Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/Kvof5bdVycABppbkMjES1pQM4_0.roa
File: Kvof5bdVycABppbkMjES1pQM4_0.roa (raw, json)
Hash identifier: x/BrMTXOQ3yF17NLgQnBsxXByoEWdBzmDdMTFK4cs9E=
Subject key identifier: 2A:FA:1F:E5:B7:55:C9:C0:01:A6:96:E4:32:31:12:D6:94:0C:E3:FD
Certificate issuer: /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial: 01A05BF70CEBA3891FB74BD30E0FA6C31840
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/Kvof5bdVycABppbkMjES1pQM4_0.roa
Signing time: Tue 01 Sep 2026 07:55:12 +0000
ROA not before: Tue 01 Sep 2026 07:55:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12859
IP address blocks: 87.251.32.0/19 maxlen: 19
87.251.32.0/24 maxlen: 24
87.251.33.0/24 maxlen: 24
87.251.34.0/24 maxlen: 24
87.251.35.0/24 maxlen: 24
87.251.36.0/24 maxlen: 24
87.251.37.0/24 maxlen: 24
87.251.38.0/24 maxlen: 24
87.251.39.0/24 maxlen: 24
87.251.40.0/24 maxlen: 24
87.251.41.0/24 maxlen: 24
87.251.42.0/24 maxlen: 24
87.251.43.0/24 maxlen: 24
87.251.44.0/24 maxlen: 24
87.251.45.0/24 maxlen: 24
87.251.46.0/24 maxlen: 24
87.251.47.0/24 maxlen: 24
87.251.48.0/24 maxlen: 24
87.251.49.0/24 maxlen: 24
87.251.50.0/24 maxlen: 24
87.251.51.0/24 maxlen: 24
87.251.52.0/24 maxlen: 24
87.251.53.0/24 maxlen: 24
87.251.54.0/24 maxlen: 24
87.251.55.0/24 maxlen: 24
87.251.56.0/24 maxlen: 24
87.251.57.0/24 maxlen: 24
87.251.58.0/24 maxlen: 24
87.251.59.0/24 maxlen: 24
87.251.60.0/24 maxlen: 24
87.251.61.0/24 maxlen: 24
87.251.62.0/24 maxlen: 24
87.251.63.0/24 maxlen: 24
185.62.16.0/22 maxlen: 24
185.62.16.0/24 maxlen: 24
185.62.17.0/24 maxlen: 24
185.62.18.0/24 maxlen: 24
185.62.19.0/24 maxlen: 24
193.109.122.0/24 maxlen: 24
212.72.232.0/21 maxlen: 21
212.72.232.0/24 maxlen: 24
212.72.233.0/24 maxlen: 24
212.72.234.0/24 maxlen: 24
212.72.235.0/24 maxlen: 24
212.72.236.0/24 maxlen: 24
212.72.237.0/24 maxlen: 24
212.72.238.0/24 maxlen: 24
212.72.239.0/24 maxlen: 24
212.72.240.0/20 maxlen: 20
212.72.240.0/24 maxlen: 24
212.72.241.0/24 maxlen: 24
212.72.242.0/24 maxlen: 24
212.72.243.0/24 maxlen: 24
212.72.244.0/24 maxlen: 24
212.72.245.0/24 maxlen: 24
212.72.246.0/24 maxlen: 24
212.72.247.0/24 maxlen: 24
212.72.248.0/24 maxlen: 24
212.72.249.0/24 maxlen: 24
212.72.250.0/24 maxlen: 24
212.72.251.0/24 maxlen: 24
212.72.252.0/24 maxlen: 24
212.72.253.0/24 maxlen: 24
