Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/KIh3iVyzYzBFwGCfMvIVwpDbwps.roa
File: KIh3iVyzYzBFwGCfMvIVwpDbwps.roa (raw, json)
Hash identifier: 0aqbny00NM5+aliDEhOtMTVMWp3rSs0L91g1Lzq7VNE=
Subject key identifier: 28:88:77:89:5C:B3:63:30:45:C0:60:9F:32:F2:15:C2:90:DB:C2:9B
Certificate issuer: /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial: 019DC8C2DC07CBA0E915E0A8F53B9E9FCAE4
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/KIh3iVyzYzBFwGCfMvIVwpDbwps.roa
Signing time: Sun 26 Apr 2026 07:48:26 +0000
ROA not before: Sun 26 Apr 2026 07:48:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212939
IP address blocks: 185.66.228.0/22 maxlen: 22
185.66.228.0/24 maxlen: 24
185.66.229.0/24 maxlen: 24
185.66.230.0/24 maxlen: 24
185.66.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c8:c2:dc:07:cb:a0:e9:15:e0:a8:f5:3b:9e:9f:ca:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Validity
Not Before: Apr 26 07:48:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=288877895cb3633045c0609f32f215c290dbc29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:1b:ef:d4:0e:80:aa:54:89:3e:43:c7:c7:
15:5f:7a:6c:d3:37:68:e3:b0:6d:88:d1:13:db:b1:
5f:00:65:d2:09:a0:83:41:ae:dd:4b:db:22:fe:fe:
d7:d1:80:8b:41:25:78:a4:e0:6c:ad:33:91:9a:15:
bc:17:fc:3d:99:16:e7:4d:e5:84:d6:7c:38:f2:23:
4f:04:8d:5d:36:91:06:f1:01:e4:35:ab:a4:31:38:
5b:6d:23:fe:c0:75:7f:de:8a:cb:e5:64:cf:76:34:
b3:a6:f3:e6:ff:71:91:bc:27:4b:ba:5a:f0:27:29:
df:1a:8f:6d:14:bf:29:11:68:26:86:65:02:e7:b8:
3f:e6:7d:62:79:e7:14:a8:27:fa:3d:da:94:d8:4c:
b9:8e:4e:dd:9c:4d:04:1b:19:14:b9:bc:90:55:f6:
8f:1a:1b:a2:7c:5f:80:20:9f:13:cc:05:79:ce:04:
1a:1d:cd:d8:0d:cd:ac:c0:09:9f:17:37:82:fe:de:
87:70:9c:b2:65:d4:c8:11:dc:87:0f:0c:6b:51:2f:
74:39:1e:ce:cc:2e:66:b3:cb:7e:6f:b7:cf:6c:c0:
b2:fe:fd:37:f5:e7:5f:87:c8:a0:66:36:ea:ae:16:
ff:43:17:90:2c:ce:48:01:b1:aa:5f:2e:07:a5:37:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:88:77:89:5C:B3:63:30:45:C0:60:9F:32:F2:15:C2:90:DB:C2:9B
X509v3 Authority Key Identifier:
keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/KIh3iVyzYzBFwGCfMvIVwpDbwps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.228.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:75:d3:14:ae:28:2a:b7:73:bf:5a:21:88:41:a7:b3:29:d8:
bf:9f:79:c4:3f:a0:21:1c:46:78:58:9d:50:e2:7a:49:80:39:
25:fa:34:84:53:17:6d:41:f2:42:b0:81:d0:c1:46:0e:33:a6:
f5:7f:54:e9:8c:34:ee:e7:b6:84:1c:19:44:a6:47:80:b5:2f:
db:6b:b4:04:5a:d2:67:29:58:e1:fb:1f:92:5e:d6:be:20:be:
17:dd:b6:a8:40:79:33:73:d6:6a:03:1a:b9:51:c4:12:fa:ff:
bc:ee:a6:d1:a9:c1:34:90:dc:8c:47:73:79:c1:9b:e7:26:81:
c5:a1:6b:05:8a:39:a8:bd:80:2c:27:1b:74:5f:ae:97:b6:a9:
01:31:0c:93:ef:c6:09:bc:8b:8a:0f:1b:b8:9e:a9:c4:c4:2a:
35:eb:47:88:ca:9d:82:98:8d:72:8a:bb:6f:f3:97:32:b3:f2:
f6:eb:cb:30:de:5c:05:3c:e1:75:6c:f8:3a:5e:9a:4f:51:f3:
03:6d:91:52:0d:b9:72:01:17:4c:df:07:74:6b:2c:5f:06:35:
ec:21:a8:2a:f7:97:1b:5c:a9:f3:1c:4d:9a:92:13:94:b8:61:
12:46:03:07:7b:f8:d2:0e:ca:16:1f:f0:6f:63:ce:be:a7:78:
17:b7:6f:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3IwtwHy6DpFeCo9Tuen8rkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNWRiODExYjVkNWQwNWJlYzM3ZWU5ZDA5YTRlYzUyZWVl
ZDFhZDUwHhcNMjYwNDI2MDc0ODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODg4Nzc4OTVjYjM2MzMwNDVjMDYwOWYzMmYyMTVjMjkwZGJjMjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqYb79QOgKpUiT5Dx8cVX3ps0zdo
47BtiNET27FfAGXSCaCDQa7dS9si/v7X0YCLQSV4pOBsrTORmhW8F/w9mRbnTeWE
1nw48iNPBI1dNpEG8QHkNaukMThbbSP+wHV/3orL5WTPdjSzpvPm/3GRvCdLulrw
JynfGo9tFL8pEWgmhmUC57g/5n1ieecUqCf6PdqU2Ey5jk7dnE0EGxkUubyQVfaP
GhuifF+AIJ8TzAV5zgQaHc3YDc2swAmfFzeC/t6HcJyyZdTIEdyHDwxrUS90OR7O
zC5ms8t+b7fPbMCy/v039edfh8igZjbqrhb/QxeQLM5IAbGqXy4HpTcAMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCiId4lcs2MwRcBgnzLyFcKQ28KbMB8GA1UdIwQY
MBaAFL9duBG11dBb7DfunQmk7FLu7RrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2Mt
NzE1ZjA5ODE3MzQxLzEvS0loM2lWeXpZekJGd0dDZk12SVZ3cERid3BzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2MtNzE1ZjA5ODE3MzQx
LzEvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuULkMA0G
CSqGSIb3DQEBCwUAA4IBAQAfddMUrigqt3O/WiGIQaezKdi/n3nEP6AhHEZ4WJ1Q
4npJgDkl+jSEUxdtQfJCsIHQwUYOM6b1f1TpjDTu57aEHBlEpkeAtS/ba7QEWtJn
KVjh+x+SXta+IL4X3baoQHkzc9ZqAxq5UcQS+v+87qbRqcE0kNyMR3N5wZvnJoHF
oWsFijmovYAsJxt0X66XtqkBMQyT78YJvIuKDxu4nqnExCo160eIyp2CmI1yirtv
85cys/L268sw3lwFPOF1bPg6XppPUfMDbZFSDblyARdM3wd0ayxfBjXsIagq95cb
XKnzHE2akhOUuGESRgMHe/jSDsoWH/BvY86+p3gXt29f
-----END CERTIFICATE-----
Generated at Tue Apr 28 00:48:32 2026 by rpki-client