Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/KYD6XzrkSS5tLIFk-jkMZVww9sM.roa
File: KYD6XzrkSS5tLIFk-jkMZVww9sM.roa (raw, json)
Hash identifier: p62+sq33aHEU0rrARoKXfQwBAMwoDKlkx4HTxszJktY=
Subject key identifier: 29:80:FA:5F:3A:E4:49:2E:6D:2C:81:64:FA:39:0C:65:5C:30:F6:C3
Certificate issuer: /CN=910aac3373f2fac6cc245f3ac4d1c055e51ecf4b
Certificate serial: 019F236933898C2DA8056D60A9FB84EF28E1
Authority key identifier: 91:0A:AC:33:73:F2:FA:C6:CC:24:5F:3A:C4:D1:C0:55:E5:1E:CF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/KYD6XzrkSS5tLIFk-jkMZVww9sM.roa
Signing time: Thu 02 Jul 2026 15:18:44 +0000
ROA not before: Thu 02 Jul 2026 15:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60435
IP address blocks: 45.157.4.0/24 maxlen: 24
45.157.5.0/24 maxlen: 24
45.157.6.0/24 maxlen: 24
185.29.16.0/24 maxlen: 24
185.29.17.0/24 maxlen: 24
185.29.18.0/24 maxlen: 24
185.29.19.0/24 maxlen: 24
193.242.154.0/24 maxlen: 24
2a00:a360::/32 maxlen: 32
2a00:a362::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:33:89:8c:2d:a8:05:6d:60:a9:fb:84:ef:28:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=910aac3373f2fac6cc245f3ac4d1c055e51ecf4b
Validity
Not Before: Jul 2 15:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2980fa5f3ae4492e6d2c8164fa390c655c30f6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:73:31:2c:bc:f4:30:56:f4:a8:2f:c3:0d:
fe:75:40:ce:56:0c:92:78:b2:4b:a4:7f:19:fe:c2:
46:b4:e1:d6:8f:a6:24:92:3e:84:48:67:4b:b3:06:
0f:cc:b4:76:d0:5d:78:33:ad:88:89:83:95:c8:8d:
a7:2b:29:04:7b:36:29:60:91:1a:17:16:1b:4f:b9:
38:b9:78:cf:0c:be:cd:48:0a:38:d3:5c:21:dc:50:
69:0f:b8:33:ca:c5:be:c8:a4:0b:1c:ab:a7:bb:8a:
90:71:6b:46:47:14:c3:b3:b3:e4:a5:e3:58:16:35:
39:c9:b8:91:bd:c6:a7:9d:cc:c8:49:40:f9:49:e4:
e2:83:22:1c:d9:e4:b9:92:78:10:43:18:0b:de:4a:
c0:fb:2e:1f:50:ed:1e:b8:34:2f:dd:ed:a7:4f:c3:
fb:1c:ed:0f:91:8b:03:dc:dd:c1:50:5a:43:f5:af:
73:a2:eb:de:25:99:b6:ba:ed:95:84:ba:47:6c:5b:
4e:87:2b:60:ef:0d:29:59:b9:8d:3a:aa:a5:25:c3:
3a:b5:64:9c:1d:0a:be:17:25:6f:fe:12:29:b0:1c:
cd:41:ec:19:af:c2:36:df:46:f6:77:dd:a4:3a:89:
bf:08:75:b0:12:27:f7:df:77:0d:c2:9b:2c:e7:2f:
d9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:80:FA:5F:3A:E4:49:2E:6D:2C:81:64:FA:39:0C:65:5C:30:F6:C3
X509v3 Authority Key Identifier:
keyid:91:0A:AC:33:73:F2:FA:C6:CC:24:5F:3A:C4:D1:C0:55:E5:1E:CF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/KYD6XzrkSS5tLIFk-jkMZVww9sM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.4.0-45.157.6.255
185.29.16.0/22
193.242.154.0/24
IPv6:
2a00:a360::/32
2a00:a362::/32
Signature Algorithm: sha256WithRSAEncryption
66:63:3e:73:76:d4:c0:6f:bd:57:b0:05:90:00:af:00:b3:b0:
6f:34:a2:07:2e:13:19:8c:c0:f4:42:e4:7e:63:4c:33:b1:ab:
56:74:85:81:ac:7c:b8:82:be:48:30:2b:6c:35:68:21:d4:52:
60:f4:48:05:b0:24:1c:50:bd:62:e8:32:a3:75:c6:6b:7c:8f:
9b:4b:a4:5c:99:5f:dd:ea:18:20:85:67:22:8c:b7:49:70:55:
87:37:37:2f:a9:3f:27:aa:6b:b3:8d:95:8d:6e:ae:d1:3d:aa:
95:74:3b:ab:33:1b:85:1f:82:dc:a6:7b:84:5f:55:5f:65:e1:
14:a1:2c:5b:c0:52:fb:57:2f:a9:49:2e:e9:c7:49:78:26:54:
43:99:1b:10:16:6e:ef:ca:23:8c:56:fb:36:6e:57:a4:8a:ae:
4d:93:68:4f:ac:c1:58:1e:42:49:3e:6a:5e:66:03:da:11:18:
3e:07:87:e0:0d:21:bc:6d:1d:9f:dd:f8:95:d3:c4:e5:e8:ff:
53:96:88:31:7b:88:94:27:6b:67:08:d8:8d:13:c9:f3:21:1d:
60:c9:96:0e:ad:8a:6b:df:79:ba:c3:9c:c4:cd:34:35:65:79:
20:a2:fb:22:12:2c:0d:91:75:3f:ac:21:74:b1:24:be:97:81:
90:bf:eb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:28:28 2026 by rpki-client