212.72.254.0/24 maxlen: 24
212.72.255.0/24 maxlen: 24
212.114.96.0/19 maxlen: 19
212.114.96.0/24 maxlen: 24
212.114.97.0/24 maxlen: 24
212.114.98.0/24 maxlen: 24
212.114.99.0/24 maxlen: 24
212.114.100.0/24 maxlen: 24
212.114.101.0/24 maxlen: 24
212.114.102.0/24 maxlen: 24
212.114.103.0/24 maxlen: 24
212.114.104.0/24 maxlen: 24
212.114.105.0/24 maxlen: 24
212.114.106.0/24 maxlen: 24
212.114.107.0/24 maxlen: 24
212.114.108.0/24 maxlen: 24
212.114.109.0/24 maxlen: 24
212.114.110.0/24 maxlen: 24
212.114.111.0/24 maxlen: 24
212.114.112.0/24 maxlen: 24
212.114.113.0/24 maxlen: 24
212.114.114.0/24 maxlen: 24
212.114.115.0/24 maxlen: 24
212.114.116.0/24 maxlen: 24
212.114.117.0/24 maxlen: 24
212.114.118.0/24 maxlen: 24
212.114.119.0/24 maxlen: 24
212.114.120.0/24 maxlen: 24
212.114.121.0/24 maxlen: 24
212.114.122.0/24 maxlen: 24
212.114.123.0/24 maxlen: 24
212.114.124.0/24 maxlen: 24
212.114.125.0/24 maxlen: 24
212.114.126.0/24 maxlen: 24
212.114.127.0/24 maxlen: 24
213.136.0.0/19 maxlen: 19
213.136.0.0/24 maxlen: 24
213.136.1.0/24 maxlen: 24
213.136.2.0/24 maxlen: 24
213.136.3.0/24 maxlen: 24
213.136.4.0/24 maxlen: 24
213.136.5.0/24 maxlen: 24
213.136.6.0/24 maxlen: 24
213.136.7.0/24 maxlen: 24
213.136.8.0/24 maxlen: 24
213.136.9.0/24 maxlen: 24
213.136.10.0/24 maxlen: 24
213.136.11.0/24 maxlen: 24
213.136.12.0/24 maxlen: 24
213.136.13.0/24 maxlen: 24
213.136.14.0/24 maxlen: 24
213.136.15.0/24 maxlen: 24
213.136.16.0/24 maxlen: 24
213.136.17.0/24 maxlen: 24
213.136.18.0/24 maxlen: 24
213.136.19.0/24 maxlen: 24
213.136.20.0/24 maxlen: 24
213.136.21.0/24 maxlen: 24
213.136.22.0/24 maxlen: 24
213.136.23.0/24 maxlen: 24
213.136.24.0/24 maxlen: 24
213.136.25.0/24 maxlen: 24
213.136.26.0/24 maxlen: 24
213.136.27.0/24 maxlen: 24
213.136.28.0/24 maxlen: 24
213.136.29.0/24 maxlen: 24
213.136.30.0/24 maxlen: 24
213.136.31.0/24 maxlen: 24
213.154.224.0/19 maxlen: 19
213.154.224.0/24 maxlen: 24
213.154.225.0/24 maxlen: 24
213.154.226.0/24 maxlen: 24
213.154.227.0/24 maxlen: 24
213.154.228.0/24 maxlen: 24
213.154.229.0/24 maxlen: 24
213.154.230.0/24 maxlen: 24
213.154.231.0/24 maxlen: 24
213.154.232.0/24 maxlen: 24
213.154.233.0/24 maxlen: 24
213.154.234.0/24 maxlen: 24
213.154.235.0/24 maxlen: 24
213.154.236.0/24 maxlen: 24
213.154.237.0/24 maxlen: 24
213.154.238.0/24 maxlen: 24
213.154.239.0/24 maxlen: 24
