Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/K7pjnPK8S24idyOMea3NYin5SO8.roa
File: K7pjnPK8S24idyOMea3NYin5SO8.roa (raw, json)
Hash identifier: YckTf9iIpdd+XsvzzovN9f+k8o5y12iUYrJM+OVIcPk=
Subject key identifier: 2B:BA:63:9C:F2:BC:4B:6E:22:77:23:8C:79:AD:CD:62:29:F9:48:EF
Certificate issuer: /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial: 019F1DFFFDC6666939E188A99CA364CFBC0F
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/K7pjnPK8S24idyOMea3NYin5SO8.roa
Signing time: Wed 01 Jul 2026 14:05:43 +0000
ROA not before: Wed 01 Jul 2026 14:05:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215708
IP address blocks: 45.129.36.0/24 maxlen: 24
45.129.37.0/24 maxlen: 24
45.129.38.0/24 maxlen: 24
45.129.39.0/24 maxlen: 24
185.53.141.0/24 maxlen: 24
185.53.142.0/24 maxlen: 24
185.53.143.0/24 maxlen: 24
185.126.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:ff:fd:c6:66:69:39:e1:88:a9:9c:a3:64:cf:bc:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Validity
Not Before: Jul 1 14:05:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bba639cf2bc4b6e2277238c79adcd6229f948ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f0:c4:f4:ad:d0:e6:a1:ad:99:19:82:fa:1b:
8e:35:71:b8:e4:5a:28:3d:e2:c4:1c:d5:36:f7:e9:
96:d4:9f:c6:be:06:ed:e3:98:cd:81:f8:0a:a6:e1:
80:cd:88:d5:9f:5f:35:6e:23:27:2a:7e:55:3a:e9:
bf:72:07:26:2a:94:ed:30:a1:6a:d8:10:52:d9:55:
af:ea:f2:9a:41:53:f6:0f:dc:5f:ff:0a:bf:8b:8a:
db:85:da:69:3c:3b:5b:f3:0a:17:0c:a0:5f:a9:98:
41:d7:33:b3:fc:89:3a:77:db:b1:e4:54:1e:6c:f4:
6c:9b:01:08:48:dd:8b:97:55:6e:44:a7:65:46:46:
80:99:31:b0:9a:00:7f:24:db:eb:70:77:ee:3d:1f:
20:77:e9:6c:f6:b1:19:15:a6:cd:b8:db:e7:1c:ba:
a7:13:b6:48:2a:c1:db:19:54:87:2f:0e:cf:4e:fe:
21:b8:81:04:8c:9c:cb:b9:ae:6b:f8:bd:e7:b4:e4:
eb:86:d2:b2:32:dc:64:35:1d:6f:4f:a3:4a:24:7b:
72:35:58:b5:65:01:6e:1c:14:92:89:88:7d:23:cd:
63:82:0f:fd:c2:04:94:b9:21:82:07:12:dc:92:90:
62:06:e9:0c:84:b7:ac:e5:9c:6b:fd:31:7e:18:2a:
ee:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BA:63:9C:F2:BC:4B:6E:22:77:23:8C:79:AD:CD:62:29:F9:48:EF
X509v3 Authority Key Identifier:
keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/K7pjnPK8S24idyOMea3NYin5SO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.36.0/22
185.53.141.0-185.53.143.255
185.126.202.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:70:7e:56:7c:6e:9e:33:39:da:17:6c:26:53:c5:4e:2b:cb:
bd:fc:d4:fc:1c:de:1a:1a:25:eb:bf:97:9f:08:40:94:ad:7c:
32:10:d6:d7:f0:cd:a8:74:54:f0:a4:0f:3e:70:05:0c:d5:b6:
da:c0:66:0a:7a:38:69:28:bd:6a:b3:83:4e:d9:8e:61:29:c8:
ae:c9:bc:51:2e:c2:a1:9a:c3:69:f8:a0:ae:7b:3c:09:d4:0d:
e8:67:f0:8f:5f:95:62:bf:63:fd:04:7e:7c:32:21:b5:8a:ad:
ad:7a:da:59:54:dc:6b:1a:14:d4:d0:15:4c:f7:79:8c:35:e1:
ec:9b:76:1c:57:1c:a6:88:95:b3:46:62:07:46:e1:a0:52:d5:
ec:f2:65:eb:a3:c3:d2:52:90:49:98:e3:c4:2e:2f:02:b2:a0:
69:39:cf:84:f5:eb:65:3c:6c:e1:44:d0:76:1d:de:08:70:c1:
9f:17:76:1b:8d:85:82:ed:31:e6:08:11:51:8c:aa:fc:46:9e:
e3:fc:a6:22:fe:0b:e4:fe:4d:45:fa:67:62:bc:7a:63:0b:b5:
6b:08:21:ef:d2:df:25:99:be:79:31:fe:f2:7a:9e:6a:48:f4:
c1:bc:12:07:18:f5:45:2d:b1:09:0e:4d:e4:50:d7:f2:2e:11:
aa:41:6a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:09 2026 by rpki-client