Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/lKK9xWa7q_skVNZ69eWVdc4JN8U.roa
File: lKK9xWa7q_skVNZ69eWVdc4JN8U.roa (raw, json)
Hash identifier: K7gUyxEv2exQtWcF6yU/1uDDjS3sLjEMkBibQmi1krA=
Subject key identifier: 94:A2:BD:C5:66:BB:AB:FB:24:54:D6:7A:F5:E5:95:75:CE:09:37:C5
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 01A131B047F34D6F460AEA86A191191ED4E1
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/lKK9xWa7q_skVNZ69eWVdc4JN8U.roa
Signing time: Mon 12 Oct 2026 19:56:38 +0000
ROA not before: Mon 12 Oct 2026 19:56:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16003
IP address blocks: 31.172.74.0/24 maxlen: 24
31.172.78.0/24 maxlen: 24
79.132.137.0/24 maxlen: 24
79.132.139.0/24 maxlen: 24
81.85.76.0/24 maxlen: 24
89.127.195.0/24 maxlen: 24
89.127.202.0/24 maxlen: 24
89.127.205.0/24 maxlen: 24
89.127.206.0/24 maxlen: 24
89.127.211.0/24 maxlen: 24
89.127.214.0/24 maxlen: 24
89.127.216.0/24 maxlen: 24
89.127.219.0/24 maxlen: 24
89.127.221.0/24 maxlen: 24
89.127.223.0/24 maxlen: 24
103.75.125.0/24 maxlen: 24
103.75.126.0/24 maxlen: 24
130.17.5.0/24 maxlen: 24
130.17.7.0/24 maxlen: 24
130.17.9.0/24 maxlen: 24
130.17.18.0/24 maxlen: 24
130.17.19.0/24 maxlen: 24
130.17.23.0/24 maxlen: 24
130.17.26.0/24 maxlen: 24
162.248.161.0/24 maxlen: 24
185.18.52.0/22 maxlen: 22
185.18.52.0/24 maxlen: 24
185.21.9.0/24 maxlen: 24
185.21.10.0/24 maxlen: 24
185.134.202.0/24 maxlen: 24
194.154.26.0/24 maxlen: 24
199.195.192.0/24 maxlen: 24
199.195.194.0/24 maxlen: 24
213.193.199.0/24 maxlen: 24
213.239.157.0/24 maxlen: 24
213.239.159.0/24 maxlen: 24
217.177.11.0/24 maxlen: 24
217.177.73.0/24 maxlen: 24
217.194.148.0/24 maxlen: 24
2a02:6b40:8002::/48 maxlen: 48
2a02:6b40:8003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:b0:47:f3:4d:6f:46:0a:ea:86:a1:91:19:1e:d4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Oct 12 19:56:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94a2bdc566bbabfb2454d67af5e59575ce0937c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:37:97:34:38:8c:0b:e5:ca:51:8c:66:a1:
cc:25:d9:b9:1e:b5:1c:b0:bb:d9:e2:57:03:53:9d:
59:03:04:d3:a4:51:d1:b9:a6:3c:e2:39:a9:8d:5b:
0e:90:84:40:71:26:06:ac:95:77:54:5f:0f:6f:03:
86:c9:4e:47:f9:27:fe:b7:15:9b:b1:6d:34:39:0b:
5e:28:ea:bb:5a:36:70:ea:32:cc:b0:d4:16:67:9b:
41:15:c2:ba:04:29:93:2c:5f:9d:55:a5:07:56:0b:
1c:e8:52:c9:5a:b6:15:4e:26:1c:92:94:b7:04:e2:
40:3c:59:f7:16:ef:30:db:aa:dc:b6:f8:db:52:7c:
c2:10:64:9c:2d:7e:b6:37:f0:9e:6e:b8:0f:47:10:
09:73:00:83:d6:c7:5a:3f:99:0d:23:2f:90:22:17:
68:8a:23:0d:ee:48:f7:f3:f4:9a:47:60:cb:e2:f2:
52:61:dd:9c:fa:ed:cf:04:71:07:3f:a2:ec:ff:59:
47:93:c0:4a:3b:16:16:15:75:d8:7a:dc:95:1d:4a:
39:15:c9:41:b3:52:36:0b:0c:a2:cf:8e:b9:f5:2b:
84:41:b4:b7:00:ef:77:34:aa:3b:fe:c5:1c:52:84:
1b:e7:68:63:8f:93:22:9f:bf:e0:3d:45:70:b5:e8:
88:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A2:BD:C5:66:BB:AB:FB:24:54:D6:7A:F5:E5:95:75:CE:09:37:C5
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/lKK9xWa7q_skVNZ69eWVdc4JN8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.74.0/24
31.172.78.0/24
79.132.137.0/24
79.132.139.0/24
81.85.76.0/24
89.127.195.0/24
89.127.202.0/24
89.127.205.0-89.127.206.255
89.127.211.0/24
89.127.214.0/24
89.127.216.0/24
89.127.219.0/24
89.127.221.0/24
89.127.223.0/24
103.75.125.0-103.75.126.255
130.17.5.0/24
130.17.7.0/24
130.17.9.0/24
130.17.18.0/23
130.17.23.0/24
130.17.26.0/24
162.248.161.0/24
185.18.52.0/22
185.21.9.0-185.21.10.255
185.134.202.0/24
194.154.26.0/24
199.195.192.0/24
199.195.194.0/24
213.193.199.0/24
213.239.157.0/24
213.239.159.0/24
217.177.11.0/24
217.177.73.0/24
217.194.148.0/24
IPv6:
2a02:6b40:8002::/47
Signature Algorithm: sha256WithRSAEncryption
25:00:c4:13:c9:10:2e:96:cf:f7:39:0b:b0:51:3f:8d:45:41:
aa:6b:9e:65:23:f9:aa:bc:21:b0:96:7c:0f:36:c5:89:77:6c:
26:2b:0d:22:1f:b7:e8:df:78:51:ca:a7:c9:aa:7b:25:51:a2:
8b:60:48:f0:9a:2e:78:ce:93:84:de:e7:da:2c:49:60:ba:7a:
f0:32:84:8d:90:99:90:8d:e9:bf:d3:85:21:c5:68:3e:ee:83:
fc:73:ac:0f:3a:71:09:5f:2e:22:31:04:92:12:84:59:cb:e4:
fb:84:d5:0d:2e:2e:79:f1:9d:49:b5:51:d8:12:55:1d:0d:0b:
cf:17:98:6c:f9:c6:31:79:59:28:49:04:7f:2b:77:7e:ae:4b:
8c:92:76:48:d2:ac:c5:52:51:bb:f8:4e:e4:94:d9:6f:20:c0:
d7:50:31:25:4e:2c:ff:6d:93:c6:52:52:4c:c1:7d:22:85:c1:
49:b7:cc:b1:7f:a2:3a:be:7a:f4:b8:ad:15:89:8f:f8:bc:c7:
ff:c6:94:d7:0d:43:4b:39:49:72:b1:dc:b0:4c:e3:48:85:34:
75:2b:9e:97:c8:17:67:b7:86:58:93:be:3f:57:a4:7a:70:6f:
c2:c0:e0:f3:19:f2:b7:30:9d:92:b9:47:33:87:a9:38:27:2a:
f8:57:af:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:40:38 2026 by rpki-client