Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/kmgi0y0U1bYAcoirOlv5le_3CJY.roa
File: kmgi0y0U1bYAcoirOlv5le_3CJY.roa (raw, json)
Hash identifier: kZuMUfLrtvikcC+U07DOQIGo8YvIw/QLR8yELB49vDc=
Subject key identifier: 92:68:22:D3:2D:14:D5:B6:00:72:88:AB:3A:5B:F9:95:EF:F7:08:96
Certificate issuer: /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Certificate serial: 019FD1E07336DE7C05526E6C2381695599FB
Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/kmgi0y0U1bYAcoirOlv5le_3CJY.roa
Signing time: Wed 05 Aug 2026 12:22:55 +0000
ROA not before: Wed 05 Aug 2026 12:22:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57814
IP address blocks: 45.138.44.0/22 maxlen: 32
45.138.44.0/24 maxlen: 32
45.138.45.0/24 maxlen: 32
45.138.46.0/24 maxlen: 32
45.138.47.0/24 maxlen: 32
185.110.93.0/24 maxlen: 32
185.110.94.0/24 maxlen: 24
195.69.140.0/22 maxlen: 32
195.69.140.0/24 maxlen: 24
195.69.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:e0:73:36:de:7c:05:52:6e:6c:23:81:69:55:99:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Validity
Not Before: Aug 5 12:22:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=926822d32d14d5b6007288ab3a5bf995eff70896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:c1:93:cf:fd:aa:6e:fc:98:89:36:73:76:
6a:a0:28:3d:f8:76:f9:d3:67:a8:b1:2d:30:bb:52:
2b:1c:ed:65:28:41:fc:ea:a0:bd:d9:f5:68:58:74:
b2:99:6d:29:63:19:05:a9:1e:42:d5:af:6d:3a:60:
ed:13:bb:3b:76:6d:fb:41:8c:a0:9d:4c:84:d8:26:
f4:81:17:ef:cb:f5:b6:0f:34:20:3b:4a:b8:06:bc:
1c:ce:78:7b:3c:2a:d1:42:37:2a:64:39:13:7a:1a:
8a:04:31:82:95:78:1e:df:49:4f:0f:da:a8:38:92:
5f:6d:11:b6:84:38:e5:30:72:a2:ec:f1:a2:69:81:
e5:fa:f9:45:2c:85:f3:4c:f9:e4:1d:aa:07:4b:ef:
05:30:d2:42:99:d1:cf:d7:4f:0d:f8:56:9d:e9:01:
af:a3:2e:45:8d:45:09:ee:55:09:69:80:17:a5:aa:
35:09:d3:02:7c:01:a3:4b:f3:1c:93:2c:16:ae:18:
61:9c:a1:d8:7f:78:f0:7e:5e:0c:b5:7e:b8:28:a4:
fd:cf:08:b4:1a:b4:1b:72:5f:55:0c:82:bc:7f:5f:
d7:60:76:39:7e:76:63:a8:4c:d7:fb:55:83:a5:1a:
52:c6:0c:56:34:d0:5f:79:39:62:63:2f:b2:a6:b7:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:68:22:D3:2D:14:D5:B6:00:72:88:AB:3A:5B:F9:95:EF:F7:08:96
X509v3 Authority Key Identifier:
keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/kmgi0y0U1bYAcoirOlv5le_3CJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.44.0/22
185.110.93.0-185.110.94.255
195.69.140.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:3c:f3:2a:ca:09:36:06:26:0e:4d:11:4a:68:fa:80:6c:7f:
17:75:8d:bc:c2:5f:92:7c:e1:41:85:55:aa:bf:07:ed:e5:40:
61:f2:03:c0:40:ec:ad:94:76:0b:92:30:c2:12:6c:59:77:b8:
cd:81:30:4a:6d:ed:80:9d:38:12:d5:26:41:ed:fe:fc:ea:f5:
7f:d3:53:80:b0:d2:df:06:a2:f6:a9:09:70:3c:69:e7:f9:8e:
92:10:bf:44:fe:26:6e:79:85:d7:0b:ab:8e:42:7a:f1:9b:79:
a7:f9:e9:0b:8d:16:bb:0b:7b:0c:0a:16:03:dc:6f:26:4f:77:
17:56:ea:f5:d0:26:aa:66:01:32:1a:f7:37:ca:00:b9:4a:23:
ce:3f:d8:9e:c9:73:11:3f:f4:6a:ec:2d:9c:bb:03:60:83:86:
75:c4:1e:d4:46:98:f6:16:78:da:09:df:74:35:0a:aa:c6:c6:
48:63:3b:00:9c:64:ea:57:12:57:1f:72:7e:00:e0:a9:1d:39:
10:c3:75:04:7a:e1:ab:94:93:89:09:ed:6a:bc:b2:2e:08:47:
0f:d3:32:c1:2d:89:84:f1:8a:ac:e8:23:d8:2e:52:ed:0c:01:
a2:41:91:10:1b:6c:79:bd:fe:6c:81:9f:a9:3b:08:b2:d0:80:
9a:f1:2b:b3
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZ/R4HM23nwFUm5sI4FpVZn7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NmYwYzkwMDczYWZiOGVjZGU3ZTgzNDA5Y2VhYmRiOTNi
NDFhNGUwHhcNMjYwODA1MTIyMjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjY4MjJkMzJkMTRkNWI2MDA3Mjg4YWIzYTViZjk5NWVmZjcwODk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9fBk8/9qm78mIk2c3ZqoCg9+Hb5
02eosS0wu1IrHO1lKEH86qC92fVoWHSymW0pYxkFqR5C1a9tOmDtE7s7dm37QYyg
nUyE2Cb0gRfvy/W2DzQgO0q4Brwcznh7PCrRQjcqZDkTehqKBDGClXge30lPD9qo
OJJfbRG2hDjlMHKi7PGiaYHl+vlFLIXzTPnkHaoHS+8FMNJCmdHP108N+Fad6QGv
oy5FjUUJ7lUJaYAXpao1CdMCfAGjS/MckywWrhhhnKHYf3jwfl4MtX64KKT9zwi0
GrQbcl9VDIK8f1/XYHY5fnZjqEzX+1WDpRpSxgxWNNBfeTliYy+yprf6mQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFJJoItMtFNW2AHKIqzpb+ZXv9wiWMB8GA1UdIwQY
MBaAFIVvDJAHOvuOzefoNAnOq9uTtBpOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFc4TWtBYzYtNDdONS1nMENjNnIyNU8wR2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8yMDQyNjgtNjA3OC00YjUzLTk0ZDIt
NDRmZGU5NmI4YWVjLzEva21naTB5MFUxYllBY29pck9sdjVsZV8zQ0pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8yMDQyNjgtNjA3OC00YjUzLTk0ZDItNDRmZGU5NmI4YWVj
LzEvaFc4TWtBYzYtNDdONS1nMENjNnIyNU8wR2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCLYosMAwD
BAC5bl0DBAC5bl4DBALDRYwwDQYJKoZIhvcNAQELBQADggEBAC088yrKCTYGJg5N
EUpo+oBsfxd1jbzCX5J84UGFVaq/B+3lQGHyA8BA7K2UdguSMMISbFl3uM2BMEpt
7YCdOBLVJkHt/vzq9X/TU4Cw0t8GovapCXA8aef5jpIQv0T+Jm55hdcLq45CevGb
eaf56QuNFrsLewwKFgPcbyZPdxdW6vXQJqpmATIa9zfKALlKI84/2J7JcxE/9Grs
LZy7A2CDhnXEHtRGmPYWeNoJ33Q1CqrGxkhjOwCcZOpXElcfcn4A4KkdORDDdQR6
4auUk4kJ7Wq8si4IRw/TMsEtiYTxiqzoI9guUu0MAaJBkRAbbHm9/myBn6k7CLLQ
gJrxK7M=
-----END CERTIFICATE-----
Generated at Sat Aug 22 07:39:34 2026 by rpki-client