213.154.240.0/24 maxlen: 24
213.154.241.0/24 maxlen: 24
213.154.242.0/24 maxlen: 24
213.154.243.0/24 maxlen: 24
213.154.244.0/24 maxlen: 24
213.154.245.0/24 maxlen: 24
213.154.246.0/24 maxlen: 24
213.154.247.0/24 maxlen: 24
213.154.248.0/24 maxlen: 24
213.154.249.0/24 maxlen: 24
213.154.250.0/24 maxlen: 24
213.154.251.0/24 maxlen: 24
213.154.252.0/24 maxlen: 24
213.154.253.0/24 maxlen: 24
213.154.254.0/24 maxlen: 24
213.154.255.0/24 maxlen: 24
2001:7b8::/29 maxlen: 48
2001:7be::/48 maxlen: 48
2001:7bf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:f7:0c:eb:a3:89:1f:b7:4b:d3:0e:0f:a6:c3:18:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
Validity
Not Before: Sep 1 07:55:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2afa1fe5b755c9c001a696e4323112d6940ce3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:66:b5:84:c9:c0:a5:8d:cd:98:59:11:b8:
86:39:01:10:58:d6:40:00:ad:24:10:f4:03:70:df:
36:37:8b:93:09:56:92:1f:d3:50:ad:1e:ec:f6:57:
82:9b:4c:e6:f6:23:94:d9:2e:eb:ff:20:e7:35:b4:
d9:e2:46:bf:21:73:d4:48:cf:0b:d8:ff:a6:a7:4f:
f6:c4:f2:b0:b3:5f:0d:77:a3:b8:06:c0:f2:59:c7:
22:fb:96:2b:51:df:f3:13:ae:77:04:59:02:ed:c1:
32:2f:13:fe:78:46:4d:c0:d1:63:3c:c1:7b:56:44:
5b:0f:c3:ca:f9:c6:93:2e:5f:76:41:a6:e8:7b:00:
76:0b:0f:37:f5:a8:2c:73:81:28:da:1a:66:3e:e7:
4d:14:ce:3a:4e:19:7f:83:61:2c:d2:df:8e:aa:0d:
c4:08:68:31:7b:e0:50:57:5c:26:d6:7d:8c:8e:a3:
4e:77:19:1e:14:04:93:52:1b:1d:ee:f3:48:a4:e3:
d0:ef:4f:17:5c:a0:6a:c8:d6:d2:00:53:08:83:1b:
4d:bc:3a:18:72:46:4b:9a:9d:67:64:ec:da:29:86:
f5:53:6e:d4:ac:2b:36:25:7c:48:33:d4:e0:06:fe:
74:83:10:a2:72:30:84:7d:6d:55:e8:7d:81:a2:d6:
b2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FA:1F:E5:B7:55:C9:C0:01:A6:96:E4:32:31:12:D6:94:0C:E3:FD
X509v3 Authority Key Identifier:
keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/Kvof5bdVycABppbkMjES1pQM4_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.32.0/19
185.62.16.0/22
193.109.122.0/24
212.72.232.0-212.72.255.255
212.114.96.0/19
213.136.0.0/19
213.154.224.0/19
IPv6:
2001:7b8::/29
Signature Algorithm: sha256WithRSAEncryption
66:cc:17:24:95:6c:e9:3f:86:c1:7d:8e:16:71:a5:61:22:95:
fe:73:34:48:c9:1e:a0:18:42:ba:bc:98:61:ea:89:d6:ec:d1:
e4:22:bf:16:9c:4e:d9:05:71:a0:4e:16:52:f0:61:28:ba:b4:
7e:dc:e9:65:f8:eb:6f:4a:07:d1:b2:a7:7e:2d:65:30:81:aa:
ac:91:68:42:90:cc:5c:35:ac:28:43:3d:eb:79:1e:84:79:6c:
