Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/KTUTCaxYQXGAP2Q2CO619vsXhAs.roa
File: KTUTCaxYQXGAP2Q2CO619vsXhAs.roa (raw, json)
Hash identifier: Xxd+caKVzEv01E0Ajz1dp8J3+CKdNysugtSY7+ulyW8=
Subject key identifier: 29:35:13:09:AC:58:41:71:80:3F:64:36:08:EE:B5:F6:FB:17:84:0B
Certificate issuer: /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial: 01A019E350E3AF7AB20B0F34046B2AD79135
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/KTUTCaxYQXGAP2Q2CO619vsXhAs.roa
Signing time: Wed 19 Aug 2026 11:58:42 +0000
ROA not before: Wed 19 Aug 2026 11:58:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2116
IP address blocks: 31.185.24.0/21 maxlen: 21
37.191.128.0/17 maxlen: 17
62.63.0.0/18 maxlen: 18
62.101.192.0/18 maxlen: 18
64.28.0.0/19 maxlen: 19
77.40.128.0/17 maxlen: 17
77.88.64.0/18 maxlen: 18
77.234.48.0/21 maxlen: 21
77.241.96.0/20 maxlen: 20
78.24.144.0/21 maxlen: 21
79.135.0.0/19 maxlen: 19
80.64.192.0/20 maxlen: 20
80.241.80.0/20 maxlen: 20
81.0.128.0/18 maxlen: 18
81.175.0.0/20 maxlen: 20
81.175.20.0/22 maxlen: 22
81.175.24.0/21 maxlen: 21
81.175.32.0/19 maxlen: 19
81.191.0.0/16 maxlen: 16
82.196.192.0/19 maxlen: 19
84.20.96.0/19 maxlen: 19
85.112.128.0/19 maxlen: 19
85.196.64.0/18 maxlen: 18
85.221.0.0/17 maxlen: 17
85.252.0.0/16 maxlen: 16
86.62.128.0/18 maxlen: 18
87.118.0.0/18 maxlen: 18
88.84.160.0/19 maxlen: 19
89.191.0.0/19 maxlen: 19
91.135.32.0/20 maxlen: 20
91.135.34.0/24 maxlen: 24
91.202.80.0/22 maxlen: 22
109.199.192.0/19 maxlen: 19
178.74.0.0/18 maxlen: 18
185.8.16.0/22 maxlen: 22
185.35.80.0/22 maxlen: 22
185.67.116.0/22 maxlen: 22
185.67.116.0/24 maxlen: 24
185.129.156.0/22 maxlen: 22
193.69.0.0/16 maxlen: 16
193.71.0.0/16 maxlen: 16
193.75.0.0/17 maxlen: 17
193.90.0.0/16 maxlen: 16
193.91.128.0/17 maxlen: 17
194.19.0.0/17 maxlen: 17
194.29.200.0/22 maxlen: 22
194.54.96.0/19 maxlen: 19
195.0.128.0/17 maxlen: 17
195.1.0.0/16 maxlen: 16
195.18.128.0/17 maxlen: 17
195.139.0.0/16 maxlen: 16
195.159.0.0/16 maxlen: 16
195.204.0.0/16 maxlen: 16
212.62.224.0/19 maxlen: 19
212.71.64.0/19 maxlen: 19
213.52.0.0/17 maxlen: 17
213.151.128.0/19 maxlen: 19
213.158.224.0/19 maxlen: 19
213.160.224.0/20 maxlen: 20
213.160.240.0/21 maxlen: 21
213.172.192.0/19 maxlen: 19
213.239.64.0/18 maxlen: 18
217.8.128.0/19 maxlen: 19
217.14.0.0/20 maxlen: 20
217.77.32.0/20 maxlen: 20
217.118.32.0/19 maxlen: 19
217.144.224.0/19 maxlen: 19
2001:840::/29 maxlen: 29
2001:8c0::/29 maxlen: 29
2001:8c0:3403::/64 maxlen: 64
2001:8c0:a906::/48 maxlen: 48
2001:4dd8::/29 maxlen: 29
2a00:c440::/29 maxlen: 29
2a01:520::/29 maxlen: 29
2a02:270::/29 maxlen: 29
2a03:c000::/29 maxlen: 29
2a04:6340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:e3:50:e3:af:7a:b2:0b:0f:34:04:6b:2a:d7:91:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Validity
Not Before: Aug 19 11:58:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29351309ac584171803f643608eeb5f6fb17840b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5d:a7:f9:c2:19:1b:97:f3:65:d3:bd:9b:c9:
