f9:f4:18:ba:ac:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 4 13:53:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ac66a1c8eaeff17d78cb1c11a3aaeed4f5143d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:7d:a1:bf:10:0a:82:6e:fe:32:9a:54:43:
d9:4a:4d:c6:00:03:de:b5:99:a7:6d:59:b2:69:2b:
2e:12:8e:07:82:97:44:28:a2:9a:17:cd:20:23:24:
d1:71:b0:f9:5c:bb:44:55:e8:a6:a1:44:96:ef:42:
6d:c8:f7:69:f2:a4:5d:83:fe:f8:24:30:7e:8a:84:
33:01:5c:97:cd:0d:5c:a5:de:51:ea:8b:a6:fb:9e:
d7:f0:a7:dc:c1:76:08:67:3e:45:b0:8e:f9:47:52:
98:79:1e:e8:fb:16:05:32:70:4b:2a:cb:f9:83:59:
69:98:66:2b:c4:ad:24:de:e7:e0:d9:37:96:d3:d9:
cf:7f:93:ec:a3:30:76:46:8a:a9:91:f0:f2:49:f5:
2e:b1:b3:c3:29:33:b2:46:4f:cd:a6:1d:0f:5a:cb:
b8:f1:7a:4e:47:37:f5:91:ce:7f:2a:bc:37:99:92:
57:30:ed:19:d2:2d:fa:0c:72:48:96:b6:c3:7c:44:
37:8c:ef:d6:cd:64:50:6e:5b:d2:fb:95:0c:e0:5d:
a1:4f:d1:51:16:95:19:e6:b9:91:2c:02:02:c0:74:
c7:d5:cb:89:e2:8c:99:ca:26:9f:58:20:ca:8e:3c:
1c:0a:de:f7:2f:0d:a6:00:d3:87:21:92:1f:77:ce:
0d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C6:6A:1C:8E:AE:FF:17:D7:8C:B1:C1:1A:3A:AE:ED:4F:51:43:D4
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KsZqHI6u_xfXjLHBGjqu7U9RQ9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
72.35.240.0/23
72.35.243.0-72.35.244.255
78.17.20.0/23
78.17.23.0/24
78.17.30.0/23
78.17.58.0/24
78.17.61.0/24
78.17.81.0/24
78.17.168.0/24
78.17.229.0/24
89.125.223.0/24
89.125.242.0/24
89.125.245.0/24
103.245.228.0/24
104.143.194.0/23
104.143.200.0/24
140.225.196.0/24
140.225.205.0/24
153.76.192.0/24
153.76.197.0/24
153.76.201.0/24
153.76.206.0/23
153.76.209.0-153.76.210.255
153.76.219.0-153.76.220.255
153.76.222.0/23
162.35.227.0/24
206.245.145.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:b5:a5:69:fa:fb:5f:6b:27:67:a7:f8:1e:df:32:52:3e:da:
7e:7a:37:b0:55:16:5f:71:35:f0:9d:18:1e:7d:7b:b0:8e:ff:
50:bf:0d:ab:5f:c0:cc:f0:9d:78:2c:c0:63:ae:58:d8:3a:36:
6f:63:50:d5:39:51:35:00:93:ea:93:0e:4c:aa:97:3a:65:e6:
8e:a3:92:f8:b3:ce:b1:f7:97:b2:b8:85:d2:b9:5a:bf:f5:fb:
cf:da:e5:04:f1:a8:3f:5d:41:07:ef:29:43:45:83:bc:85:9a:
d1:4f:4f:0d:e8:0d:96:35:fd:75:e4:79:88:bd:15:dd:c2:20:
d6:22:6a:1c:e0:5e:71:4f:f6:e1:92:10:e3:44:78:8b:c3:66:
2d:cd:74:64:c0:1c:55:45:cc:ee:b3:f3:2c:f8:8c:ee:c2:b2:
69:48:0a:d6:6e:df:9d:e3:02:53:1f:a7:21:5f:71:7e:ec:cc:
bc:b7:d4:4b:46:95:d4:ad:db:18:f2:ac:d5:18:0c:29:8c:c9:
f7:7e:0c:50:03:83:da:08:e3:71:ac:3e:08:45:e4:98:4c:45:
ad:43:69:07:d4:89:ff:a3:0f:c3:ab:6b:fd:d2:33:46:f3:04:
77:25:e9:51:1f:ed:57:56:a1:9b:59:07:fb:61:5e:36:4d:b5:
88:b8:79:4d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgISAaBsslNTY6Ti24YN+fQYuqwuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwOTA0MTM1MzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWM2NmExYzhlYWVmZjE3ZDc4Y2IxYzExYTNhYWVlZDRmNTE0M2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqh9ob8QCoJu/jKaVEPZSk3GAAPe
tZmnbVmyaSsuEo4HgpdEKKKaF80gIyTRcbD5XLtEVeimoUSW70JtyPdp8qRdg/74
JDB+ioQzAVyXzQ1cpd5R6oum+57X8KfcwXYIZz5FsI75R1KYeR7o+xYFMnBLKsv5
g1lpmGYrxK0k3ufg2TeW09nPf5PsozB2RoqpkfDySfUusbPDKTOyRk/Nph0PWsu4
8XpORzf1kc5/Krw3mZJXMO0Z0i36DHJIlrbDfEQ3jO/WzWRQblvS+5UM4F2hT9FR
FpUZ5rmRLAICwHTH1cuJ4oyZyiafWCDKjjwcCt73Lw2mANOHIZIfd84NdwIDAQAB
o4ICyDCCAsQwHQYDVR0OBBYEFCrGahyOrv8X14yxwRo6ru1PUUPUMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvS3NacUhJNnVfeGZYakxIQkdqcXU3VTlSUTlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHdBggrBgEFBQcBBwEB/wSBzTCByjCBxwQCAAEwgcADBAAu
Zu0DBAFII/AwDAMEAEgj8wMEAEgj9AMEAU4RFAMEAE4RFwMEAU4RHgMEAE4ROgME
AE4RPQMEAE4RUQMEAE4RqAMEAE4R5QMEAFl93wMEAFl98gMEAFl99QMEAGf15AME
AWiPwgMEAGiPyAMEAIzhxAMEAIzhzQMEAJlMwAMEAJlMxQMEAJlMyQMEAZlMzjAM
AwQAmUzRAwQAmUzSMAwDBACZTNsDBACZTNwDBAGZTN4DBACiI+MDBADO9ZEwDQYJ
KoZIhvcNAQELBQADggEBAB21pWn6+19rJ2en+B7fMlI+2n56N7BVFl9xNfCdGB59
e7CO/1C/DatfwMzwnXgswGOuWNg6Nm9jUNU5UTUAk+qTDkyqlzpl5o6jkvizzrH3
l7K4hdK5Wr/1+8/a5QTxqD9dQQfvKUNFg7yFmtFPTw3oDZY1/XXkeYi9Fd3CINYi
ahzgXnFP9uGSEONEeIvDZi3NdGTAHFVFzO6z8yz4jO7CsmlICtZu353jAlMfpyFf
cX7szLy31EtGldSt2xjyrNUYDCmMyfd+DFADg9oI43GsPghF5JhMRa1DaQfUif+j
D8Ora/3SM0bzBHcl6VEf7VdWoZtZB/thXjZNtYi4eU0=
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:46 2026 by rpki-client