Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/kEWYuzqLU76QZcvvZPYGPkenZy8.roa
File: kEWYuzqLU76QZcvvZPYGPkenZy8.roa (raw, json)
Hash identifier: lz+bUWBGy33PHB+07AaO5ioHgu6hiBFFhbJMBQy2U1g=
Subject key identifier: 90:45:98:BB:3A:8B:53:BE:90:65:CB:EF:64:F6:06:3E:47:A7:67:2F
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A13178703ACE688DA71EA41C399516D491
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/kEWYuzqLU76QZcvvZPYGPkenZy8.roa
Signing time: Mon 12 Oct 2026 18:55:38 +0000
ROA not before: Mon 12 Oct 2026 18:55:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41745
IP address blocks: 5.180.31.0/24 maxlen: 24
45.9.18.0/24 maxlen: 24
45.9.19.0/24 maxlen: 24
45.66.165.0/24 maxlen: 24
45.66.166.0/24 maxlen: 24
45.66.167.0/24 maxlen: 24
45.136.116.0/24 maxlen: 24
45.149.113.0/24 maxlen: 24
45.149.114.0/24 maxlen: 24
85.208.108.0/24 maxlen: 24
88.218.93.0/24 maxlen: 24
139.28.233.0/24 maxlen: 24
141.98.161.0/24 maxlen: 24
141.98.162.0/24 maxlen: 24
141.98.163.0/24 maxlen: 24
141.98.164.0/24 maxlen: 24
141.98.165.0/24 maxlen: 24
141.98.166.0/24 maxlen: 24
185.106.97.0/24 maxlen: 24
185.106.98.0/24 maxlen: 24
185.106.99.0/24 maxlen: 24
185.153.180.0/24 maxlen: 24
185.153.181.0/24 maxlen: 24
185.153.183.0/24 maxlen: 24
185.161.69.0/24 maxlen: 24
185.161.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:78:70:3a:ce:68:8d:a7:1e:a4:1c:39:95:16:d4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 12 18:55:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=904598bb3a8b53be9065cbef64f6063e47a7672f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:82:e2:dc:72:a5:cc:26:55:6b:f1:79:94:bd:
42:29:71:78:48:a4:af:5c:08:03:ec:86:da:76:e1:
85:8d:ad:68:28:02:0c:cf:c3:61:95:1c:f7:1e:78:
54:85:db:37:91:6c:3b:f5:db:b3:9e:7f:74:75:66:
2c:d8:a3:e0:78:77:0c:b5:15:80:d7:c3:12:59:90:
95:76:c7:19:aa:33:35:24:2c:ad:20:4d:cf:2a:8c:
6b:78:bd:05:f1:9f:a0:a7:46:35:6d:b4:4f:26:fc:
3c:79:01:4b:a2:f2:04:14:3f:d8:59:e6:22:c1:5b:
4b:a3:89:35:d6:a3:48:bb:7c:8f:a5:bf:d9:84:d8:
50:74:50:25:a4:ce:e3:36:62:6d:48:44:37:da:75:
b4:87:7e:80:62:97:bb:2f:15:a5:8d:7e:84:2b:6c:
71:71:05:bf:56:74:8c:de:3a:6d:59:68:bb:79:0a:
cd:f5:b3:3a:82:60:19:41:94:da:32:2f:83:b2:e9:
34:f9:7e:6a:33:e2:0e:a8:00:75:89:a5:42:a5:81:
55:1b:b9:23:e2:d2:9d:a6:c8:3a:5b:04:04:97:b9:
12:7f:e8:73:74:cf:2d:a9:74:00:18:8b:f5:24:32:
12:ad:34:70:5b:c4:74:08:7f:f7:3b:bf:a6:06:e9:
36:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:45:98:BB:3A:8B:53:BE:90:65:CB:EF:64:F6:06:3E:47:A7:67:2F
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/kEWYuzqLU76QZcvvZPYGPkenZy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.31.0/24
45.9.18.0/23
45.66.165.0-45.66.167.255
45.136.116.0/24
45.149.113.0-45.149.114.255
85.208.108.0/24
88.218.93.0/24
139.28.233.0/24
141.98.161.0-141.98.166.255
185.106.97.0-185.106.99.255
185.153.180.0/23
185.153.183.0/24
185.161.69.0/24
185.161.71.0/24
Signature Algorithm: sha256WithRSAEncryption
20:50:26:3d:6d:ee:e4:bd:64:7d:c8:12:3f:3d:ff:2b:b3:6b:
62:6d:92:5e:9e:f4:d6:66:67:a4:3a:73:af:28:81:6a:27:12:
84:42:eb:4f:24:8a:1c:7c:7e:35:26:7f:11:2f:09:2b:3d:ba:
b1:80:a5:21:3c:ac:e1:fc:9b:ac:4a:8e:8a:46:ec:1a:78:df:
5d:7d:ce:06:dd:8a:03:90:f4:01:40:97:ac:5b:d3:5a:69:43:
59:aa:57:24:65:3b:a5:3f:41:0d:f4:87:f7:f4:38:6a:38:d4:
5a:53:c6:d8:ec:6a:9d:fa:91:5a:c8:ca:61:c9:e5:91:3c:b3:
c1:7e:6f:d9:5a:f8:f0:81:18:03:31:1a:8a:fe:65:1a:ef:f8:
02:9c:ed:07:2c:63:35:f0:05:f4:be:5c:ef:7f:c9:95:28:6c:
6a:24:95:0d:44:94:51:ec:fa:c6:52:f3:6e:de:16:c3:90:be:
14:4c:b4:c6:6b:7d:24:71:6c:50:17:07:9e:d7:b5:86:e3:99:
06:1d:cb:0f:ee:34:6f:5f:90:38:8e:ec:89:e1:ad:f2:7d:37:
12:f5:ec:cf:d3:ca:cb:c0:ab:e1:2e:93:07:60:1a:13:2a:7e:
94:13:87:86:5b:4c:7b:d7:67:51:86:00:4e:d9:80:22:49:9b:
a6:1f:46:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:24 2026 by rpki-client