42:7d:a0:e2:79:7d:58:3a:17:35:2e:6b:a5:2e:98:56:6c:5d:
70:09:1f:75:ff:b1:11:cb:d9:89:11:5f:df:f7:97:fe:97:0b:
a7:36:74:84:52:8f:37:8c:be:7c:27:69:cd:56:ad:17:2d:fc:
1d:e9:bb:ca:a0:23:19:ff:34:cb:55:22:bd:94:eb:bc:83:83:
72:9e:71:bd:74:80:81:02:f1:87:d6:bc:1f:8f:ce:bc:49:81:
43:c7:ec:a5:4a:fe:e1:e9:f1:85:de:b4:95:fb:88:4e:bf:cd:
f1:c3:d6:3c:16:f0:6b:57:0d:9b:11:da:00:1e:da:7e:5d:6d:
25:39:54:25:4e:a6:6a:f9:1c:8b:65:e7:b8:8c:b5:0a:e5:38:
30:3d:f7:77:8f:55:1d:26:45:6e:aa:46:76:81:7c:8d:e0:33:
ed:0a:75:7f
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAaBb9wzro4kft0vTDg+mwxhAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYWQwMzk3NDg3Nzk5ZTIxMThmZjRjYmNmOGYxNTk3NDdm
MzU4OTEwHhcNMjYwOTAxMDc1NTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWZhMWZlNWI3NTVjOWMwMDFhNjk2ZTQzMjMxMTJkNjk0MGNlM2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+lmtYTJwKWNzZhZEbiGOQEQWNZA
AK0kEPQDcN82N4uTCVaSH9NQrR7s9leCm0zm9iOU2S7r/yDnNbTZ4ka/IXPUSM8L
2P+mp0/2xPKws18Nd6O4BsDyWcci+5YrUd/zE653BFkC7cEyLxP+eEZNwNFjPMF7
VkRbD8PK+caTLl92QaboewB2Cw839agsc4Eo2hpmPudNFM46Thl/g2Es0t+Oqg3E
CGgxe+BQV1wm1n2MjqNOdxkeFASTUhsd7vNIpOPQ708XXKBqyNbSAFMIgxtNvDoY
ckZLmp1nZOzaKYb1U27UrCs2JXxIM9TgBv50gxCicjCEfW1V6H2BotaypQIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFCr6H+W3VcnAAaaW5DIxEtaUDOP9MB8GA1UdIwQY
MBaAFEytA5dId5niEY/0y8+PFZdH81iRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEswRGwwaDNtZUlSal9UTHo0OFZsMGZ6V0pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lYTAxOTYtYWI3OS00MmNmLWFiMmIt
ZmM0YjAzNzEwYWUwLzEvS3ZvZjViZFZ5Y0FCcHBia01qRVMxcFFNNF8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lYTAxOTYtYWI3OS00MmNmLWFiMmItZmM0YjAzNzEwYWUw
LzEvVEswRGwwaDNtZUlSal9UTHo0OFZsMGZ6V0pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDA3BAIAATAxAwQFV/sgAwQC
uT4QAwQAwW16MAsDBAPUSOgDAwDUSAMEBdRyYAMEBdWIAAMEBdWa4DANBAIAAjAH
AwUDIAEHuDANBgkqhkiG9w0BAQsFAAOCAQEAZswXJJVs6T+GwX2OFnGlYSKV/nM0
SMkeoBhCuryYYeqJ1uzR5CK/FpxO2QVxoE4WUvBhKLq0ftzpZfjrb0oH0bKnfi1l
MIGqrJFoQpDMXDWsKEM963kehHlsQn2g4nl9WDoXNS5rpS6YVmxdcAkfdf+xEcvZ
iRFf3/eX/pcLpzZ0hFKPN4y+fCdpzVatFy38Hem7yqAjGf80y1UivZTrvIODcp5x
vXSAgQLxh9a8H4/OvEmBQ8fspUr+4enxhd60lfuITr/N8cPWPBbwa1cNmxHaAB7a
fl1tJTlUJU6mavkci2XnuIy1CuU4MD33d49VHSZFbqpGdoF8jeAz7Qp1fw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:13:59 2026 by rpki-client