d1:08:3a:4c:5c:f0:45:6f:9f:f2:63:90:04:1f:e0:
e9:de:29:12:5c:aa:ab:04:41:df:59:d5:d3:83:8e:
a0:18:ec:94:3b:ef:03:ba:9f:f1:d0:a3:28:36:55:
35:63:f0:ca:2d:36:aa:cc:fd:ed:d0:7a:37:c7:8d:
d4:9e:e4:60:26:c2:42:89:a3:14:92:ac:c0:ed:52:
58:95:ee:6f:ee:f6:33:51:9f:c8:43:52:ff:a1:1f:
91:70:01:79:56:f6:0a:01:2f:74:f9:26:10:91:45:
bf:23:2c:43:ec:1b:d7:40:43:fc:6d:1a:1c:1c:32:
ac:9d:60:9b:0d:d8:70:3c:fd:a6:91:b4:6a:82:2e:
d7:89:0a:c1:1c:27:f5:e4:92:7d:c3:f1:25:3c:13:
7d:1d:e2:c5:d7:90:d7:07:10:43:ff:7d:a8:21:e2:
28:63:19:73:9f:02:7f:9d:9f:b5:2d:08:86:14:a7:
34:c9:61:3e:d6:e3:c4:08:0a:08:8f:76:08:3f:7d:
7f:93:9b:1e:40:96:71:8f:6b:55:dc:80:76:f9:37:
53:2b:7e:19:99:de:22:89:0d:fd:e3:14:dd:43:f6:
1c:8f:68:a4:cd:a0:5c:73:db:0d:5a:2b:a9:71:98:
01:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:35:13:09:AC:58:41:71:80:3F:64:36:08:EE:B5:F6:FB:17:84:0B
X509v3 Authority Key Identifier:
keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/KTUTCaxYQXGAP2Q2CO619vsXhAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.24.0/21
37.191.128.0/17
62.63.0.0/18
62.101.192.0/18
64.28.0.0/19
77.40.128.0/17
77.88.64.0/18
77.234.48.0/21
77.241.96.0/20
78.24.144.0/21
79.135.0.0/19
80.64.192.0/20
80.241.80.0/20
81.0.128.0/18
81.175.0.0/20
81.175.20.0-81.175.63.255
81.191.0.0/16
82.196.192.0/19
84.20.96.0/19
85.112.128.0/19
85.196.64.0/18
85.221.0.0/17
85.252.0.0/16
86.62.128.0/18
87.118.0.0/18
88.84.160.0/19
89.191.0.0/19
91.135.32.0/20
91.202.80.0/22
109.199.192.0/19
178.74.0.0/18
185.8.16.0/22
185.35.80.0/22
185.67.116.0/22
185.129.156.0/22
193.69.0.0/16
193.71.0.0/16
193.75.0.0/17
193.90.0.0/16
193.91.128.0/17
194.19.0.0/17
194.29.200.0/22
194.54.96.0/19
195.0.128.0-195.1.255.255
195.18.128.0/17
195.139.0.0/16
195.159.0.0/16
195.204.0.0/16
212.62.224.0/19
212.71.64.0/19
213.52.0.0/17
213.151.128.0/19
213.158.224.0/19
213.160.224.0-213.160.247.255
213.172.192.0/19
213.239.64.0/18
217.8.128.0/19
217.14.0.0/20
217.77.32.0/20
217.118.32.0/19
217.144.224.0/19
IPv6:
2001:840::/29
2001:8c0::/29
2001:4dd8::/29
2a00:c440::/29
2a01:520::/29
2a02:270::/29
2a03:c000::/29
2a04:6340::/29
Signature Algorithm: sha256WithRSAEncryption
89:72:ae:16:92:2e:d7:3a:e7:7a:1a:31:3c:8b:96:3d:30:3b:
8b:50:ef:08:cb:e9:48:59:b0:f2:5a:2e:43:24:6d:5c:02:dc:
21:bc:0e:92:ca:67:94:69:80:82:4f:2b:9c:ed:ed:1e:b7:4a:
b4:75:aa:45:1b:21:02:7b:c9:51:54:c8:25:89:cc:d3:fe:f3:
22:67:27:96:0e:33:6c:6f:59:4c:23:f6:16:3e:c5:17:6c:d2:
fb:02:c5:4c:b6:78:2d:4a:f1:bf:ee:f6:78:6f:fe:d4:87:77:
a7:87:aa:59:8b:a9:d0:76:86:31:95:4a:d4:b0:be:a4:89:fc:
04:f3:8a:89:a1:d0:d2:04:14:59:c3:fd:14:8f:4f:41:e7:68:
c8:aa:9f:95:fa:9c:d6:c6:d6:65:50:f0:47:bf:9e:e7:ab:d4:
5c:51:42:26:fb:6f:c4:3e:ce:54:6a:20:b6:ec:7e:dc:0b:76:
4f:bb:3f:fd:5b:b0:4d:e5:15:fd:ce:1c:70:e8:e1:7d:0d:c0:
a0:9a:70:6b:cc:58:d4:2d:8e:2d:7b:01:66:32:0e:34:2f:7e:
95:ee:b9:c0:8d:7f:9f:84:a1:23:84:56:66:c4:de:d6:da:87:
78:82:c7:02:4a:46:2d:ed:6e:b6:b7:90:de:28:5b:a6:a0:a5:
f8:af:aa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:14:39 2026 by rpki-client