Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/KePo7Nw7FD5Mxn7olHoTuZmCdm8.roa
File: KePo7Nw7FD5Mxn7olHoTuZmCdm8.roa (raw, json)
Hash identifier: DbkIiVGqdDfug970pR74esedhPIntvPxxOlSvJeDA4s=
Subject key identifier: 29:E3:E8:EC:DC:3B:14:3E:4C:C6:7E:E8:94:7A:13:B9:99:82:76:6F
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 019FE30A000DBD730586FAB15129962A41B1
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/KePo7Nw7FD5Mxn7olHoTuZmCdm8.roa
Signing time: Sat 08 Aug 2026 20:21:51 +0000
ROA not before: Sat 08 Aug 2026 20:21:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209043
IP address blocks: 5.44.248.0/24 maxlen: 24
36.255.188.0/24 maxlen: 24
36.255.189.0/24 maxlen: 24
36.255.190.0/24 maxlen: 24
36.255.191.0/24 maxlen: 24
45.94.232.0/24 maxlen: 24
45.94.233.0/24 maxlen: 24
45.94.234.0/24 maxlen: 24
45.94.235.0/24 maxlen: 24
45.143.68.0/24 maxlen: 24
45.143.69.0/24 maxlen: 24
45.143.70.0/24 maxlen: 24
45.143.71.0/24 maxlen: 24
45.157.124.0/22 maxlen: 24
45.157.124.0/24 maxlen: 24
45.157.125.0/24 maxlen: 24
45.157.126.0/24 maxlen: 24
45.157.127.0/24 maxlen: 24
83.150.240.0/24 maxlen: 24
83.150.241.0/24 maxlen: 24
83.150.242.0/24 maxlen: 24
83.150.243.0/24 maxlen: 24
87.239.254.0/24 maxlen: 24
95.181.216.0/24 maxlen: 24
95.181.217.0/24 maxlen: 24
95.181.218.0/24 maxlen: 24
95.181.219.0/24 maxlen: 24
103.53.82.0/24 maxlen: 24
103.53.83.0/24 maxlen: 24
103.225.200.0/24 maxlen: 24
103.225.201.0/24 maxlen: 24
103.225.202.0/24 maxlen: 24
103.225.203.0/24 maxlen: 24
167.160.122.0/24 maxlen: 24
167.160.123.0/24 maxlen: 24
167.160.124.0/24 maxlen: 24
167.160.125.0/24 maxlen: 24
167.160.126.0/24 maxlen: 24
167.160.127.0/24 maxlen: 24
171.22.252.0/24 maxlen: 24
185.46.116.0/24 maxlen: 24
185.46.117.0/24 maxlen: 24
185.46.240.0/24 maxlen: 24
185.46.241.0/24 maxlen: 24
185.46.242.0/24 maxlen: 24
185.46.243.0/24 maxlen: 24
185.75.208.0/24 maxlen: 24
185.75.209.0/24 maxlen: 24
185.75.210.0/24 maxlen: 24
185.75.211.0/24 maxlen: 24
185.147.140.0/22 maxlen: 32
185.201.190.0/24 maxlen: 24
185.253.68.0/24 maxlen: 24
185.253.69.0/24 maxlen: 24
185.253.70.0/24 maxlen: 24
185.253.71.0/24 maxlen: 24
193.108.242.0/24 maxlen: 24
193.108.243.0/24 maxlen: 24
193.201.248.0/24 maxlen: 24
193.201.249.0/24 maxlen: 24
193.201.250.0/24 maxlen: 24
193.201.251.0/24 maxlen: 24
194.32.106.0/24 maxlen: 24
194.36.96.0/24 maxlen: 24
194.36.97.0/24 maxlen: 24
194.36.98.0/24 maxlen: 24
