Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/KZgYcafJdkuhtB61eEF4zd0bx6E.roa
File: KZgYcafJdkuhtB61eEF4zd0bx6E.roa (raw, json)
Hash identifier: QiqvxtatQTxblrQgyr0ocUvV3GF4c2wOUws2Ux4rb1A=
Subject key identifier: 29:98:18:71:A7:C9:76:4B:A1:B4:1E:B5:78:41:78:CD:DD:1B:C7:A1
Certificate issuer: /CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Certificate serial: 019FF0C85F79FC21E25B9FFA15E29C518F48
Authority key identifier: EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/KZgYcafJdkuhtB61eEF4zd0bx6E.roa
Signing time: Tue 11 Aug 2026 12:24:51 +0000
ROA not before: Tue 11 Aug 2026 12:24:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42656
IP address blocks: 5.134.208.0/21 maxlen: 24
5.134.208.0/24 maxlen: 24
5.134.209.0/24 maxlen: 24
5.134.210.0/24 maxlen: 24
5.134.211.0/24 maxlen: 24
5.134.212.0/24 maxlen: 24
5.134.213.0/24 maxlen: 24
5.134.214.0/24 maxlen: 24
5.134.215.0/24 maxlen: 24
91.194.188.0/23 maxlen: 24
91.194.188.0/24 maxlen: 24
91.194.189.0/24 maxlen: 24
91.207.14.0/23 maxlen: 24
91.207.14.0/24 maxlen: 24
91.207.15.0/24 maxlen: 24
178.21.152.0/22 maxlen: 22
178.21.152.0/24 maxlen: 24
178.21.153.0/24 maxlen: 24
178.21.154.0/24 maxlen: 24
178.21.155.0/24 maxlen: 24
178.21.156.0/23 maxlen: 23
178.21.156.0/24 maxlen: 24
178.21.157.0/24 maxlen: 24
178.21.158.0/24 maxlen: 24
178.21.159.0/24 maxlen: 24
185.31.24.0/22 maxlen: 22
185.31.24.0/24 maxlen: 24
185.31.25.0/24 maxlen: 24
185.31.26.0/24 maxlen: 24
185.31.27.0/24 maxlen: 24
193.23.48.0/24 maxlen: 24
193.203.222.0/23 maxlen: 24
193.203.222.0/24 maxlen: 24
193.203.223.0/24 maxlen: 24
194.0.251.0/24 maxlen: 24
2a02:dc8::/30 maxlen: 48
2a02:dc8::/32 maxlen: 32
2a02:dc8:20::/48 maxlen: 48
2a02:dc8:22::/48 maxlen: 48
2a02:dc8:30::/48 maxlen: 48
2a02:dc8:31::/48 maxlen: 48
2a02:dc8:32::/48 maxlen: 48
2a02:dc8:33::/48 maxlen: 48
2a02:dcc:20::/48 maxlen: 48
2a02:dcc:22::/48 maxlen: 48
2a02:dcc:30::/48 maxlen: 48
2a02:dcc:31::/48 maxlen: 48
2a02:dcc:32::/48 maxlen: 48
2a02:dcc:33::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:c8:5f:79:fc:21:e2:5b:9f:fa:15:e2:9c:51:8f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Validity
Not Before: Aug 11 12:24:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29981871a7c9764ba1b41eb5784178cddd1bc7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:a4:a7:3b:ea:70:0c:b1:5f:78:cf:57:9e:
6e:24:df:5d:f0:01:2b:0b:8c:bc:2b:6c:42:9e:01:
32:d3:52:56:b2:aa:a7:30:b7:fe:55:f7:bc:5c:12:
7a:4e:2b:25:5c:f1:78:38:27:b4:50:70:94:df:19:
47:21:49:fe:e0:b3:d3:fe:0b:40:40:ec:7b:99:28:
2f:1f:8a:72:e8:cd:59:0a:87:bb:9a:b5:06:9c:ff:
44:8e:f3:1e:4a:54:08:1a:a4:4b:42:ed:14:ea:ac:
6c:60:b9:ba:f3:9c:94:38:b4:2c:c7:fa:af:a4:03:
55:24:ba:83:a5:bc:76:32:1e:ff:25:e8:dd:2f:41:
aa:33:a3:a1:5f:da:2a:a5:6b:27:43:6c:3a:de:22:
06:87:b3:16:93:54:fa:9f:1e:fc:3b:19:15:c6:e8:
97:a5:9a:bb:bf:ec:75:78:cb:c3:0e:3b:bb:d6:4b:
58:2d:88:8e:f8:8d:0e:7b:19:65:f6:5f:e0:d9:87:
f7:75:8b:44:62:36:bd:c5:33:af:8e:7b:82:85:65:
c5:b3:09:fc:e1:2d:c2:46:c8:f8:11:9a:35:fb:87:
40:42:33:95:fc:a7:9a:18:98:b9:9d:32:4f:af:f0:
2d:dd:e9:c8:a6:79:0d:9d:c7:19:56:c6:07:20:21:
64:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:98:18:71:A7:C9:76:4B:A1:B4:1E:B5:78:41:78:CD:DD:1B:C7:A1
X509v3 Authority Key Identifier:
keyid:EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/KZgYcafJdkuhtB61eEF4zd0bx6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.208.0/21
91.194.188.0/23
91.207.14.0/23
178.21.152.0/21
185.31.24.0/22
193.23.48.0/24
193.203.222.0/23
194.0.251.0/24
IPv6:
2a02:dc8::/30
2a02:dcc:20::/48
2a02:dcc:22::/48
2a02:dcc:30::/46
Signature Algorithm: sha256WithRSAEncryption
31:99:7f:1c:20:c5:d8:19:22:6d:51:9a:f6:93:1b:6c:45:4c:
fa:97:5b:b3:76:3f:29:68:d3:5b:ac:cc:53:26:e6:a4:3c:26:
15:18:76:8c:08:cb:3e:c2:7c:24:63:9b:57:22:e1:60:8d:ae:
8e:97:7b:db:d2:65:de:74:1f:b0:ac:cc:f4:9d:b3:cf:1a:ba:
f5:10:0d:32:6c:03:32:c4:5b:8a:d0:62:5b:ec:f6:9e:f5:aa:
ea:a5:3f:d7:9e:55:b8:8f:42:d5:8d:ff:26:2f:05:6a:23:36:
72:fe:37:c3:a1:31:08:a1:95:9b:ed:35:da:82:7b:c3:01:5d:
ae:77:b0:13:ab:98:49:5c:62:71:3e:0f:f2:bd:be:31:d1:e1:
a5:4a:af:9d:26:99:d7:07:2f:32:fc:52:e9:1a:f4:ce:ab:ab:
49:8f:ee:b4:9b:5a:55:a3:a1:e8:05:f6:5e:85:27:59:48:2b:
59:49:df:6f:95:db:ef:cf:b1:a3:c2:11:f4:4e:63:1e:b2:0a:
69:25:b6:5b:dc:72:71:e2:46:0c:ee:c3:07:02:72:02:54:2a:
89:48:a3:b3:8e:7c:6e:df:48:e6:72:79:f4:24:4d:a6:af:ae:
cc:27:c3:e9:55:0a:6f:bc:b3:f7:50:5a:cf:29:bc:aa:c8:04:
ad:56:59:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 11:38:11 2026 by rpki-client