Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/KgNurRy3p_KHflleFmPo_OL5FgU.roa
File: KgNurRy3p_KHflleFmPo_OL5FgU.roa (raw, json)
Hash identifier: xWQL7K7baw8zOjkfgcsslTdp7batbfYhSNtzrD0tkew=
Subject key identifier: 2A:03:6E:AD:1C:B7:A7:F2:87:7E:59:5E:16:63:E8:FC:E2:F9:16:05
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A04DE9F459C4F9FCE1A8EC921AD12ACFA4
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/KgNurRy3p_KHflleFmPo_OL5FgU.roa
Signing time: Sat 29 Aug 2026 14:26:12 +0000
ROA not before: Sat 29 Aug 2026 14:26:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 45.15.153.0/24 maxlen: 24
45.83.150.0/24 maxlen: 24
45.83.151.0/24 maxlen: 24
45.128.55.0/24 maxlen: 24
45.128.56.0/24 maxlen: 24
45.128.73.0/24 maxlen: 24
45.128.74.0/24 maxlen: 24
45.128.75.0/24 maxlen: 24
185.203.5.0/24 maxlen: 24
185.203.6.0/24 maxlen: 24
185.203.7.0/24 maxlen: 24
194.76.136.0/24 maxlen: 24
194.76.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 16:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4d:e9:f4:59:c4:f9:fc:e1:a8:ec:92:1a:d1:2a:cf:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 29 14:26:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a036ead1cb7a7f2877e595e1663e8fce2f91605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:22:33:07:99:01:60:b4:ad:5e:e6:fa:33:92:
df:ba:f8:51:77:91:e0:e8:ce:85:6e:bd:3e:c4:b3:
45:e4:b5:9c:65:65:25:0a:df:27:19:35:23:08:27:
34:b9:49:e4:62:8d:1e:b3:58:8f:78:4a:a2:5d:da:
14:92:ea:6b:27:d7:35:24:90:b1:76:b5:21:83:50:
27:91:3c:5f:35:16:83:8d:f7:f6:a6:a3:c0:2c:96:
43:bd:50:b0:03:c3:67:48:4b:cd:e0:b1:45:84:bc:
58:9b:47:71:30:b2:42:73:e3:2f:dc:a0:fb:86:e9:
d8:4c:3e:77:93:c4:5a:6b:70:ba:24:ed:03:f1:fe:
fd:4f:0b:39:c0:42:2a:d7:2b:cf:ad:60:db:d0:47:
9d:af:b3:19:57:95:23:44:08:0c:e0:37:ae:fd:94:
4f:40:07:31:7d:a1:99:92:84:fe:81:3e:3c:91:7b:
a1:e6:80:c0:5b:b4:f6:48:5f:12:88:bf:52:6e:60:
3d:f1:d7:b8:4b:5a:54:0a:60:e7:d5:45:9e:3a:39:
9f:b9:24:31:c1:61:a9:ad:97:94:51:f8:46:24:e0:
3b:60:e2:f2:2c:9e:14:af:85:e0:78:46:86:75:3b:
85:d2:60:1d:f3:66:6e:ea:cc:f3:06:81:33:6d:63:
74:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:03:6E:AD:1C:B7:A7:F2:87:7E:59:5E:16:63:E8:FC:E2:F9:16:05
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/KgNurRy3p_KHflleFmPo_OL5FgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.153.0/24
45.83.150.0/23
45.128.55.0-45.128.56.255
45.128.73.0-45.128.75.255
185.203.5.0-185.203.7.255
194.76.136.0/24
194.76.138.0/24
Signature Algorithm: sha256WithRSAEncryption
27:9f:93:fd:83:53:48:60:51:f6:ae:65:da:0b:2f:1b:65:e2:
1e:19:22:2e:c4:f2:5e:bf:18:4b:81:10:91:23:ef:df:46:33:
8e:1e:42:6d:ff:d2:af:95:31:24:c5:1a:fd:d4:26:c0:71:9d:
a2:36:8a:d7:9a:ce:ed:42:cb:81:eb:eb:79:c9:4f:cd:28:d7:
62:be:42:19:c5:ec:0e:bc:f5:4f:b9:89:cd:db:62:f9:62:a5:
57:dc:5c:7f:4c:96:3f:55:74:43:51:60:31:2e:24:0a:82:b7:
30:13:18:81:70:ae:8b:53:9e:38:33:4d:d9:1f:60:79:be:a8:
17:8e:ad:f0:f0:b9:7f:90:c7:de:46:03:3f:2e:20:c1:fc:99:
e0:69:ab:a9:04:fa:f9:ff:ca:9e:e8:9f:4f:b3:3d:74:e9:c4:
46:cf:22:9c:4e:25:88:47:8e:be:25:1c:25:89:90:54:e0:ea:
01:68:c8:e4:f4:d5:61:31:38:ef:48:a9:d9:49:d5:22:2d:46:
bc:3d:72:ed:60:42:4d:08:1b:e7:e6:64:49:6d:af:ea:98:18:
20:da:92:b9:cd:d1:b4:38:ca:8b:76:3d:29:24:65:50:85:21:
fa:28:66:59:e7:27:68:36:ac:c2:35:61:00:73:f0:a0:e9:46:
c4:63:69:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 01:21:18 2026 by rpki-client