Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/KoJ_nmd6FhgPRet_uL_gm2vuT4k.roa
File: KoJ_nmd6FhgPRet_uL_gm2vuT4k.roa (raw, json)
Hash identifier: i8hpoMRnwQX0Wjdn2y1MP/kZ1J8Pgc2t0t702D6K4a8=
Subject key identifier: 2A:82:7F:9E:67:7A:16:18:0F:45:EB:7F:B8:BF:E0:9B:6B:EE:4F:89
Certificate issuer: /CN=525b705a91dbc30ed10eb7222b7797b834e01863
Certificate serial: 019FF520BC5458989BAEC40356410FCF21C5
Authority key identifier: 52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/KoJ_nmd6FhgPRet_uL_gm2vuT4k.roa
Signing time: Wed 12 Aug 2026 08:39:51 +0000
ROA not before: Wed 12 Aug 2026 08:39:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215105
IP address blocks: 151.216.6.0/24 maxlen: 24
185.236.242.0/23 maxlen: 24
2a0d:eb02::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:20:bc:54:58:98:9b:ae:c4:03:56:41:0f:cf:21:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525b705a91dbc30ed10eb7222b7797b834e01863
Validity
Not Before: Aug 12 08:39:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a827f9e677a16180f45eb7fb8bfe09b6bee4f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:f8:57:29:4d:06:ad:80:d4:7f:34:72:b3:
04:81:f6:60:32:b0:00:39:60:e5:42:33:6d:6f:d6:
7e:86:f6:92:39:c6:c0:03:1a:6b:ac:b8:d2:ee:5f:
5f:a9:f7:e2:a3:dc:dc:a3:e7:f8:05:38:8c:d6:bb:
78:47:99:87:08:f6:bd:29:94:89:d3:ac:a5:85:3a:
fe:72:9b:c8:70:46:46:53:2a:11:e3:48:38:d5:9c:
48:b7:d9:86:85:e8:0b:e2:8a:4d:69:93:ca:51:49:
dc:55:85:b0:b8:fb:95:c1:c6:53:34:5e:8f:03:21:
2b:3e:ab:b1:2e:39:1f:72:35:54:78:f0:2a:7f:52:
4a:9e:ba:b2:23:56:90:33:9c:2b:fe:85:88:15:d4:
d3:8e:c6:25:4c:56:c7:4c:1c:01:5a:8a:3f:a7:d8:
1f:82:f3:57:02:21:39:07:be:d7:2a:11:97:58:50:
2d:53:50:07:78:3a:b3:e1:c9:88:52:0a:5d:75:78:
94:d3:3a:f9:98:2e:d2:e7:a3:79:52:47:c1:22:78:
4d:ad:7c:1e:87:1d:d9:5d:af:39:5e:5d:a1:3d:47:
44:26:ed:32:94:e6:fd:5c:d1:67:a7:2c:e5:53:e6:
aa:5e:ed:3a:03:1a:7c:be:a7:02:cd:77:5b:e9:a8:
c2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:82:7F:9E:67:7A:16:18:0F:45:EB:7F:B8:BF:E0:9B:6B:EE:4F:89
X509v3 Authority Key Identifier:
keyid:52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/KoJ_nmd6FhgPRet_uL_gm2vuT4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.6.0/24
185.236.242.0/23
IPv6:
2a0d:eb02::/32
Signature Algorithm: sha256WithRSAEncryption
65:b8:a1:51:59:c6:3e:03:90:19:34:c4:86:2f:4c:f2:42:7d:
da:67:25:b1:b1:28:f4:1e:7d:84:21:16:e2:78:68:6a:58:19:
cd:88:d6:d7:46:e6:61:4d:cc:3a:f7:a3:3d:34:60:c5:04:fc:
6d:19:87:99:e0:e3:1e:c3:f5:8d:4d:74:44:ba:8c:a6:92:db:
0e:6f:b4:2b:f4:85:e7:81:f7:c4:64:6d:ed:2c:9f:4e:8e:aa:
72:ae:85:46:39:7f:f4:96:81:e3:15:53:9b:3a:4b:cf:29:aa:
8e:da:1f:3d:83:81:92:4a:73:33:93:8c:88:0b:6d:d1:f4:0a:
50:92:17:09:45:61:6f:45:00:25:5e:64:c6:90:78:fd:63:26:
28:a7:34:3e:6b:45:9c:44:5f:9c:d7:2e:65:97:f8:00:f8:c7:
51:26:4a:17:95:0a:da:5a:40:c1:39:89:5b:6c:6c:c6:e4:19:
6b:2c:3c:de:43:eb:7a:58:35:5b:a0:69:f6:7a:e9:d0:fa:a8:
6a:b9:b8:e3:e6:f9:4e:9c:ae:00:51:f1:df:b0:40:4c:ba:cf:
7a:a5:01:f5:84:15:3f:56:5b:81:13:fc:94:fe:23:ec:f1:7f:
6c:95:7d:23:45:c8:1a:e7:29:22:25:82:e3:0a:f6:03:fd:e3:
c7:6b:00:01
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ/1ILxUWJibrsQDVkEPzyHFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNWI3MDVhOTFkYmMzMGVkMTBlYjcyMjJiNzc5N2I4MzRl
MDE4NjMwHhcNMjYwODEyMDgzOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTgyN2Y5ZTY3N2ExNjE4MGY0NWViN2ZiOGJmZTA5YjZiZWU0Zjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1P4VylNBq2A1H80crMEgfZgMrAA
OWDlQjNtb9Z+hvaSOcbAAxprrLjS7l9fqffio9zco+f4BTiM1rt4R5mHCPa9KZSJ
06ylhTr+cpvIcEZGUyoR40g41ZxIt9mGhegL4opNaZPKUUncVYWwuPuVwcZTNF6P
AyErPquxLjkfcjVUePAqf1JKnrqyI1aQM5wr/oWIFdTTjsYlTFbHTBwBWoo/p9gf
gvNXAiE5B77XKhGXWFAtU1AHeDqz4cmIUgpddXiU0zr5mC7S56N5UkfBInhNrXwe
hx3ZXa85Xl2hPUdEJu0ylOb9XNFnpyzlU+aqXu06Axp8vqcCzXdb6ajCrQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFCqCf55nehYYD0Xrf7i/4Jtr7k+JMB8GA1UdIwQY
MBaAFFJbcFqR28MO0Q63Iit3l7g04BhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWx0d1dwSGJ3dzdSRHJjaUszZVh1RFRnR0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNDYyZGMtOWU1OS00ZThkLTljNmQt
ZjQ2ODg3ZGY5ODYzLzEvS29KX25tZDZGaGdQUmV0X3VMX2dtMnZ1VDRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNDYyZGMtOWU1OS00ZThkLTljNmQtZjQ2ODg3ZGY5ODYz
LzEvVWx0d1dwSGJ3dzdSRHJjaUszZVh1RFRnR0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAl9gGAwQB
uezyMA0EAgACMAcDBQAqDesCMA0GCSqGSIb3DQEBCwUAA4IBAQBluKFRWcY+A5AZ
NMSGL0zyQn3aZyWxsSj0Hn2EIRbieGhqWBnNiNbXRuZhTcw696M9NGDFBPxtGYeZ
4OMew/WNTXREuoymktsOb7Qr9IXngffEZG3tLJ9OjqpyroVGOX/0loHjFVObOkvP
KaqO2h89g4GSSnMzk4yIC23R9ApQkhcJRWFvRQAlXmTGkHj9YyYopzQ+a0WcRF+c
1y5ll/gA+MdRJkoXlQraWkDBOYlbbGzG5BlrLDzeQ+t6WDVboGn2eunQ+qhqubjj
5vlOnK4AUfHfsEBMus96pQH1hBU/VluBE/yU/iPs8X9slX0jRcga5ykiJYLjCvYD
/ePHawAB
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:46:14 2026 by rpki-client