Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/kAKuXVzbthSJCa9_XyQiFsVmBso.roa
File: kAKuXVzbthSJCa9_XyQiFsVmBso.roa (raw, json)
Hash identifier: j7YyQibF9jux/DZKePceRe9hnhmF98H36thhTNTqV+U=
Subject key identifier: 90:02:AE:5D:5C:DB:B6:14:89:09:AF:7F:5F:24:22:16:C5:66:06:CA
Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Certificate serial: 01A1116AADB824484D4726328975E0EAD0C7
Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/kAKuXVzbthSJCa9_XyQiFsVmBso.roa
Signing time: Tue 06 Oct 2026 13:32:46 +0000
ROA not before: Tue 06 Oct 2026 13:32:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62874
IP address blocks: 31.25.192.0/22 maxlen: 22
31.105.96.0/19 maxlen: 19
87.56.0.0/20 maxlen: 20
87.56.16.0/23 maxlen: 23
87.56.18.0/23 maxlen: 23
87.56.20.0/23 maxlen: 23
87.56.22.0/23 maxlen: 23
87.56.24.0/23 maxlen: 23
87.56.26.0/23 maxlen: 23
87.56.28.0/23 maxlen: 23
87.56.30.0/23 maxlen: 23
176.20.192.0/20 maxlen: 20
176.20.208.0/23 maxlen: 23
176.20.210.0/23 maxlen: 23
176.20.212.0/23 maxlen: 23
176.20.214.0/23 maxlen: 23
176.20.216.0/23 maxlen: 23
176.20.218.0/23 maxlen: 23
176.20.220.0/23 maxlen: 23
176.20.222.0/23 maxlen: 23
193.104.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:6a:ad:b8:24:48:4d:47:26:32:89:75:e0:ea:d0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Validity
Not Before: Oct 6 13:32:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9002ae5d5cdbb6148909af7f5f242216c56606ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:d2:ec:95:95:6d:71:7c:84:56:ad:e2:cb:
bb:0e:1d:74:8a:a9:88:6e:48:9e:7c:f0:62:a3:5f:
ad:4e:ac:97:00:31:b9:94:25:0a:39:b2:9f:8e:66:
17:58:3d:dd:f3:4c:88:32:85:58:9b:6a:58:3c:6b:
b5:c8:ae:c8:a4:ef:3e:73:e4:8d:50:a3:c2:51:83:
cf:b0:46:b3:60:97:b7:ea:50:3a:f3:ec:06:c7:61:
5c:41:df:7b:0e:aa:ec:31:c7:e5:69:4d:13:55:0c:
6f:b1:82:21:50:13:93:a7:44:4d:13:7b:76:f9:39:
7f:8b:f8:35:17:ad:58:24:75:2a:ec:fd:37:e2:95:
91:62:95:fd:c3:0e:9b:0a:f6:b3:d7:08:61:4b:27:
80:51:f3:46:77:d2:0f:8e:40:ad:27:14:68:3c:70:
7c:b6:75:de:d8:37:4f:ad:d0:72:2f:01:6b:3f:fb:
df:32:23:dd:53:26:b2:f7:97:5b:9c:81:6f:f6:0f:
0e:45:64:8d:2e:af:40:ef:12:4d:47:88:60:2f:ec:
40:40:ed:89:76:59:b9:9d:1e:2b:31:67:2c:5c:33:
a3:f5:c1:71:a4:70:41:82:4d:5e:ac:bc:9b:c8:48:
10:7d:d9:4b:e6:a2:c6:91:97:d6:e5:83:24:e1:26:
3e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:02:AE:5D:5C:DB:B6:14:89:09:AF:7F:5F:24:22:16:C5:66:06:CA
X509v3 Authority Key Identifier:
keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/kAKuXVzbthSJCa9_XyQiFsVmBso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.192.0/22
31.105.96.0/19
87.56.0.0/19
176.20.192.0/19
193.104.126.0/24
Signature Algorithm: sha256WithRSAEncryption
65:d6:f5:e9:f5:15:47:e2:93:ab:73:c6:60:da:cb:d1:e8:2e:
5f:b7:47:b7:78:30:79:28:18:47:9b:60:6e:96:1d:e8:1a:38:
36:fd:e2:59:b0:16:ac:d6:db:cb:20:1e:aa:6c:01:d3:95:7f:
b8:e3:58:46:22:e4:5b:f0:18:56:37:d8:0e:c4:eb:2d:cd:39:
87:55:43:d3:d7:2f:b0:72:74:9a:b4:fc:01:0f:66:72:43:be:
49:f3:82:d9:b6:03:ed:19:22:8f:30:ae:72:50:52:76:66:ec:
76:52:4a:a0:b8:e2:8c:8a:50:37:56:82:60:72:ea:e4:b4:4c:
da:2a:93:59:a4:e4:0f:2e:4c:78:d9:ff:82:3a:4b:78:79:59:
db:a0:fb:4d:42:b2:c1:91:4b:e3:1d:26:43:6c:96:b0:57:77:
eb:c5:db:b1:0b:3f:e0:02:09:52:c7:a1:7a:c3:47:48:b2:ae:
00:94:dd:45:ef:9a:a5:b4:19:32:c4:5c:9b:fb:1a:65:db:09:
0d:1b:e0:bd:b4:0a:8d:91:54:f1:e2:c1:3c:53:11:b4:32:dd:
af:41:4b:02:b3:af:3c:ce:59:d1:e6:a5:4f:41:44:11:a5:bd:
a0:f3:dc:d5:4a:0c:d2:e2:8b:b1:53:02:29:b7:b9:2c:54:0c:
2f:30:7d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:11:11 2026 by rpki-client