Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/knptrCD-oJksgPn94Wt2uefSueM.roa
File: knptrCD-oJksgPn94Wt2uefSueM.roa (raw, json)
Hash identifier: rEiDPNZa2BDmi7bTwoJAAEqWz54vDfGyl0rgwPZp0Lc=
Subject key identifier: 92:7A:6D:AC:20:FE:A0:99:2C:80:F9:FD:E1:6B:76:B9:E7:D2:B9:E3
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 01A0A3E45D6BBD1BFC71B90DF824C3263129
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/knptrCD-oJksgPn94Wt2uefSueM.roa
Signing time: Tue 15 Sep 2026 07:07:27 +0000
ROA not before: Tue 15 Sep 2026 07:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215148
IP address blocks: 31.170.248.0/24 maxlen: 24
31.170.249.0/24 maxlen: 24
31.170.250.0/24 maxlen: 24
31.170.251.0/24 maxlen: 24
31.170.252.0/24 maxlen: 24
31.170.253.0/24 maxlen: 24
31.170.254.0/24 maxlen: 24
31.170.255.0/24 maxlen: 24
31.171.38.0/24 maxlen: 24
31.171.108.0/24 maxlen: 24
31.171.109.0/24 maxlen: 24
31.171.111.0/24 maxlen: 24
31.171.116.0/24 maxlen: 24
31.171.119.0/24 maxlen: 24
31.171.124.0/24 maxlen: 24
62.212.224.0/24 maxlen: 24
62.212.225.0/24 maxlen: 24
62.212.226.0/24 maxlen: 24
62.212.227.0/24 maxlen: 24
62.212.228.0/24 maxlen: 24
62.212.233.0/24 maxlen: 24
62.212.234.0/24 maxlen: 24
62.212.236.0/24 maxlen: 24
62.212.244.0/24 maxlen: 24
62.212.245.0/24 maxlen: 24
77.81.56.0/24 maxlen: 24
77.81.57.0/24 maxlen: 24
77.81.58.0/24 maxlen: 24
77.81.59.0/24 maxlen: 24
77.81.60.0/24 maxlen: 24
77.81.61.0/24 maxlen: 24
77.81.62.0/24 maxlen: 24
77.81.63.0/24 maxlen: 24
85.132.1.0/24 maxlen: 24
85.132.3.0/24 maxlen: 24
85.132.12.0/24 maxlen: 24
85.132.17.0/24 maxlen: 24
85.132.18.0/24 maxlen: 24
85.132.43.0/24 maxlen: 24
85.132.44.0/24 maxlen: 24
85.132.46.0/24 maxlen: 24
85.132.47.0/24 maxlen: 24
85.132.48.0/24 maxlen: 24
85.132.49.0/24 maxlen: 24
85.132.52.0/24 maxlen: 24
85.132.53.0/24 maxlen: 24
85.132.54.0/24 maxlen: 24
85.132.55.0/24 maxlen: 24
85.132.57.0/24 maxlen: 24
85.132.61.0/24 maxlen: 24
85.132.67.0/24 maxlen: 24
85.132.69.0/24 maxlen: 24
85.132.71.0/24 maxlen: 24
85.132.72.0/24 maxlen: 24
85.132.75.0/24 maxlen: 24
85.132.76.0/24 maxlen: 24
85.132.78.0/24 maxlen: 24
85.132.79.0/24 maxlen: 24
85.132.81.0/24 maxlen: 24
85.132.84.0/24 maxlen: 24
85.132.85.0/24 maxlen: 24
85.132.88.0/24 maxlen: 24
85.132.89.0/24 maxlen: 24
85.132.91.0/24 maxlen: 24
85.132.95.0/24 maxlen: 24
85.132.96.0/24 maxlen: 24
