Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/KXQkF5w1v9WoWvQU0PqYGFhwL2g.roa
File: KXQkF5w1v9WoWvQU0PqYGFhwL2g.roa (raw, json)
Hash identifier: Xh+4+yJUjMVylLWHtPFrSKc8lfYo10O1G2gWmHsHHoA=
Subject key identifier: 29:74:24:17:9C:35:BF:D5:A8:5A:F4:14:D0:FA:98:18:58:70:2F:68
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 01A0EDD38DB11DFCDEC96FFF32C6592AA6F7
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/KXQkF5w1v9WoWvQU0PqYGFhwL2g.roa
Signing time: Tue 29 Sep 2026 15:40:59 +0000
ROA not before: Tue 29 Sep 2026 15:40:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56707
IP address blocks: 193.232.40.0/22 maxlen: 24
193.232.46.0/24 maxlen: 24
193.232.49.0/24 maxlen: 24
193.232.92.0/24 maxlen: 24
193.232.107.0/24 maxlen: 24
193.232.110.0/24 maxlen: 24
193.232.165.0/24 maxlen: 24
195.208.160.0/22 maxlen: 24
212.192.195.0/24 maxlen: 24
212.192.196.0/22 maxlen: 24
212.192.200.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:d3:8d:b1:1d:fc:de:c9:6f:ff:32:c6:59:2a:a6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Sep 29 15:40:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=297424179c35bfd5a85af414d0fa981858702f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:79:3b:6d:20:1d:e5:b0:23:06:a8:c5:da:dd:
72:44:22:fb:ec:b8:26:01:9e:90:0d:46:f1:42:f2:
d2:ed:56:1e:0b:5e:44:41:90:ac:5a:52:15:b0:18:
99:7f:04:d0:c3:41:e3:f6:a4:0c:88:58:bf:2d:95:
a4:1b:75:a7:de:48:b3:da:35:7e:7c:39:94:2c:ab:
88:b1:5b:83:6d:e8:81:7e:62:85:70:a7:b8:7b:e3:
22:41:7a:36:94:8a:54:b1:54:41:e0:b5:80:fe:b0:
0f:ab:01:65:a6:f8:fb:36:46:5d:0b:c2:d9:e8:82:
e4:c7:cc:4e:4d:ba:69:f9:2a:05:ce:2e:e5:b5:f9:
cf:33:fa:02:3d:81:f7:d4:e5:52:b3:9d:ea:4a:b8:
88:a1:16:ca:6f:18:0d:2b:3c:3e:28:7c:6e:2e:75:
fa:42:85:25:6f:5d:f7:74:9c:3b:fb:d9:49:76:da:
20:d7:ae:d6:8a:bd:7d:68:a7:6f:e2:82:e6:1d:93:
c5:e6:7a:b1:b6:40:52:db:9e:01:fc:54:14:e9:61:
23:05:73:c9:37:14:e7:c9:d9:12:ae:24:e4:41:d8:
c2:59:56:71:37:89:f9:ec:4a:de:9a:a8:f7:42:ef:
61:d7:ad:41:be:75:f1:2f:35:a4:e4:8f:38:57:54:
c5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:74:24:17:9C:35:BF:D5:A8:5A:F4:14:D0:FA:98:18:58:70:2F:68
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/KXQkF5w1v9WoWvQU0PqYGFhwL2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.40.0/22
193.232.46.0/24
193.232.49.0/24
193.232.92.0/24
193.232.107.0/24
193.232.110.0/24
193.232.165.0/24
195.208.160.0/22
212.192.195.0-212.192.201.255
Signature Algorithm: sha256WithRSAEncryption
76:6f:06:22:a9:6f:9e:93:48:56:75:d2:20:c4:a8:5d:60:ff:
8a:3f:ea:87:1b:f0:50:5b:0d:c5:a0:da:fa:fe:92:7a:f5:47:
b6:e6:8f:9d:b2:a4:71:48:86:70:f1:22:02:cf:4a:b6:51:90:
b1:b2:97:58:06:5a:d8:98:75:5a:c2:ba:ae:a3:22:3b:ec:99:
a9:73:90:6c:6f:31:1e:ff:c1:f5:08:b6:0f:5d:41:c5:ba:13:
83:f5:ec:87:6d:4f:4e:f0:f9:e1:28:4e:e9:3d:32:73:c2:d9:
1e:39:72:0b:0c:13:b9:da:64:89:32:b6:a8:1a:d4:fb:df:bb:
4f:d0:4c:38:e0:0a:b5:c2:c5:75:27:34:22:90:dc:ec:0d:a2:
2d:0c:d8:ae:d2:6c:af:19:49:33:91:7b:68:ff:da:00:f3:1c:
0e:da:0b:c1:b3:ec:c2:9a:a5:b5:9a:dd:9b:1a:39:06:fb:33:
d7:f2:8d:47:d2:e4:bf:ef:9f:72:34:dc:bf:1f:cf:92:60:3a:
5d:d0:7d:32:b0:c6:a3:bc:f3:e6:26:c6:38:6a:47:b1:df:93:
e7:61:e2:66:13:ad:30:ce:59:6d:02:32:88:77:e8:af:70:d6:
63:51:44:97:7e:ba:11:5f:3f:bb:80:ba:9b:c3:70:50:0a:33:
87:e6:7c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:16:17 2026 by rpki-client