Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/Kyua1n7z6t9rnayNrgJlITrTEXs.roa
File: Kyua1n7z6t9rnayNrgJlITrTEXs.roa (raw, json)
Hash identifier: 8zdXn778gj8nNzaJR6uEPBDkGTjtozzAdya7ZtfnrDE=
Subject key identifier: 2B:2B:9A:D6:7E:F3:EA:DF:6B:9D:AC:8D:AE:02:65:21:3A:D3:11:7B
Certificate issuer: /CN=54cb8cae3b35b19c8ca337aa936ed78ec9194006
Certificate serial: 019F23689AEA6A352DED05F639DB36CEE1C7
Authority key identifier: 54:CB:8C:AE:3B:35:B1:9C:8C:A3:37:AA:93:6E:D7:8E:C9:19:40:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMuMrjs1sZyMozeqk27XjskZQAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/Kyua1n7z6t9rnayNrgJlITrTEXs.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41652
IP address blocks: 45.80.0.0/22 maxlen: 22
91.223.131.0/24 maxlen: 24
193.26.14.0/24 maxlen: 24
193.26.21.0/24 maxlen: 24
193.26.22.0/24 maxlen: 24
2a0e:3780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/VMuMrjs1sZyMozeqk27XjskZQAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/VMuMrjs1sZyMozeqk27XjskZQAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMuMrjs1sZyMozeqk27XjskZQAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9a:ea:6a:35:2d:ed:05:f6:39:db:36:ce:e1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cb8cae3b35b19c8ca337aa936ed78ec9194006
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b2b9ad67ef3eadf6b9dac8dae0265213ad3117b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:17:66:bc:01:04:fe:36:0f:88:5a:be:11:
63:cb:fa:b3:af:55:fd:89:3b:6e:e2:07:08:8e:ac:
06:8c:32:ec:aa:de:88:3a:cd:72:c1:a4:13:98:17:
74:4b:59:2e:97:9e:d6:4f:2d:e5:ad:b0:ec:dc:15:
74:f3:86:cb:79:0e:78:66:e9:4d:74:6a:3d:de:01:
3f:1d:61:c4:e8:75:c1:3c:70:8e:25:aa:b9:c2:42:
6e:ac:05:ed:97:fd:3c:ee:73:ed:4a:98:0e:6f:8f:
1f:13:6a:bb:2e:32:8e:78:b0:70:57:9c:b8:8b:7b:
23:77:e5:88:9f:1e:bb:e3:e5:54:24:f8:d8:f9:c9:
03:50:5a:f1:a6:70:6d:06:77:34:3d:1a:e7:b4:5f:
f6:95:6a:36:06:57:37:4b:66:7e:6d:79:81:a0:54:
5a:ac:ea:69:6a:1e:2a:30:1f:42:87:25:30:48:17:
dc:0c:b3:d7:9f:2b:ae:fe:56:40:4e:1d:c8:48:9f:
10:d4:f0:06:06:54:7e:b2:81:28:a9:a6:8d:f8:06:
ce:af:c2:b3:d6:c2:5d:3a:1f:82:ae:25:01:c6:8d:
46:5e:81:66:82:6b:f4:61:ba:88:a5:89:af:ae:af:
a5:1f:73:50:8e:a4:27:dd:b8:ac:39:27:07:f5:8c:
75:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2B:9A:D6:7E:F3:EA:DF:6B:9D:AC:8D:AE:02:65:21:3A:D3:11:7B
X509v3 Authority Key Identifier:
keyid:54:CB:8C:AE:3B:35:B1:9C:8C:A3:37:AA:93:6E:D7:8E:C9:19:40:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMuMrjs1sZyMozeqk27XjskZQAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/Kyua1n7z6t9rnayNrgJlITrTEXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/VMuMrjs1sZyMozeqk27XjskZQAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.0.0/22