85.132.99.0/24 maxlen: 24
85.132.100.0/24 maxlen: 24
85.132.101.0/24 maxlen: 24
85.132.107.0/24 maxlen: 24
85.132.109.0/24 maxlen: 24
85.132.111.0/24 maxlen: 24
85.132.115.0/24 maxlen: 24
85.132.116.0/24 maxlen: 24
85.132.123.0/24 maxlen: 24
85.132.124.0/24 maxlen: 24
94.20.16.0/24 maxlen: 24
94.20.20.0/24 maxlen: 24
94.20.21.0/24 maxlen: 24
94.20.30.0/24 maxlen: 24
94.20.40.0/24 maxlen: 24
94.20.45.0/24 maxlen: 24
94.20.47.0/24 maxlen: 24
94.20.49.0/24 maxlen: 24
94.20.60.0/24 maxlen: 24
94.20.62.0/24 maxlen: 24
94.20.64.0/24 maxlen: 24
94.20.65.0/24 maxlen: 24
94.20.68.0/24 maxlen: 24
94.20.71.0/24 maxlen: 24
94.20.72.0/24 maxlen: 24
94.20.74.0/24 maxlen: 24
94.20.77.0/24 maxlen: 24
94.20.81.0/24 maxlen: 24
94.20.84.0/24 maxlen: 24
94.20.85.0/24 maxlen: 24
94.20.94.0/24 maxlen: 24
94.20.95.0/24 maxlen: 24
94.20.105.0/24 maxlen: 24
94.20.136.0/24 maxlen: 24
94.20.137.0/24 maxlen: 24
94.20.138.0/24 maxlen: 24
94.20.142.0/24 maxlen: 24
94.20.147.0/24 maxlen: 24
94.20.178.0/24 maxlen: 24
94.20.179.0/24 maxlen: 24
94.20.216.0/24 maxlen: 24
94.20.217.0/24 maxlen: 24
94.20.225.0/24 maxlen: 24
94.20.229.0/24 maxlen: 24
94.20.230.0/24 maxlen: 24
94.20.239.0/24 maxlen: 24
94.20.246.0/24 maxlen: 24
94.20.248.0/24 maxlen: 24
2a01:6480:40::/48 maxlen: 48
2a01:6480:41::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:e4:5d:6b:bd:1b:fc:71:b9:0d:f8:24:c3:26:31:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Sep 15 07:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=927a6dac20fea0992c80f9fde16b76b9e7d2b9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6b:5a:d3:aa:67:3b:f5:f4:c0:2f:61:a8:ff:
c1:4e:0c:a7:ae:60:49:5f:e9:b8:72:ac:b3:34:47:
04:28:1f:ea:02:9d:89:53:ce:c5:3a:f3:92:32:1d:
50:a9:f1:69:04:b3:c5:2a:32:b2:e3:04:d1:0f:18:
a4:73:b9:de:4c:e2:cf:a0:d4:a3:9c:7c:02:86:36:
56:68:f6:3f:c2:f0:64:02:54:4f:83:85:f2:b3:f8:
db:5a:d8:7b:c6:07:b8:90:cc:c6:9e:e8:32:16:9b:
6b:eb:9f:5f:c3:3d:35:d1:c0:9f:9f:db:f4:3e:e6:
ca:64:8f:d6:4e:b2:01:e4:c1:4f:cc:40:5f:d5:54:
e9:9c:ac:3f:b9:2e:d4:fc:e1:b5:14:9f:62:ea:bf:
6d:a7:56:49:3b:db:18:60:29:17:cf:0a:9c:62:fa:
09:2a:03:4f:a8:06:eb:73:ef:58:f8:26:d1:2a:64:
d3:79:7e:26:9c:5d:a5:bf:81:55:0a:7a:14:61:1b:
1e:23:a6:c3:a1:85:fe:43:97:41:71:59:53:54:45:
09:a6:46:6b:24:3e:fd:f2:a7:13:52:cd:d1:3a:68:
9a:76:4e:30:6d:ca:59:b2:8e:a1:a2:15:c5:3d:c4:
44:9e:52:a3:f2:bc:2b:f9:fc:a2:f6:fe:63:ec:3c:
2f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7A:6D:AC:20:FE:A0:99:2C:80:F9:FD:E1:6B:76:B9:E7:D2:B9:E3
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/knptrCD-oJksgPn94Wt2uefSueM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.248.0/21
31.171.38.0/24
31.171.108.0/23
31.171.111.0/24
31.171.116.0/24
31.171.119.0/24
31.171.124.0/24
62.212.224.0-62.212.228.255
62.212.233.0-62.212.234.255
62.212.236.0/24
62.212.244.0/23
77.81.56.0/21
85.132.1.0/24
85.132.3.0/24
85.132.12.0/24
85.132.17.0-85.132.18.255
85.132.43.0-85.132.44.255
85.132.46.0-85.132.49.255
85.132.52.0/22
85.132.57.0/24
85.132.61.0/24
85.132.67.0/24
85.132.69.0/24
85.132.71.0-85.132.72.255
85.132.75.0-85.132.76.255
85.132.78.0/23
85.132.81.0/24
85.132.84.0/23
85.132.88.0/23
85.132.91.0/24
85.132.95.0-85.132.96.255
85.132.99.0-85.132.101.255
85.132.107.0/24
85.132.109.0/24
85.132.111.0/24
85.132.115.0-85.132.116.255
85.132.123.0-85.132.124.255
94.20.16.0/24
94.20.20.0/23
94.20.30.0/24
94.20.40.0/24
94.20.45.0/24
94.20.47.0/24
94.20.49.0/24
94.20.60.0/24
94.20.62.0/24
94.20.64.0/23
94.20.68.0/24
94.20.71.0-94.20.72.255
94.20.74.0/24
94.20.77.0/24
94.20.81.0/24
94.20.84.0/23
94.20.94.0/23
94.20.105.0/24
94.20.136.0-94.20.138.255
94.20.142.0/24
94.20.147.0/24
94.20.178.0/23
94.20.216.0/23
94.20.225.0/24
94.20.229.0-94.20.230.255
94.20.239.0/24
94.20.246.0/24
94.20.248.0/24
IPv6:
2a01:6480:40::/47
Signature Algorithm: sha256WithRSAEncryption
3a:e8:c5:2e:8b:a1:91:2e:c6:e8:e1:eb:82:ae:80:3d:ca:10:
7d:cb:fa:db:f4:0b:31:b0:06:44:75:e0:f0:ec:4b:fb:e1:7a:
d3:6c:40:fb:dd:ed:c9:78:c1:e4:c2:a8:24:be:44:a8:83:b7:
9b:b6:8e:11:7c:51:2d:f0:3d:81:a9:71:a7:75:b6:71:8a:0f:
a4:86:03:b5:78:a9:59:24:31:4c:c3:93:fe:89:4e:16:37:e8:
61:0a:06:30:d5:c9:98:65:76:97:c2:3c:91:36:28:47:15:db:
a2:b4:74:91:f2:8b:11:23:d8:e6:fe:f7:12:bd:00:87:a3:9b:
62:cc:9a:aa:12:07:c9:6a:a2:50:53:80:93:31:b9:6a:b4:5d:
f9:b0:65:88:78:7f:ac:9d:51:7b:c8:e5:86:05:15:b2:dd:1a:
ca:1f:3f:50:10:db:71:a9:c8:1c:60:12:cb:16:95:cf:e9:3e:
fa:b7:7b:f3:3b:02:9a:4e:21:c9:d3:9e:e7:e0:4a:31:a3:92:
de:26:27:71:29:e8:27:f4:3f:44:c4:5a:f3:e4:54:68:df:f1:
f9:7a:ad:cd:1f:35:fe:77:c4:24:a8:0d:e9:24:8c:fb:ac:c5:
6d:32:b4:d8:97:f6:3d:a7:da:2e:16:5b:e0:41:f5:c3:5e:c2:
0c:c3:45:dc
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgISAaCj5F1rvRv8cbkN+CTDJjEpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMjUyYTQ3NzI0MmZiNDVmMjBiYjA4MDIwYTQwM2EyYmI0
