Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/kV7AQO5Pik7bX0xT1nMBNple5gU.roa
File: kV7AQO5Pik7bX0xT1nMBNple5gU.roa (raw, json)
Hash identifier: kR1p3OIbWjuu63WAcZCoWBtWzhYcRVDIhsba8PPIqKs=
Subject key identifier: 91:5E:C0:40:EE:4F:8A:4E:DB:5F:4C:53:D6:73:01:36:99:5E:E6:05
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01A1377FE64116C6745B6F908D1A0972FC70
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/kV7AQO5Pik7bX0xT1nMBNple5gU.roa
Signing time: Tue 13 Oct 2026 23:01:31 +0000
ROA not before: Tue 13 Oct 2026 23:01:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 2.58.99.0/24 maxlen: 24
91.240.33.0/24 maxlen: 24
109.196.104.0/24 maxlen: 24
109.196.106.0/24 maxlen: 24
109.196.107.0/24 maxlen: 24
109.196.108.0/24 maxlen: 24
109.196.109.0/24 maxlen: 24
176.101.57.0/24 maxlen: 24
176.101.61.0/24 maxlen: 24
176.101.63.0/24 maxlen: 24
213.109.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:7f:e6:41:16:c6:74:5b:6f:90:8d:1a:09:72:fc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Oct 13 23:01:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=915ec040ee4f8a4edb5f4c53d6730136995ee605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:6c:b6:5c:8d:b4:34:2a:3f:19:5c:87:d8:
fe:08:da:2c:a5:e0:0f:45:e9:26:b0:a2:2d:d4:43:
77:c4:85:45:1f:fe:0c:cc:08:db:5e:1a:bb:69:49:
1e:b8:4c:4a:af:fb:18:1f:c0:d8:04:f9:ae:4f:31:
8a:f3:6f:e6:b4:53:b9:69:46:25:a9:8a:f7:6d:ae:
f7:ae:a2:69:7e:99:b5:59:90:12:66:ec:a0:e5:b9:
f2:71:36:64:3c:61:0e:68:96:1b:0d:65:22:af:ae:
b4:e9:a6:f9:96:bf:95:a2:ac:ef:0e:4a:76:ab:7b:
cc:b2:d2:f8:ef:cd:d4:41:86:8c:77:b3:cc:3a:da:
44:fb:95:f1:8d:3c:52:a4:9c:9b:b6:7a:a6:ba:6d:
60:2f:22:05:d9:37:a9:1b:c3:33:48:25:04:57:f2:
be:d0:40:21:16:e8:f8:de:09:e7:e8:b2:33:72:dd:
20:b5:d9:de:c0:3b:c7:47:fe:3f:7d:73:16:6b:2e:
12:13:25:fa:f1:b5:43:d7:fa:dd:26:16:dc:1d:a4:
46:0a:23:7b:b8:30:3d:ef:fa:15:17:5a:67:5e:d8:
9d:76:46:83:02:d8:a0:0b:09:e2:12:b1:83:72:d8:
16:e4:10:fe:25:5c:6c:9c:7e:fb:4e:f4:0b:37:c2:
99:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5E:C0:40:EE:4F:8A:4E:DB:5F:4C:53:D6:73:01:36:99:5E:E6:05
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/kV7AQO5Pik7bX0xT1nMBNple5gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.99.0/24
91.240.33.0/24
109.196.104.0/24
109.196.106.0-109.196.109.255
176.101.57.0/24
176.101.61.0/24
176.101.63.0/24
213.109.111.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:d6:a4:e4:da:e8:09:2e:60:fb:02:9c:7a:e0:0a:24:3a:ed:
85:41:21:7c:d4:d9:2f:4a:7c:f1:f2:a8:eb:e5:84:92:f6:ff:
64:9c:65:7c:2c:ee:3d:39:76:9e:9b:b8:a2:d2:65:e4:0c:51:
d7:42:96:33:9f:1a:dc:ce:94:c0:6a:3d:c2:42:f4:3a:72:ad:
ae:8c:6e:08:31:ec:92:37:ca:01:5f:1d:46:61:b8:fc:06:1d:
30:83:7e:a7:f8:82:f6:6a:6d:32:31:f1:fe:f8:ec:36:67:8b:
ce:53:8b:73:04:99:4d:2f:2d:30:4f:cb:59:74:f9:f4:65:c9:
5c:24:a0:12:a3:6e:6a:41:51:38:b6:90:be:d0:cc:ea:53:09:
68:39:c3:dc:0b:7c:ee:fa:0b:ee:8b:41:75:43:75:f3:4f:af:
26:51:01:9b:60:d0:b6:69:a5:5e:4f:21:0d:54:67:92:24:ad:
95:3f:3b:e3:2a:5b:9e:1f:b2:56:0c:40:e7:66:82:ff:21:fe:
b7:4d:e8:d5:63:72:15:92:4e:f0:ca:17:27:ae:ed:ec:75:90:
24:64:8d:19:0c:94:26:37:86:d0:3a:a9:15:67:7c:f0:bc:ca:
8d:f8:b7:ca:45:21:5e:db:76:28:24:c0:da:dc:41:54:9b:a0:
c2:fa:f3:bf
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAaE3f+ZBFsZ0W2+QjRoJcvxwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjYxMDEzMjMwMTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTVlYzA0MGVlNGY4YTRlZGI1ZjRjNTNkNjczMDEzNjk5NWVlNjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLRstlyNtDQqPxlch9j+CNospeAP
RekmsKIt1EN3xIVFH/4MzAjbXhq7aUkeuExKr/sYH8DYBPmuTzGK82/mtFO5aUYl
qYr3ba73rqJpfpm1WZASZuyg5bnycTZkPGEOaJYbDWUir6606ab5lr+VoqzvDkp2
q3vMstL4783UQYaMd7PMOtpE+5XxjTxSpJybtnqmum1gLyIF2TepG8MzSCUEV/K+
0EAhFuj43gnn6LIzct0gtdnewDvHR/4/fXMWay4SEyX68bVD1/rdJhbcHaRGCiN7
uDA97/oVF1pnXtiddkaDAtigCwniErGDctgW5BD+JVxsnH77TvQLN8KZBQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFJFewEDuT4pO219MU9ZzATaZXuYFMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEva1Y3QVFPNVBpazdiWDB4VDFuTUJOcGxlNWdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAAjpjAwQA
W/AhAwQAbcRoMAwDBAFtxGoDBAFtxGwDBACwZTkDBACwZT0DBACwZT8DBADVbW8w
DQYJKoZIhvcNAQELBQADggEBAKPWpOTa6AkuYPsCnHrgCiQ67YVBIXzU2S9KfPHy
qOvlhJL2/2ScZXws7j05dp6buKLSZeQMUddCljOfGtzOlMBqPcJC9Dpyra6Mbggx
7JI3ygFfHUZhuPwGHTCDfqf4gvZqbTIx8f747DZni85Ti3MEmU0vLTBPy1l0+fRl
yVwkoBKjbmpBUTi2kL7QzOpTCWg5w9wLfO76C+6LQXVDdfNPryZRAZtg0LZppV5P
IQ1UZ5IkrZU/O+MqW54fslYMQOdmgv8h/rdN6NVjchWSTvDKFyeu7ex1kCRkjRkM
lCY3htA6qRVnfPC8yo34t8pFIV7bdigkwNrcQVSboML6878=
-----END CERTIFICATE-----
Generated at Wed Oct 21 19:44:01 2026 by rpki-client