91.223.131.0/24
193.26.14.0/24
193.26.21.0-193.26.22.255
IPv6:
2a0e:3780::/29
Signature Algorithm: sha256WithRSAEncryption
2c:02:9b:ae:3f:77:60:e3:af:10:ac:7f:90:7d:43:12:3d:bd:
7d:05:69:5c:22:d4:11:7d:fc:6e:ec:ab:32:06:7a:03:3e:02:
ad:68:b1:04:9d:65:e2:2f:7a:78:6f:2c:b2:d5:78:ae:dd:68:
d2:a4:a9:f3:6c:06:b9:7d:a9:3c:12:18:e7:c8:40:15:58:39:
9c:81:ee:5a:ed:7d:6a:80:ba:36:80:cb:0b:ad:c5:11:2a:ff:
2c:99:5e:af:87:d0:1b:51:4c:20:71:5d:08:1c:eb:ae:86:90:
d1:9a:b7:a1:08:1a:2a:0a:ab:c5:cb:75:cb:b5:a9:52:c6:d0:
95:ae:23:cb:80:c7:e6:18:7d:fc:04:3c:08:7d:30:86:30:e2:
15:d1:ec:b3:39:76:55:d6:f5:c9:f8:16:56:6c:46:d7:ab:95:
89:fd:c5:8c:63:d4:b0:57:4a:c7:14:79:0f:9e:70:30:b5:88:
c1:87:ee:a7:dd:a1:5b:3c:3f:16:6e:e6:00:d8:22:e9:0c:7b:
6f:77:d4:e2:0c:74:e2:45:11:8f:0a:05:e0:ba:8c:d8:b7:bf:
b2:1c:ca:c8:20:be:6e:11:8a:d7:dc:b6:b5:40:99:6b:d1:b6:
e8:b1:66:82:1f:4b:f3:3d:97:6f:ab:d6:cc:fa:96:26:ac:b6:
99:ca:5a:88
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAZ8jaJrqajUt7QX2Ods2zuHHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Y2I4Y2FlM2IzNWIxOWM4Y2EzMzdhYTkzNmVkNzhlYzkx
OTQwMDYwHhcNMjYwNzAyMTUxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjJiOWFkNjdlZjNlYWRmNmI5ZGFjOGRhZTAyNjUyMTNhZDMxMTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHUXZrwBBP42D4havhFjy/qzr1X9
iTtu4gcIjqwGjDLsqt6IOs1ywaQTmBd0S1kul57WTy3lrbDs3BV084bLeQ54ZulN
dGo93gE/HWHE6HXBPHCOJaq5wkJurAXtl/087nPtSpgOb48fE2q7LjKOeLBwV5y4
i3sjd+WInx674+VUJPjY+ckDUFrxpnBtBnc0PRrntF/2lWo2Blc3S2Z+bXmBoFRa
rOppah4qMB9ChyUwSBfcDLPXnyuu/lZATh3ISJ8Q1PAGBlR+soEoqaaN+AbOr8Kz
1sJdOh+CriUBxo1GXoFmgmv0YbqIpYmvrq+lH3NQjqQn3bisOScH9Yx17QIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFCsrmtZ+8+rfa52sja4CZSE60xF7MB8GA1UdIwQY
MBaAFFTLjK47NbGcjKM3qpNu147JGUAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk11TXJqczFzWnlNb3plcWsyN1hqc2taUUFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmIt
ODg1NGM4MmI1NDVkLzEvS3l1YTFuN3o2dDlybmF5TnJnSmxJVHJURVhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmItODg1NGM4MmI1NDVk
LzEvVk11TXJqczFzWnlNb3plcWsyN1hqc2taUUFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQCLVAAAwQA
W9+DAwQAwRoOMAwDBADBGhUDBADBGhYwDQQCAAIwBwMFAyoON4AwDQYJKoZIhvcN
AQELBQADggEBACwCm64/d2DjrxCsf5B9QxI9vX0FaVwi1BF9/G7sqzIGegM+Aq1o
sQSdZeIvenhvLLLVeK7daNKkqfNsBrl9qTwSGOfIQBVYOZyB7lrtfWqAujaAywut
xREq/yyZXq+H0BtRTCBxXQgc666GkNGat6EIGioKq8XLdcu1qVLG0JWuI8uAx+YY
ffwEPAh9MIYw4hXR7LM5dlXW9cn4FlZsRterlYn9xYxj1LBXSscUeQ+ecDC1iMGH
7qfdoVs8PxZu5gDYIukMe2931OIMdOJFEY8KBeC6jNi3v7Icysggvm4RitfctrVA
mWvRtuixZoIfS/M9l2+r1sz6liastpnKWog=
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:19 2026 by rpki-client