Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kshS-0wso5DN_SzstJCNw6GGA8s.roa
File: kshS-0wso5DN_SzstJCNw6GGA8s.roa (raw, json)
Hash identifier: aYEuOP6TXIG5BvPSxkAcK7a+DJNLJpYJgdXNB3xWw2k=
Subject key identifier: 92:C8:52:FB:4C:2C:A3:90:CD:FD:2C:EC:B4:90:8D:C3:A1:86:03:CB
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368C19D8DAF2F9216A3DC403302654B
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kshS-0wso5DN_SzstJCNw6GGA8s.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56264
IP address blocks: 81.168.42.0/24 maxlen: 24
81.168.43.0/24 maxlen: 24
81.168.60.0/24 maxlen: 24
81.168.71.0/24 maxlen: 24
81.168.77.0/24 maxlen: 24
81.168.78.0/24 maxlen: 24
82.152.196.0/24 maxlen: 24
82.152.201.0/24 maxlen: 24
82.152.202.0/24 maxlen: 24
82.152.203.0/24 maxlen: 24
82.152.204.0/24 maxlen: 24
82.152.205.0/24 maxlen: 24
82.152.206.0/24 maxlen: 24
82.152.207.0/24 maxlen: 24
89.213.52.0/24 maxlen: 24
89.213.53.0/24 maxlen: 24
89.213.54.0/24 maxlen: 24
89.213.55.0/24 maxlen: 24
89.213.56.0/24 maxlen: 24
89.213.57.0/24 maxlen: 24
89.213.59.0/24 maxlen: 24
89.213.60.0/24 maxlen: 24
89.213.61.0/24 maxlen: 24
89.213.97.0/24 maxlen: 24
89.213.99.0/24 maxlen: 24
89.213.104.0/24 maxlen: 24
89.213.105.0/24 maxlen: 24
89.213.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c1:9d:8d:af:2f:92:16:a3:dc:40:33:02:65:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92c852fb4c2ca390cdfd2cecb4908dc3a18603cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:18:94:c2:e1:ec:c1:1b:6c:8a:a7:86:7b:25:
1c:7e:d6:4c:02:86:61:dc:80:1d:9f:8a:a8:b5:cc:
df:d4:c6:7b:77:1b:4d:17:1f:99:38:bd:58:70:7b:
07:e9:96:db:21:0c:15:ce:8e:ad:0e:0a:82:a2:67:
b5:c1:47:93:14:ea:85:6f:3d:3d:67:04:15:ed:a5:
30:37:6d:33:08:2a:6c:4d:35:e3:ee:db:ad:9b:e0:
39:86:dd:52:33:72:aa:83:cd:f2:7e:30:ae:8a:bd:
f6:74:56:c0:3b:86:fa:a5:da:c3:b1:55:05:4e:dd:
8f:4a:f5:85:83:3c:7e:1f:60:a3:0d:e9:46:70:7c:
ce:01:0d:5f:06:ea:05:74:eb:04:ab:9c:14:d4:48:
bd:2b:83:5f:79:21:58:79:0d:c9:89:5f:a9:c0:26:
be:55:a9:99:f4:c2:e9:1d:e9:cd:e4:39:e5:24:a7:
e7:dd:6f:46:c1:cd:2b:50:87:2e:72:86:ed:f2:5b:
63:27:3c:49:55:d8:46:69:8a:51:67:04:6b:34:3a:
5e:a1:97:eb:4f:8d:3b:c9:f6:36:1a:bd:f7:38:e4:
c0:34:21:6e:88:58:a6:1a:48:af:23:d7:0b:b4:36:
73:81:ef:54:32:42:64:ff:06:98:e3:c0:44:14:ed:
90:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C8:52:FB:4C:2C:A3:90:CD:FD:2C:EC:B4:90:8D:C3:A1:86:03:CB
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kshS-0wso5DN_SzstJCNw6GGA8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.42.0/23
