Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/PRcnKHrqlJcrd4HqtNpbJQskQ6A.roa
File: PRcnKHrqlJcrd4HqtNpbJQskQ6A.roa (raw, json)
Hash identifier: aiGpWQ3cJ5Y8dalcsV9/+PGb+c10COEmzHR9vf++QS8=
Subject key identifier: 3D:17:27:28:7A:EA:94:97:2B:77:81:EA:B4:DA:5B:25:0B:24:43:A0
Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial: 019F17509370718BD9000D1FE8A90F61306B
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/PRcnKHrqlJcrd4HqtNpbJQskQ6A.roa
Signing time: Tue 30 Jun 2026 06:56:24 +0000
ROA not before: Tue 30 Jun 2026 06:56:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24753
IP address blocks: 62.32.32.0/24 maxlen: 24
81.85.52.0/22 maxlen: 22
81.85.96.0/22 maxlen: 22
81.85.100.0/24 maxlen: 24
81.85.160.0/20 maxlen: 20
89.21.172.0/24 maxlen: 24
89.21.173.0/24 maxlen: 24
89.21.181.0/24 maxlen: 24
213.187.128.0/22 maxlen: 24
213.187.132.0/22 maxlen: 24
213.187.139.0/24 maxlen: 24
213.187.152.0/22 maxlen: 24
2a00:df8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 12:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:50:93:70:71:8b:d9:00:0d:1f:e8:a9:0f:61:30:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Validity
Not Before: Jun 30 06:56:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d1727287aea94972b7781eab4da5b250b2443a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:d0:b4:a6:b1:dc:98:7d:08:8a:51:ef:18:
05:26:53:86:0d:b9:fe:98:21:ee:07:9a:3b:d3:45:
1c:d2:0f:9c:8f:56:86:fb:55:85:6e:20:59:1c:fe:
7b:8d:cd:d4:e4:b0:41:8e:51:49:83:bd:54:2a:51:
cd:e9:b9:13:d2:9a:91:3e:8d:e4:61:51:6b:d4:0f:
26:97:ed:99:89:63:7b:74:b0:89:10:e6:a4:61:45:
73:99:fe:db:cf:e6:00:70:21:ef:15:d9:c0:70:b7:
0b:a8:09:28:13:8a:d5:69:28:34:ed:b5:5b:e1:dd:
d3:6f:31:23:e4:e3:e5:dc:b7:76:e9:e3:29:64:c8:
43:3f:c6:7a:ed:31:66:dc:b4:f9:82:c0:4d:df:b5:
07:bb:58:33:b8:ab:95:75:04:32:df:bc:89:fa:af:
8e:5b:d4:9d:2d:46:15:aa:82:b0:d0:7a:02:47:4f:
98:18:10:10:80:f2:bc:13:f9:a0:d3:bc:10:14:36:
a6:40:82:48:f4:b2:65:5c:76:c7:d5:55:ba:0f:4a:
99:c0:27:d7:95:b6:fa:51:2f:41:7d:17:18:45:41:
22:60:6e:df:a8:1a:80:b5:c2:6a:45:0c:53:ac:f6:
82:8e:5f:dd:1f:b9:06:a9:c7:4b:50:af:6d:3c:fc:
fe:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:17:27:28:7A:EA:94:97:2B:77:81:EA:B4:DA:5B:25:0B:24:43:A0
X509v3 Authority Key Identifier:
keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/PRcnKHrqlJcrd4HqtNpbJQskQ6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.32.32.0/24
81.85.52.0/22
81.85.96.0-81.85.100.255
81.85.160.0/20
89.21.172.0/23
89.21.181.0/24
213.187.128.0/21
213.187.139.0/24
