Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/_KYE_stCSx0rJkyhe2kaYHwY1yQ.roa
File: _KYE_stCSx0rJkyhe2kaYHwY1yQ.roa (raw, json)
Hash identifier: SVDZayo1vRR6C9CEr2Y02TySWICy6qTYmYRW1EPFXaQ=
Subject key identifier: FC:A6:04:FE:CB:42:4B:1D:2B:26:4C:A1:7B:69:1A:60:7C:18:D7:24
Certificate issuer: /CN=4459120809c23bf3033e3f573995276f0c7a2533
Certificate serial: 01A15DDCA4CB5ABB0FCA29E9DD3F93E41A3D
Authority key identifier: 44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/_KYE_stCSx0rJkyhe2kaYHwY1yQ.roa
Signing time: Wed 21 Oct 2026 09:48:23 +0000
ROA not before: Wed 21 Oct 2026 09:48:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33991
IP address blocks: 5.253.144.0/22 maxlen: 22
45.143.164.0/23 maxlen: 23
45.147.120.0/22 maxlen: 22
84.22.136.0/21 maxlen: 21
84.22.144.0/22 maxlen: 22
84.22.152.0/21 maxlen: 21
89.22.166.0/23 maxlen: 23
89.22.174.0/23 maxlen: 23
89.22.177.0/24 maxlen: 24
89.31.104.0/22 maxlen: 22
89.31.108.0/22 maxlen: 22
91.132.20.0/22 maxlen: 22
91.200.85.0/24 maxlen: 24
91.220.87.0/24 maxlen: 24
91.222.216.0/22 maxlen: 22
146.19.253.0/24 maxlen: 24
171.33.244.0/22 maxlen: 22
176.118.32.0/24 maxlen: 24
185.124.164.0/22 maxlen: 22
194.28.194.0/24 maxlen: 24
2a00:b940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 19:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:dc:a4:cb:5a:bb:0f:ca:29:e9:dd:3f:93:e4:1a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459120809c23bf3033e3f573995276f0c7a2533
Validity
Not Before: Oct 21 09:48:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fca604fecb424b1d2b264ca17b691a607c18d724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:d2:0f:13:d6:74:b2:65:f3:b6:9d:65:e3:
b8:62:58:6b:5c:53:35:82:87:9f:c8:5e:81:f8:81:
00:6d:54:89:ac:a4:42:91:42:1e:76:4b:80:5d:5f:
c8:f6:a0:ae:b6:64:4a:dd:13:f0:80:e6:26:87:0f:
2e:c5:59:06:9f:27:eb:4b:85:25:4d:76:8e:f8:86:
aa:49:25:b2:9c:1a:51:4a:a7:f6:eb:63:7b:ee:0e:
f3:52:45:5c:4e:09:68:9b:95:dd:c1:cc:0f:c2:f4:
db:62:e6:77:ca:c3:27:92:2c:12:bd:0f:19:3b:bf:
88:d6:00:ca:ab:82:c4:d0:12:d7:27:b8:cc:55:96:
d1:73:35:71:53:d2:65:81:bb:8a:ce:3c:f7:ee:07:
e8:fc:ee:8e:4c:9d:1d:ed:d8:8d:46:89:1b:5a:7b:
84:94:d1:ad:df:c4:7c:a8:3a:cd:55:a0:d0:4b:1b:
0b:3c:8f:51:b5:dc:b9:e2:ec:91:11:64:3f:b6:dc:
aa:ca:9e:7e:ae:6a:5b:42:b6:2a:7f:04:23:f7:db:
6e:fa:e2:bc:b8:98:09:6c:72:c0:87:75:43:94:15:
44:e8:08:b0:63:f5:0f:76:11:4a:dc:69:c9:fe:d2:
70:b9:2a:0f:c6:05:6c:fa:7a:fe:c3:a8:6c:4d:6e:
57:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A6:04:FE:CB:42:4B:1D:2B:26:4C:A1:7B:69:1A:60:7C:18:D7:24
X509v3 Authority Key Identifier:
keyid:44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/_KYE_stCSx0rJkyhe2kaYHwY1yQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.144.0/22
45.143.164.0/23
45.147.120.0/22
84.22.136.0-84.22.147.255
84.22.152.0/21
89.22.166.0/23
89.22.174.0/23
89.22.177.0/24
89.31.104.0/21
91.132.20.0/22
91.200.85.0/24
91.220.87.0/24
91.222.216.0/22
146.19.253.0/24
171.33.244.0/22
176.118.32.0/24
185.124.164.0/22
194.28.194.0/24
IPv6:
2a00:b940::/32
Signature Algorithm: sha256WithRSAEncryption
62:12:80:0c:71:b2:25:65:59:7e:0e:ec:d9:c8:4a:e3:1a:d3:
bf:94:5e:34:18:b1:04:bb:1d:a5:9c:c5:ff:da:66:ea:b3:35:
d0:05:28:1c:41:d4:a8:81:63:88:77:07:3f:bd:d4:6c:b1:51:
23:6f:23:7e:79:56:da:bb:c7:4a:4d:c8:ea:05:1e:21:0c:d6:
e2:f2:2d:a5:15:e9:dc:5a:fb:29:ae:fa:af:8c:77:9f:d1:c9:
d8:8b:05:e5:10:83:5b:f2:f9:80:75:fb:50:68:2c:26:73:49:
0a:9e:d2:e2:81:ba:94:bd:a0:be:e4:76:b4:b8:3a:68:fc:b5:
28:cf:7c:ae:35:ee:fa:21:ec:f5:8b:4e:c2:fb:e6:3f:a5:97:
f6:93:e3:f0:b9:1c:f5:76:b1:fc:93:0b:37:1c:64:b1:ed:c1:
d0:d0:31:3c:9c:0f:64:f6:25:0e:9f:49:44:05:e6:c2:7f:ef:
de:91:c3:ad:82:98:f0:e1:f9:2f:56:4b:7a:c1:98:5b:18:61:
86:df:94:15:70:b9:cb:18:d0:92:f1:2a:f3:fd:33:f5:50:a8:
92:87:ef:82:40:47:44:17:6c:d1:24:db:a6:3b:13:b5:a0:be:
0e:21:3f:de:3a:57:23:83:47:be:c9:0e:8f:c0:f3:36:02:f3:
c2:4c:71:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 04:43:44 2026 by rpki-client