Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/KjzF_07LNXsxnLlTwbx1qy0Nf70.roa
File: KjzF_07LNXsxnLlTwbx1qy0Nf70.roa (raw, json)
Hash identifier: ZSx0htaVrCbITx9CYSvyBpcrxLFJ5FXPjTi+sdFipU8=
Subject key identifier: 2A:3C:C5:FF:4E:CB:35:7B:31:9C:B9:53:C1:BC:75:AB:2D:0D:7F:BD
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 019F746886D816B228F8888673F5E8212739
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/KjzF_07LNXsxnLlTwbx1qy0Nf70.roa
Signing time: Sat 18 Jul 2026 08:47:15 +0000
ROA not before: Sat 18 Jul 2026 08:47:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212921
IP address blocks: 2.59.152.0/22 maxlen: 22
2.59.152.0/24 maxlen: 24
2.59.155.0/24 maxlen: 24
45.91.224.0/22 maxlen: 22
45.91.227.0/24 maxlen: 24
45.142.152.0/22 maxlen: 22
45.142.152.0/24 maxlen: 24
45.142.154.0/24 maxlen: 24
45.142.155.0/24 maxlen: 24
91.204.224.0/22 maxlen: 22
91.204.225.0/24 maxlen: 24
185.202.100.0/22 maxlen: 22
193.239.150.0/23 maxlen: 23
193.239.150.0/24 maxlen: 24
193.239.154.0/23 maxlen: 23
193.239.154.0/24 maxlen: 24
194.126.202.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
194.126.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:68:86:d8:16:b2:28:f8:88:86:73:f5:e8:21:27:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Jul 18 08:47:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a3cc5ff4ecb357b319cb953c1bc75ab2d0d7fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:19:74:39:79:53:d3:b3:44:40:d0:76:f9:
61:44:ca:f3:00:14:d7:bb:16:ac:3f:2b:9b:bd:c3:
21:e9:ed:7e:68:29:fd:ff:87:b2:1f:c9:64:bc:7d:
b4:5e:a4:19:01:d9:10:d6:b2:37:18:31:f0:3a:4a:
78:07:9f:91:d4:31:d3:75:eb:bd:2d:c3:d2:87:80:
3b:6d:6b:0b:52:36:3c:94:91:16:ba:86:12:12:29:
cc:49:94:ef:3f:94:65:7c:50:2e:9d:8b:25:47:85:
84:5f:c4:f9:05:26:4d:dd:c9:23:5f:03:14:bc:dc:
d6:16:13:f8:dd:4b:e3:40:a1:f1:c1:45:2e:dc:b9:
09:6f:0b:b1:2a:89:b4:4a:bc:4c:5e:28:6d:f3:a7:
58:f3:26:9c:74:de:83:1b:5b:20:b2:c1:15:bf:d5:
6e:67:0c:25:e7:fb:74:de:90:b8:e2:b5:d1:b0:46:
a1:45:a2:a1:60:d0:d6:d7:f4:3c:59:1b:62:9d:17:
75:5d:f2:50:14:72:8d:71:cf:87:31:ed:a8:46:73:
eb:04:9e:a9:2b:bf:be:f6:1e:15:f1:a8:9c:a3:74:
23:97:10:b4:9a:eb:1e:77:fd:19:12:92:c0:1d:cb:
c5:f8:80:57:d4:d1:ec:4f:09:ca:0f:5d:f8:d8:a6:
2a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3C:C5:FF:4E:CB:35:7B:31:9C:B9:53:C1:BC:75:AB:2D:0D:7F:BD
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/KjzF_07LNXsxnLlTwbx1qy0Nf70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.152.0/22
45.91.224.0/22
45.142.152.0/22
91.204.224.0/22
185.202.100.0/22
193.239.150.0/23
193.239.154.0/23
194.126.202.0/24
194.126.215.0/24
194.126.219.0/24
Signature Algorithm: sha256WithRSAEncryption
14:88:e0:66:f5:4b:fa:ea:9f:ad:d9:e6:e3:3d:b8:93:e6:c0:
11:33:b6:58:31:79:ea:2d:e2:fd:bf:af:37:22:09:bd:e4:0e:
f7:8a:d7:52:b4:78:68:3d:a7:f8:a4:ab:ea:17:f3:c2:60:0b:
40:9c:47:fe:e9:b8:b6:ee:d5:7e:8e:f9:42:08:63:81:bb:75:
ca:b6:85:ec:94:78:4e:f8:ae:2b:83:51:ab:fd:0e:49:20:f0:
b4:bf:c4:af:e3:97:f7:06:6a:6e:68:88:d2:ee:da:cd:60:61:
8e:fd:aa:e8:a1:14:7a:45:e6:20:2c:3f:d6:53:f3:92:1f:e7:
d8:c5:b6:c0:92:c4:52:8f:24:ab:8f:63:ef:3e:8c:2e:f6:db:
16:9e:04:0a:1d:0b:7b:49:9a:2f:fd:23:8d:1c:3d:03:b0:25:
25:61:5e:55:d1:97:a9:97:c7:b1:48:6c:17:8f:a5:14:77:5c:
8c:ef:b9:a2:ce:c2:ce:b1:27:2d:16:54:6c:0d:2c:eb:1f:b6:
69:96:ff:29:af:a6:88:3f:49:d9:3c:48:ca:7d:96:ca:9e:40:
3d:65:21:df:a2:f0:18:9a:cb:ab:fd:59:8e:5a:f4:92:55:c2:
14:25:5f:28:43:12:9f:b0:5a:88:aa:fb:b6:eb:b6:bd:e9:72:
71:d4:f3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:49:12 2026 by rpki-client