Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/KSKcnSClVywh7svLHOadw0FX5ys.roa
File: KSKcnSClVywh7svLHOadw0FX5ys.roa (raw, json)
Hash identifier: 5M0rHC3JJz3K6cuM3onDbsQIxbL1wkoxcxzP67fYMN8=
Subject key identifier: 29:22:9C:9D:20:A5:57:2C:21:EE:CB:CB:1C:E6:9D:C3:41:57:E7:2B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0C83715814475FC369B434E64C29CD548
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/KSKcnSClVywh7svLHOadw0FX5ys.roa
Signing time: Tue 22 Sep 2026 08:24:08 +0000
ROA not before: Tue 22 Sep 2026 08:24:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 85.189.2.0/24 maxlen: 24
85.189.28.0/24 maxlen: 24
87.83.3.0/24 maxlen: 24
87.84.235.0/24 maxlen: 24
87.85.70.0/24 maxlen: 24
194.242.159.0/24 maxlen: 24
195.40.159.0/24 maxlen: 24
195.72.173.0/24 maxlen: 24
217.79.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:37:15:81:44:75:fc:36:9b:43:4e:64:c2:9c:d5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 22 08:24:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29229c9d20a5572c21eecbcb1ce69dc34157e72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:84:fc:24:fd:17:ca:a9:15:b9:f6:a1:06:
99:3c:be:82:77:0e:37:1c:fd:45:f1:6b:bf:fe:62:
68:1f:9c:8f:29:ed:d7:52:e4:d0:fc:ff:56:c5:37:
c5:82:9c:4c:fd:f3:f0:78:a3:50:73:19:ee:6e:a8:
61:69:14:69:f9:cf:16:dc:90:1c:66:ac:1f:a1:29:
f6:85:4f:1e:21:33:04:4a:1a:50:31:ba:11:c3:45:
19:1b:05:ec:a5:e6:19:94:be:ab:bd:66:f0:08:39:
6d:30:07:fe:26:fa:72:42:c9:03:d5:53:4e:9f:68:
d8:f1:be:4b:74:b5:53:b1:61:f2:1b:e0:63:70:24:
61:aa:fe:c6:8e:63:82:91:68:ad:62:24:cd:7c:a0:
52:9b:5e:78:59:3b:e0:42:59:c0:d4:d7:3c:49:a4:
ab:f9:24:4a:df:bc:63:85:c1:fe:6b:b0:fa:8e:02:
9d:2f:0c:57:7f:a9:e7:6e:b5:23:b5:0c:19:96:37:
c9:01:56:72:69:f4:69:9d:0a:4f:54:94:59:60:65:
c0:29:af:ef:d4:5b:77:67:85:3a:d9:e6:47:59:c0:
ab:3d:f3:2a:eb:6c:7a:b0:59:32:a9:ee:89:dc:38:
f9:fd:b0:32:74:97:5e:b1:ab:5c:ee:47:5e:1c:c5:
50:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:22:9C:9D:20:A5:57:2C:21:EE:CB:CB:1C:E6:9D:C3:41:57:E7:2B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/KSKcnSClVywh7svLHOadw0FX5ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.189.2.0/24
85.189.28.0/24
87.83.3.0/24
87.84.235.0/24
87.85.70.0/24
194.242.159.0/24
195.40.159.0/24
195.72.173.0/24
217.79.120.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ff:45:ea:05:3a:a4:a4:fc:d2:7d:0c:14:7c:78:16:66:e5:
5a:95:de:27:3d:da:11:0d:19:0e:60:a3:ec:2c:9a:b7:a4:08:
dc:56:b7:83:27:f1:8e:cb:fb:7e:c5:e0:6c:54:a1:51:77:ef:
2b:dc:74:f0:2f:d6:78:54:bc:4e:33:4c:09:eb:63:88:3b:64:
19:c6:28:85:34:ee:de:56:ee:1d:e5:a7:1e:3a:27:4e:b7:cd:
34:ae:ae:5a:23:6a:ef:9c:ee:72:8f:f3:80:31:97:48:4f:ab:
7a:6d:fe:04:46:38:99:ab:84:31:ea:4e:15:74:8e:48:99:b8:
7f:c8:82:1a:f4:27:b5:6b:6e:7d:69:c4:62:0c:64:84:f9:cb:
68:ac:a3:bf:2f:07:02:e9:35:9e:92:98:b9:77:b0:0b:9d:34:
80:b5:4a:37:43:c8:51:67:fe:83:e2:cf:d1:79:29:7d:d0:13:
2a:89:a7:3d:23:29:99:f6:f7:33:28:95:af:fa:f6:4f:ad:14:
d8:eb:cd:c6:90:31:6b:1f:bf:82:20:db:02:42:32:79:b4:3b:
3d:96:e4:2f:90:54:56:a3:2d:ba:b0:0e:50:28:67:10:e9:33:
13:57:0a:8b:4e:79:46:ae:6d:63:f4:67:5c:ea:63:31:91:7b:
c2:57:0c:c4
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAaDINxWBRHX8NptDTmTCnNVIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTIyMDgyNDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTIyOWM5ZDIwYTU1NzJjMjFlZWNiY2IxY2U2OWRjMzQxNTdlNzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz6E/CT9F8qpFbn2oQaZPL6Cdw43
HP1F8Wu//mJoH5yPKe3XUuTQ/P9WxTfFgpxM/fPweKNQcxnubqhhaRRp+c8W3JAc
ZqwfoSn2hU8eITMEShpQMboRw0UZGwXspeYZlL6rvWbwCDltMAf+JvpyQskD1VNO
n2jY8b5LdLVTsWHyG+BjcCRhqv7GjmOCkWitYiTNfKBSm154WTvgQlnA1Nc8SaSr
+SRK37xjhcH+a7D6jgKdLwxXf6nnbrUjtQwZljfJAVZyafRpnQpPVJRZYGXAKa/v
1Ft3Z4U62eZHWcCrPfMq62x6sFkyqe6J3Dj5/bAydJdesatc7kdeHMVQ6wIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFCkinJ0gpVcsIe7LyxzmncNBV+crMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvS1NLY25TQ2xWeXdoN3N2TEhPYWR3MEZYNXlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAVb0CAwQA
Vb0cAwQAV1MDAwQAV1TrAwQAV1VGAwQAwvKfAwQAwyifAwQAw0itAwQA2U94MA0G
CSqGSIb3DQEBCwUAA4IBAQBS/0XqBTqkpPzSfQwUfHgWZuVald4nPdoRDRkOYKPs
LJq3pAjcVreDJ/GOy/t+xeBsVKFRd+8r3HTwL9Z4VLxOM0wJ62OIO2QZxiiFNO7e
Vu4d5aceOidOt800rq5aI2rvnO5yj/OAMZdIT6t6bf4ERjiZq4Qx6k4VdI5Imbh/
yIIa9Ce1a259acRiDGSE+ctorKO/LwcC6TWekpi5d7ALnTSAtUo3Q8hRZ/6D4s/R
eSl90BMqiac9IymZ9vczKJWv+vZPrRTY683GkDFrH7+CINsCQjJ5tDs9luQvkFRW
oy26sA5QKGcQ6TMTVwqLTnlGrm1j9Gdc6mMxkXvCVwzE
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:53:12 2026 by rpki-client