Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/KcCMRoinOuNV9RkACdtBqQbawZg.roa
File: KcCMRoinOuNV9RkACdtBqQbawZg.roa (raw, json)
Hash identifier: EnC6xR3sMjdtNj/1dPfzlD2vYLnSC6RAJkvh4SOlRoU=
Subject key identifier: 29:C0:8C:46:88:A7:3A:E3:55:F5:19:00:09:DB:41:A9:06:DA:C1:98
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019F94E7E9D6EC05D8629813EC5F360105EF
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/KcCMRoinOuNV9RkACdtBqQbawZg.roa
Signing time: Fri 24 Jul 2026 16:14:14 +0000
ROA not before: Fri 24 Jul 2026 16:14:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.74.176.0/24 maxlen: 24
45.74.242.0/24 maxlen: 24
45.74.244.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb00::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440::/48 maxlen: 48
2a13:a440:3::/48 maxlen: 48
2a13:a440:4::/48 maxlen: 48
2a13:a440:5::/48 maxlen: 48
2a13:a440:7::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a442::/32 maxlen: 32
2a13:a443::/32 maxlen: 32
2a13:a444::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a446::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:e7:e9:d6:ec:05:d8:62:98:13:ec:5f:36:01:05:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 24 16:14:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29c08c4688a73ae355f5190009db41a906dac198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:14:4d:e2:6d:62:23:0e:c4:47:08:08:35:0e:
89:85:a3:83:82:9b:b4:5c:56:1b:c5:2c:24:03:9c:
70:a9:c1:cb:55:3a:f2:a4:7d:50:9a:73:af:5b:ce:
20:6b:cb:f0:54:53:26:20:85:c1:50:6c:ce:7f:c8:
2a:02:99:20:c2:24:4b:d6:0f:8f:70:e6:5d:76:55:
58:35:15:0b:8d:68:7b:16:19:7d:78:4f:cb:f0:41:
c2:e5:cf:32:e3:07:8a:41:22:89:dc:2f:63:14:f9:
ec:f8:cc:bc:2f:e4:09:26:31:e2:36:91:1d:04:61:
55:37:31:b6:82:f7:48:c2:11:a8:de:e3:03:81:54:
58:ff:c3:88:0b:01:cb:b9:3d:96:ee:c3:7b:fc:1b:
89:97:eb:83:66:16:59:1a:3b:af:0c:1a:6f:1c:3d:
5b:92:27:1e:d4:f4:2a:d6:d8:f0:7d:50:a5:11:04:
42:c8:2b:03:fe:4b:79:a9:d1:7f:6f:27:a1:90:11:
34:26:18:dd:29:a9:41:be:16:28:ef:9c:99:a7:6a:
4c:99:dd:83:f7:91:dd:c9:ce:0c:31:18:3e:bc:61:
d7:9f:ec:dc:7c:c6:a4:c7:61:d2:5c:b5:e7:93:7d:
42:46:51:45:17:90:6c:c9:cd:8b:24:41:ec:72:0e:
a1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C0:8C:46:88:A7:3A:E3:55:F5:19:00:09:DB:41:A9:06:DA:C1:98
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/KcCMRoinOuNV9RkACdtBqQbawZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.74.176.0/24
45.74.242.0/24
45.74.244.0/24
45.131.0.0/24
45.136.4.0/24
45.141.148.0/24
77.83.200.0/22
194.116.237.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440::/48
2a13:a440:3::-2a13:a440:5:ffff:ffff:ffff:ffff:ffff
2a13:a440:7::/48
2a13:a441::-2a13:a447:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
84:19:8c:9b:ef:ea:f4:44:db:91:15:fa:a4:11:23:46:e3:10:
6a:85:c7:ff:9a:b0:62:4b:1e:d4:4c:fc:d2:e6:6b:c9:c3:90:
1b:fc:7d:96:b8:bf:72:9b:60:9a:78:8e:97:8a:ec:5b:c9:26:
91:97:9f:9e:10:4b:cd:83:49:3d:ad:ba:aa:e2:d1:42:18:ae:
a1:ea:c9:e1:26:70:5c:2d:a9:39:73:79:7b:4c:cb:0f:06:80:
81:43:6e:4f:9c:80:f6:7c:71:ae:94:f6:81:0c:7e:68:2b:6e:
10:9b:45:cd:3b:af:2d:3e:7f:67:0c:fc:38:9c:8a:72:86:3a:
b5:cf:4b:a4:36:d5:3a:51:cd:70:47:e4:72:90:ca:74:e1:c0:
d8:cf:41:a3:4f:71:51:a2:b5:6f:25:c7:79:7d:5c:aa:ac:94:
f6:f5:90:ab:2a:79:b9:d6:26:58:6e:ff:ae:45:3d:0b:e2:a6:
96:c2:2e:9b:94:b6:96:62:68:31:54:7f:da:ee:9c:56:b3:8f:
ee:bf:94:c3:3b:d1:b3:d1:c9:2c:b5:96:06:21:42:41:34:b6:
a7:e1:45:58:2e:ee:f8:25:fb:f0:ce:a6:ee:9b:a9:68:90:46:
cb:56:1d:78:a8:43:1c:24:01:87:9d:c6:04:9e:da:a3:d0:86:
75:16:4d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:42:41 2026 by rpki-client