Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/KsSx7HAIG8UiPo_9ox9BjV2Oltc.roa
File: KsSx7HAIG8UiPo_9ox9BjV2Oltc.roa (raw, json)
Hash identifier: pCu9vg3wAa4MKzkAnOhHwcvZiyujnFlJ5yjYXEI6nsA=
Subject key identifier: 2A:C4:B1:EC:70:08:1B:C5:22:3E:8F:FD:A3:1F:41:8D:5D:8E:96:D7
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 019EF16827DF3C4B5FBD6A2A59C32390CB5F
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/KsSx7HAIG8UiPo_9ox9BjV2Oltc.roa
Signing time: Mon 22 Jun 2026 22:16:35 +0000
ROA not before: Mon 22 Jun 2026 22:16:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29075
IP address blocks: 45.10.224.0/23 maxlen: 23
45.10.226.0/24 maxlen: 24
45.94.124.0/22 maxlen: 22
45.94.128.0/22 maxlen: 22
45.94.128.0/23 maxlen: 23
45.94.130.0/23 maxlen: 23
85.118.32.0/19 maxlen: 19
91.109.176.0/20 maxlen: 20
128.204.224.0/20 maxlen: 20
141.255.144.0/20 maxlen: 20
178.20.48.0/21 maxlen: 21
185.10.252.0/22 maxlen: 24
185.10.252.0/24 maxlen: 24
185.10.254.0/24 maxlen: 24
185.10.255.0/24 maxlen: 24
185.118.0.0/22 maxlen: 22
185.123.24.0/22 maxlen: 22
185.132.74.0/24 maxlen: 24
185.132.75.0/24 maxlen: 24
185.177.180.0/22 maxlen: 22
188.121.224.0/19 maxlen: 19
188.121.227.0/24 maxlen: 24
212.85.144.0/20 maxlen: 20
2a00:1b88::/32 maxlen: 32
2a02:2178::/29 maxlen: 29
2a02:2178::/32 maxlen: 32
2a06:e040:3502::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f1:68:27:df:3c:4b:5f:bd:6a:2a:59:c3:23:90:cb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Jun 22 22:16:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ac4b1ec70081bc5223e8ffda31f418d5d8e96d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:de:8c:c6:69:53:54:fe:6c:6e:61:73:21:
da:7a:e1:80:cb:dd:c5:23:da:bd:9b:17:dc:75:9b:
b1:00:e8:f8:da:58:1b:c8:7c:a0:55:18:5f:f2:e9:
db:e7:40:c3:6e:c2:69:8d:f8:47:33:ee:e7:67:d9:
66:3a:3b:e6:1f:88:db:84:17:ff:1c:fb:69:4a:03:
ea:1c:ec:18:96:81:a1:08:08:4d:3a:fe:e2:59:f0:
07:58:ca:47:74:fd:07:c7:ea:fa:ee:36:25:52:70:
9a:42:41:51:02:63:91:26:1f:91:8d:2b:ac:cb:14:
e4:3f:d4:b2:57:0b:f3:55:c5:94:53:40:d2:bf:9e:
33:21:6d:40:07:e3:bd:4e:37:52:51:81:bc:ae:4c:
ba:9a:f4:ae:b2:e5:f7:3d:7a:d9:78:72:99:95:54:
be:2a:a4:ff:6d:18:7e:9b:54:3e:d7:c4:1e:46:5a:
4b:0e:6f:c9:b1:dc:92:66:90:27:4e:85:c9:39:90:
ec:6e:37:76:15:5a:22:2f:07:b5:19:60:1d:40:b5:
62:6a:cc:d0:3a:6e:d3:13:80:b1:93:de:6f:17:47:
dd:65:22:08:af:c5:73:e4:ce:84:43:66:24:d5:5d:
5a:14:25:66:7c:e7:7f:0d:20:4c:a1:76:e4:00:6f:
cd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C4:B1:EC:70:08:1B:C5:22:3E:8F:FD:A3:1F:41:8D:5D:8E:96:D7
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/KsSx7HAIG8UiPo_9ox9BjV2Oltc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.224.0-45.10.226.255
45.94.124.0-45.94.131.255
85.118.32.0/19
91.109.176.0/20
128.204.224.0/20
141.255.144.0/20
178.20.48.0/21
185.10.252.0/22
185.118.0.0/22
185.123.24.0/22
185.132.74.0/23
185.177.180.0/22
188.121.224.0/19
212.85.144.0/20
IPv6:
2a00:1b88::/32
2a02:2178::/29
2a06:e040:3502::/48
Signature Algorithm: sha256WithRSAEncryption
3a:c5:24:ee:60:11:fa:f1:5f:4c:67:e3:72:7c:b4:e0:7a:f1:
70:52:cb:bf:f2:97:ec:50:b9:d3:7d:5a:ef:64:7e:b8:48:05:
f0:76:52:6a:00:1f:82:6e:da:ad:f5:56:c9:ab:85:a2:fb:7f:
48:e8:e8:5f:11:f9:6e:66:a1:5d:cc:79:20:d5:c1:41:e7:a2:
0e:de:f6:36:18:61:69:e8:fb:8d:af:a2:01:ea:13:db:3e:24:
f3:22:a7:9a:c6:7e:a6:ec:d6:dc:48:1a:f3:3c:06:92:79:90:
07:39:1f:a3:ca:24:c1:b7:56:5c:f2:90:c8:56:a7:31:c6:32:
10:dd:3a:e8:27:23:1b:2c:31:fb:cf:2e:2d:9a:6d:eb:99:5d:
ea:1d:c5:81:c7:03:5b:36:e5:d9:3a:3d:ee:55:b3:ac:20:ec:
a5:41:e6:e2:3f:ae:7c:c4:b3:44:da:6c:eb:80:b4:f7:2f:5d:
91:4f:4c:22:93:05:00:66:7d:71:af:52:a9:34:b1:d4:1a:fe:
82:9c:22:2e:e5:5d:b6:f6:31:74:ec:56:e4:7a:55:26:a3:36:
a8:31:e0:e6:a5:52:b8:a9:76:a3:12:8b:d6:e9:9b:83:b2:38:
22:2d:09:ae:58:57:88:97:b9:f3:58:4a:e7:df:11:ac:4a:19:
34:63:bb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:05:16 2026 by rpki-client