NjZhOWIwHhcNMjYwOTE1MDcwNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjdhNmRhYzIwZmVhMDk5MmM4MGY5ZmRlMTZiNzZiOWU3ZDJiOWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mta06pnO/X0wC9hqP/BTgynrmBJ
X+m4cqyzNEcEKB/qAp2JU87FOvOSMh1QqfFpBLPFKjKy4wTRDxikc7neTOLPoNSj
nHwChjZWaPY/wvBkAlRPg4Xys/jbWth7xge4kMzGnugyFptr659fwz010cCfn9v0
PubKZI/WTrIB5MFPzEBf1VTpnKw/uS7U/OG1FJ9i6r9tp1ZJO9sYYCkXzwqcYvoJ
KgNPqAbrc+9Y+CbRKmTTeX4mnF2lv4FVCnoUYRseI6bDoYX+Q5dBcVlTVEUJpkZr
JD798qcTUs3ROmiadk4wbcpZso6hohXFPcREnlKj8rwr+fyi9v5j7DwvjwIDAQAB
o4IEFDCCBBAwHQYDVR0OBBYEFJJ6bawg/qCZLID5/eFrdrnn0rnjMB8GA1UdIwQY
MBaAFC4lKkdyQvtF8guwgCCkA6K7RmqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGlVcVIzSkMtMFh5QzdDQUlLUURvcnRHYXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iMTA1NjItMjZhMS00NjQ1LThkMmIt
MTZmMTQ2YmVmOTk1LzEva25wdHJDRC1vSmtzZ1BuOTRXdDJ1ZWZTdWVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9iMTA1NjItMjZhMS00NjQ1LThkMmItMTZmMTQ2YmVmOTk1
LzEvTGlVcVIzSkMtMFh5QzdDQUlLUURvcnRHYXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICKAYIKwYBBQUHAQcBAf8EggIXMIICEzCCAf4EAgABMIIB
9gMEAx+q+AMEAB+rJgMEAR+rbAMEAB+rbwMEAB+rdAMEAB+rdwMEAB+rfDAMAwQF
PtTgAwQAPtTkMAwDBAA+1OkDBAA+1OoDBAA+1OwDBAE+1PQDBANNUTgDBABVhAED
BABVhAMDBABVhAwwDAMEAFWEEQMEAFWEEjAMAwQAVYQrAwQAVYQsMAwDBAFVhC4D
BAFVhDADBAJVhDQDBABVhDkDBABVhD0DBABVhEMDBABVhEUwDAMEAFWERwMEAFWE
SDAMAwQAVYRLAwQAVYRMAwQBVYROAwQAVYRRAwQBVYRUAwQBVYRYAwQAVYRbMAwD
BABVhF8DBABVhGAwDAMEAFWEYwMEAVWEZAMEAFWEawMEAFWEbQMEAFWEbzAMAwQA
VYRzAwQAVYR0MAwDBABVhHsDBABVhHwDBABeFBADBAFeFBQDBABeFB4DBABeFCgD
BABeFC0DBABeFC8DBABeFDEDBABeFDwDBABeFD4DBAFeFEADBABeFEQwDAMEAF4U
RwMEAF4USAMEAF4USgMEAF4UTQMEAF4UUQMEAV4UVAMEAV4UXgMEAF4UaTAMAwQD
XhSIAwQAXhSKAwQAXhSOAwQAXhSTAwQBXhSyAwQBXhTYAwQAXhThMAwDBABeFOUD
BABeFOYDBABeFO8DBABeFPYDBABeFPgwDwQCAAIwCQMHASoBZIAAQDANBgkqhkiG
9w0BAQsFAAOCAQEAOujFLouhkS7G6OHrgq6APcoQfcv62/QLMbAGRHXg8OxL++F6
02xA+93tyXjB5MKoJL5EqIO3m7aOEXxRLfA9galxp3W2cYoPpIYDtXipWSQxTMOT
/olOFjfoYQoGMNXJmGV2l8I8kTYoRxXborR0kfKLESPY5v73Er0Ah6ObYsyaqhIH
yWqiUFOAkzG5arRd+bBliHh/rJ1Re8jlhgUVst0ayh8/UBDbcanIHGASyxaVz+k+
+rd78zsCmk4hydOe5+BKMaOS3iYncSnoJ/Q/RMRa8+RUaN/x+XqtzR81/nfEJKgN
6SSM+6zFbTK02Jf2PafaLhZb4EH1w17CDMNF3A==
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:36:11 2026 by rpki-client