213.187.152.0/22
IPv6:
2a00:df8::/32
Signature Algorithm: sha256WithRSAEncryption
49:3b:e6:50:24:7d:c9:c9:12:e8:4f:7e:9b:16:71:06:c0:38:
83:cc:ee:fd:93:e2:b7:cc:a0:1f:8a:2f:44:14:b4:4f:bd:d9:
fc:a2:09:02:a8:60:a2:3c:53:08:62:03:27:cc:dc:55:82:02:
e2:10:09:59:48:cb:53:52:d7:19:a7:3c:91:ac:00:63:c1:a7:
d2:0b:1e:86:7e:8f:16:e6:2a:3c:6b:7f:75:dd:45:6f:66:45:
ff:49:d6:5c:14:92:b2:38:58:1b:c5:d3:79:ee:4c:69:00:54:
80:85:9e:d1:51:ba:62:6a:d8:39:c9:b2:77:5a:81:70:8a:51:
fe:f8:00:91:75:3c:b2:f0:1b:c8:e0:f8:a2:0a:55:62:00:b6:
c6:75:ce:a9:20:b9:c6:cd:05:3c:1c:2e:f3:bb:f8:72:34:e1:
67:79:4e:02:ce:48:74:98:8a:d6:cb:ed:78:44:ad:3b:02:92:
f0:c2:8a:60:ce:ad:2c:c3:5d:b3:44:95:79:df:c3:15:83:46:
f6:99:2f:4e:31:92:00:77:77:3d:03:3e:ef:ba:bd:06:17:00:
c9:ca:c5:1b:b8:80:6a:c7:cf:78:a1:3c:69:5d:87:1c:57:b8:
5f:c9:8e:70:0f:c2:44:ca:75:8f:c8:20:ee:f7:8a:55:96:83:
89:8e:00:7f
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgISAZ8XUJNwcYvZAA0f6KkPYTBrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZjZhMzAwYmY3ZDQwYjdmOGQ2MTgxYzViOGE3ZGJjNzFi
N2QxMjMwHhcNMjYwNjMwMDY1NjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDE3MjcyODdhZWE5NDk3MmI3NzgxZWFiNGRhNWIyNTBiMjQ0M2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwjQtKax3Jh9CIpR7xgFJlOGDbn+
mCHuB5o700Uc0g+cj1aG+1WFbiBZHP57jc3U5LBBjlFJg71UKlHN6bkT0pqRPo3k
YVFr1A8ml+2ZiWN7dLCJEOakYUVzmf7bz+YAcCHvFdnAcLcLqAkoE4rVaSg07bVb
4d3TbzEj5OPl3Ld26eMpZMhDP8Z67TFm3LT5gsBN37UHu1gzuKuVdQQy37yJ+q+O
W9SdLUYVqoKw0HoCR0+YGBAQgPK8E/mg07wQFDamQIJI9LJlXHbH1VW6D0qZwCfX
lbb6US9BfRcYRUEiYG7fqBqAtcJqRQxTrPaCjl/dH7kGqcdLUK9tPPz+NwIDAQAB
o4ICUDCCAkwwHQYDVR0OBBYEFD0XJyh66pSXK3eB6rTaWyULJEOgMB8GA1UdIwQY
MBaAFCn2owC/fUC3+NYYHFuKfbxxt9EjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hYWY0OWMtODNkZC00NmFhLThjZTct
Yjg0YzQxM2RmYWE0LzEvUFJjbktIcnFsSmNyZDRIcXROcGJKUXNrUTZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9hYWY0OWMtODNkZC00NmFhLThjZTctYjg0YzQxM2RmYWE0
LzEvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBEBAIAATA+AwQAPiAgAwQC
UVU0MAwDBAVRVWADBABRVWQDBARRVaADBAFZFawDBABZFbUDBAPVu4ADBADVu4sD
BALVu5gwDQQCAAIwBwMFACoADfgwDQYJKoZIhvcNAQELBQADggEBAEk75lAkfcnJ
EuhPfpsWcQbAOIPM7v2T4rfMoB+KL0QUtE+92fyiCQKoYKI8UwhiAyfM3FWCAuIQ
CVlIy1NS1xmnPJGsAGPBp9ILHoZ+jxbmKjxrf3XdRW9mRf9J1lwUkrI4WBvF03nu
TGkAVICFntFRumJq2DnJsndagXCKUf74AJF1PLLwG8jg+KIKVWIAtsZ1zqkgucbN
BTwcLvO7+HI04Wd5TgLOSHSYitbL7XhErTsCkvDCimDOrSzDXbNElXnfwxWDRvaZ
L04xkgB3dz0DPu+6vQYXAMnKxRu4gGrHz3ihPGldhxxXuF/JjnAPwkTKdY/IIO73
ilWWg4mOAH8=
-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:45 2026 by rpki-client