Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/KaNsHMxeMIniplC6_6M0vVPYx_k.roa
File: KaNsHMxeMIniplC6_6M0vVPYx_k.roa (raw, json)
Hash identifier: 6Ww0KzOV8mlL7HD/vDWNDxlSQOHCCfwSb3HyPThwZyw=
Subject key identifier: 29:A3:6C:1C:CC:5E:30:89:E2:A6:50:BA:FF:A3:34:BD:53:D8:C7:F9
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A1BAF48249BF86A9CC805FBB1B06F164A5
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/KaNsHMxeMIniplC6_6M0vVPYx_k.roa
Signing time: Sun 08 Nov 2026 11:39:08 +0000
ROA not before: Sun 08 Nov 2026 11:39:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214716
IP address blocks: 37.221.108.0/24 maxlen: 24
45.141.131.0/24 maxlen: 24
45.152.139.0/24 maxlen: 24
80.76.44.0/24 maxlen: 24
83.136.49.0/24 maxlen: 24
85.31.53.0/24 maxlen: 24
176.118.189.0/24 maxlen: 24
185.240.84.0/24 maxlen: 24
193.160.71.0/24 maxlen: 24
193.202.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ba:f4:82:49:bf:86:a9:cc:80:5f:bb:1b:06:f1:64:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Nov 8 11:39:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29a36c1ccc5e3089e2a650baffa334bd53d8c7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:51:9f:c2:df:7f:a9:b0:6f:f5:1d:f9:9d:55:
e6:a3:5b:7f:0d:60:3d:20:9d:41:96:1f:e4:c7:d4:
cc:89:2e:1f:40:74:db:99:6c:74:06:6a:68:09:42:
9d:27:57:e4:7d:47:08:29:85:0d:30:db:48:ad:cf:
a7:13:fc:a7:fd:c9:37:32:83:e4:06:a9:e8:e9:29:
29:42:26:c9:e9:9a:84:e1:97:bb:6f:10:1a:13:c7:
19:9a:56:ff:2d:73:f5:1c:19:17:e0:55:c2:96:a3:
b8:98:ba:a3:2f:c5:1b:cd:1d:88:97:7a:73:57:10:
8a:98:c2:c6:78:02:3e:5d:19:9c:a1:32:b1:86:9e:
55:5d:cc:91:63:ba:09:79:6e:ea:38:b9:ec:02:55:
23:ff:bf:6d:bd:63:d2:55:a7:55:84:ec:41:4f:11:
97:cb:c7:61:17:57:32:0e:93:ce:e6:7f:83:29:ba:
d6:20:7d:0a:76:01:70:12:18:b0:76:df:e0:67:80:
38:b1:8a:35:a0:ae:df:64:c0:04:98:81:5e:27:f7:
71:e4:5b:a2:7f:2f:b7:29:26:ab:c6:a3:5b:0d:b9:
3a:ea:bc:5b:53:3f:29:2e:e3:1d:4f:40:38:34:b9:
8b:8e:fa:fb:25:23:4e:12:84:2b:9e:31:5b:98:ec:
12:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A3:6C:1C:CC:5E:30:89:E2:A6:50:BA:FF:A3:34:BD:53:D8:C7:F9
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/KaNsHMxeMIniplC6_6M0vVPYx_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.108.0/24
45.141.131.0/24
45.152.139.0/24
80.76.44.0/24
83.136.49.0/24
85.31.53.0/24
176.118.189.0/24
185.240.84.0/24
193.160.71.0/24
193.202.113.0/24
Signature Algorithm: sha256WithRSAEncryption
29:8f:ae:e6:fe:84:c7:a2:d9:c4:e4:f7:ab:bf:38:b2:06:49:
ee:0c:8c:94:68:c8:57:fa:e0:07:77:43:f4:0c:41:f7:1c:91:
4a:43:61:06:b6:4e:bb:81:02:73:95:7a:7f:8f:f7:6c:44:4b:
3e:fc:56:e1:13:7a:48:44:c4:5e:c8:2b:ac:57:fd:d0:3c:32:
73:6c:7f:16:74:4a:bc:7a:d6:0f:74:1f:87:a6:28:af:57:8e:
c7:d9:e7:24:58:6f:e1:03:af:b5:bc:71:98:32:84:9a:fe:3e:
31:fe:58:71:cf:d2:5e:d5:58:46:b0:41:a2:b3:48:8c:6a:ee:
37:2f:7b:fc:65:a7:b4:71:c9:01:95:99:31:69:10:f4:e3:72:
e1:a8:c2:b2:8b:b1:a3:4a:4f:fc:88:9d:e7:66:a3:7d:ea:96:
42:00:a2:3b:fb:c9:2d:ce:e9:fb:d1:44:85:55:70:b8:40:af:
53:b5:c2:3e:5e:3d:d2:77:ba:ed:09:69:33:43:6f:48:47:74:
f9:37:78:fe:81:07:94:4a:3b:84:2d:d4:23:e8:ea:f6:44:24:
d0:74:8d:9d:78:2d:33:01:89:2f:84:c9:bc:fa:e6:0b:ff:ff:
fc:9d:06:2b:a8:6a:db:ec:bc:74:50:9f:b6:da:14:bf:b7:0a:
31:9e:a2:8f
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAaG69IJJv4apzIBfuxsG8WSlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjYxMTA4MTEzOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWEzNmMxY2NjNWUzMDg5ZTJhNjUwYmFmZmEzMzRiZDUzZDhjN2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVGfwt9/qbBv9R35nVXmo1t/DWA9
IJ1Blh/kx9TMiS4fQHTbmWx0BmpoCUKdJ1fkfUcIKYUNMNtIrc+nE/yn/ck3MoPk
Bqno6SkpQibJ6ZqE4Ze7bxAaE8cZmlb/LXP1HBkX4FXClqO4mLqjL8UbzR2Il3pz
VxCKmMLGeAI+XRmcoTKxhp5VXcyRY7oJeW7qOLnsAlUj/79tvWPSVadVhOxBTxGX
y8dhF1cyDpPO5n+DKbrWIH0KdgFwEhiwdt/gZ4A4sYo1oK7fZMAEmIFeJ/dx5Fui
fy+3KSarxqNbDbk66rxbUz8pLuMdT0A4NLmLjvr7JSNOEoQrnjFbmOwSIQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFCmjbBzMXjCJ4qZQuv+jNL1T2Mf5MB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvS2FOc0hNeGVNSW5pcGxDNl82TTB2VlBZeF9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAJd1sAwQA
LY2DAwQALZiLAwQAUEwsAwQAU4gxAwQAVR81AwQAsHa9AwQAufBUAwQAwaBHAwQA
wcpxMA0GCSqGSIb3DQEBCwUAA4IBAQApj67m/oTHotnE5PervziyBknuDIyUaMhX
+uAHd0P0DEH3HJFKQ2EGtk67gQJzlXp/j/dsREs+/FbhE3pIRMReyCusV/3QPDJz
bH8WdEq8etYPdB+HpiivV47H2eckWG/hA6+1vHGYMoSa/j4x/lhxz9Je1VhGsEGi
s0iMau43L3v8Zae0cckBlZkxaRD043LhqMKyi7GjSk/8iJ3nZqN96pZCAKI7+8kt
zun70USFVXC4QK9TtcI+Xj3Sd7rtCWkzQ29IR3T5N3j+gQeUSjuELdQj6Or2RCTQ
dI2deC0zAYkvhMm8+uYL///8nQYrqGrb7Lx0UJ+22hS/twoxnqKP
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:34:39 2026 by rpki-client