81.168.60.0/24
81.168.71.0/24
81.168.77.0-81.168.78.255
82.152.196.0/24
82.152.201.0-82.152.207.255
89.213.52.0-89.213.57.255
89.213.59.0-89.213.61.255
89.213.97.0/24
89.213.99.0/24
89.213.104.0/23
89.213.107.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d1:ab:ef:81:3b:d3:8b:44:1f:ea:b4:4c:db:71:f1:0d:9f:
e0:4b:70:77:91:df:33:d5:64:04:bf:1f:17:99:98:01:23:0e:
75:52:d9:1c:3c:db:b2:03:4a:59:13:ce:48:a4:22:14:60:c8:
b4:0d:cc:cf:f1:2b:ef:8a:2d:e5:6d:f8:a7:3f:c1:ae:fa:2c:
c9:42:12:44:5e:54:6c:76:3e:2c:b0:65:c3:d2:26:5d:39:0d:
22:06:f1:01:0b:bf:9e:b8:99:e8:82:57:6c:3a:6b:71:27:30:
60:0b:d1:e6:69:b5:ee:bd:7c:90:1a:93:0b:33:ca:0c:26:c6:
60:69:28:b4:f0:87:d2:9a:0e:f3:bb:94:03:45:74:f8:97:a3:
45:7e:66:d9:ae:0a:12:fc:14:3d:48:3b:9e:b1:b6:68:2b:fc:
73:91:9a:f9:13:35:85:41:90:2f:66:02:f8:e8:fb:9a:5f:2c:
60:19:0c:01:86:c1:21:dc:67:b3:c9:72:5b:28:35:1b:b4:95:
64:f9:ac:99:e2:1a:1c:d8:fc:9e:b8:fb:b2:19:29:1c:d3:89:
b4:bc:a0:56:bf:46:9b:f0:42:9d:1b:0b:34:03:2b:d2:62:a7:
d4:75:80:80:29:f4:8f:57:4a:f7:1c:12:42:cf:a9:c0:c4:d7:
f8:72:d6:00
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgISAZ8jaMGdja8vkhaj3EAzAmVLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzAyMTUxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmM4NTJmYjRjMmNhMzkwY2RmZDJjZWNiNDkwOGRjM2ExODYwM2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BiUwuHswRtsiqeGeyUcftZMAoZh
3IAdn4qotczf1MZ7dxtNFx+ZOL1YcHsH6ZbbIQwVzo6tDgqCome1wUeTFOqFbz09
ZwQV7aUwN20zCCpsTTXj7tutm+A5ht1SM3Kqg83yfjCuir32dFbAO4b6pdrDsVUF
Tt2PSvWFgzx+H2CjDelGcHzOAQ1fBuoFdOsEq5wU1Ei9K4NfeSFYeQ3JiV+pwCa+
VamZ9MLpHenN5DnlJKfn3W9Gwc0rUIcucobt8ltjJzxJVdhGaYpRZwRrNDpeoZfr
T407yfY2Gr33OOTANCFuiFimGkivI9cLtDZzge9UMkJk/waY48BEFO2QiQIDAQAB
o4ICbDCCAmgwHQYDVR0OBBYEFJLIUvtMLKOQzf0s7LSQjcOhhgPLMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEva3NoUy0wd3NvNUROX1N6c3RKQ053NkdHQThzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEAVGoKgME
AFGoPAMEAFGoRzAMAwQAUahNAwQAUahOAwQAUpjEMAwDBABSmMkDBARSmMAwDAME
AlnVNAMEAVnVODAMAwQAWdU7AwQBWdU8AwQAWdVhAwQAWdVjAwQBWdVoAwQAWdVr
MA0GCSqGSIb3DQEBCwUAA4IBAQAE0avvgTvTi0Qf6rRM23HxDZ/gS3B3kd8z1WQE
vx8XmZgBIw51UtkcPNuyA0pZE85IpCIUYMi0DczP8Svvii3lbfinP8Gu+izJQhJE
XlRsdj4ssGXD0iZdOQ0iBvEBC7+euJnogldsOmtxJzBgC9HmabXuvXyQGpMLM8oM
JsZgaSi08IfSmg7zu5QDRXT4l6NFfmbZrgoS/BQ9SDuesbZoK/xzkZr5EzWFQZAv
ZgL46PuaXyxgGQwBhsEh3GezyXJbKDUbtJVk+ayZ4hoc2PyeuPuyGSkc04m0vKBW
v0ab8EKdGws0AyvSYqfUdYCAKfSPV0r3HBJCz6nAxNf4ctYA
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:17:38 2026 by rpki-client