194.36.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 20:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e3:0a:00:0d:bd:73:05:86:fa:b1:51:29:96:2a:41:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Aug 8 20:21:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29e3e8ecdc3b143e4cc67ee8947a13b99982766f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:c0:31:2a:0d:a0:69:27:03:a5:12:b1:7c:
b6:54:75:cd:85:93:c5:50:f7:c5:80:8a:c4:80:30:
62:68:0f:de:58:12:63:e5:fc:ba:0f:b1:ea:ef:e9:
0c:5b:3b:ed:5b:75:44:57:15:e0:71:f2:02:4c:eb:
38:89:fa:4d:6f:df:01:9e:32:23:cf:b9:dc:3c:e2:
63:3f:0b:04:60:52:f4:4a:c2:09:b1:e1:d4:b0:ac:
c5:87:d9:05:05:c0:62:a8:31:79:f7:2a:69:b4:e9:
a9:ee:83:34:f6:fd:17:01:69:92:61:e0:e9:ec:17:
94:04:6b:1e:7d:45:11:ba:0b:e2:b5:6c:41:40:f2:
2d:15:95:c7:16:48:e5:d9:78:23:d9:8e:53:82:e3:
a7:4b:c6:ae:18:80:bc:61:0c:c4:3a:86:a4:f4:e8:
c9:fa:5b:2e:85:3e:b1:9c:d2:29:8c:33:3d:11:4f:
39:c5:4e:6b:30:25:a2:d2:dd:b3:22:d6:a7:c7:93:
3f:17:4a:12:3f:e1:3f:a4:eb:48:5f:fe:d1:26:2a:
ad:bf:6a:87:c8:0e:ea:71:b4:ec:22:e6:db:62:7f:
b8:97:50:48:1c:54:3f:99:ed:cc:e5:06:f2:ab:f5:
3e:2f:73:8e:fe:ee:46:f9:ae:3f:5a:58:2c:1b:93:
5f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E3:E8:EC:DC:3B:14:3E:4C:C6:7E:E8:94:7A:13:B9:99:82:76:6F
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/KePo7Nw7FD5Mxn7olHoTuZmCdm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.248.0/24
36.255.188.0/22
45.94.232.0/22
45.143.68.0/22
45.157.124.0/22
83.150.240.0/22
87.239.254.0/24
95.181.216.0/22
103.53.82.0/23
103.225.200.0/22
167.160.122.0-167.160.127.255
171.22.252.0/24
185.46.116.0/23
185.46.240.0/22
185.75.208.0/22
185.147.140.0/22
185.201.190.0/24
185.253.68.0/22
193.108.242.0/23
193.201.248.0/22
194.32.106.0/24
194.36.96.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:ef:5a:ee:ca:f1:b3:7e:ed:f4:aa:ba:a8:58:62:72:92:49:
73:b7:1f:36:f1:84:35:46:e0:f0:76:87:6c:5f:d1:ec:87:01:
38:25:82:7b:e6:3b:8c:ab:6b:4a:d4:02:ad:4b:75:20:f8:d9:
f8:ba:6c:e3:ec:d1:73:cd:d4:5f:9e:d3:4e:83:7e:a6:d9:b5:
3c:de:41:b5:7e:f0:2a:9e:1d:1a:29:16:0d:9d:8f:6f:80:09:
2c:63:02:91:1b:d8:f2:42:a8:57:c5:f2:78:71:7f:87:bc:01:
a2:ad:07:bc:74:55:0b:c8:fa:f7:51:f0:39:11:11:29:7b:dc:
54:42:72:77:ae:0f:89:f8:46:a0:91:48:47:30:da:4c:fc:07:
ae:9a:0c:b3:cf:8b:70:83:8c:6a:a4:26:0a:dd:94:2e:b4:36:
17:c3:b3:c2:5e:be:0a:0e:28:d2:28:82:67:88:fa:b7:29:d7:
b9:bc:c3:ee:20:fb:48:31:85:c0:86:a4:c8:7d:80:dc:f8:1b:
75:d8:7b:53:0f:ee:8b:5f:10:70:26:5d:cf:3f:3f:f8:a6:6d:
8f:d9:78:8b:76:5d:6e:02:cf:42:b1:58:f2:71:0a:73:60:78:
1e:8d:5b:83:53:88:72:74:59:72:03:c2:26:7a:5e:aa:47:f7:
50:1f:4e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:19:47 2026 by rpki-client