Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/Klm1nGj_LSMBfKkyGJjvAIaeok0.roa
File: Klm1nGj_LSMBfKkyGJjvAIaeok0.roa (raw, json)
Hash identifier: +VWNIbC6wBoyYfO8f7wueYZjrJvM5UfplemzFp8SVEk=
Subject key identifier: 2A:59:B5:9C:68:FF:2D:23:01:7C:A9:32:18:98:EF:00:86:9E:A2:4D
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 019F89B950AE741EEA9B55135B4B73A17CA1
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/Klm1nGj_LSMBfKkyGJjvAIaeok0.roa
Signing time: Wed 22 Jul 2026 12:07:31 +0000
ROA not before: Wed 22 Jul 2026 12:07:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39855
IP address blocks: 85.203.9.0/24 maxlen: 24
85.203.16.0/24 maxlen: 24
85.203.25.0/24 maxlen: 24
85.203.38.0/24 maxlen: 24
85.203.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:b9:50:ae:74:1e:ea:9b:55:13:5b:4b:73:a1:7c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Jul 22 12:07:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a59b59c68ff2d23017ca9321898ef00869ea24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:93:58:f3:28:ec:96:16:0d:53:e4:8b:a1:c6:
f6:c5:d4:94:ff:86:b0:22:ed:69:ea:98:fd:ec:c6:
e6:76:e4:ba:b1:59:58:2a:4a:09:c3:1e:99:85:3d:
01:7a:60:e4:9f:a4:74:18:c1:14:73:fe:7e:5a:14:
81:d9:94:e8:2f:53:15:fb:cd:25:a9:e6:9f:f0:55:
76:aa:e9:a8:1f:67:df:01:19:f0:b2:69:b6:8c:db:
6d:c1:20:01:9b:6b:e2:71:d7:78:2c:e7:cf:e7:39:
c3:23:ae:db:80:12:be:c1:61:d0:3c:47:d2:c3:07:
5b:ea:fa:51:8d:2c:9c:c0:dc:fa:40:53:f5:a7:5f:
f1:c2:47:a9:6b:a1:10:53:71:ad:c4:26:2c:91:fd:
83:61:92:98:a8:ad:1f:10:c7:f8:37:de:4b:0d:6e:
1c:b1:1f:ea:be:b0:a6:83:27:9c:17:4b:41:f4:f8:
19:e9:13:9a:48:aa:a3:9f:4a:68:2f:79:21:52:64:
60:b7:9f:01:8a:a4:29:a1:05:e5:53:5c:23:26:a6:
14:8c:94:dd:29:42:fb:8c:7d:70:45:8b:68:39:09:
78:77:6d:93:0b:a8:f9:be:ce:82:97:8a:d8:e0:f0:
ba:8c:c1:25:44:12:6a:a9:57:26:b7:12:78:b2:df:
91:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:59:B5:9C:68:FF:2D:23:01:7C:A9:32:18:98:EF:00:86:9E:A2:4D
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/Klm1nGj_LSMBfKkyGJjvAIaeok0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.9.0/24
85.203.16.0/24
85.203.25.0/24
85.203.38.0/24
85.203.56.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:70:a0:d4:52:1f:9e:28:e6:35:3e:29:1a:2c:84:bb:5b:db:
6e:ac:67:42:a2:a3:fc:ad:a5:5c:f6:d0:83:51:ef:0f:2f:1c:
a2:2f:b8:47:56:56:bf:0e:5e:fa:3f:21:d2:7f:83:38:09:91:
6d:6e:a0:92:96:46:44:7e:f1:75:d7:dc:eb:96:9a:84:32:c4:
1e:06:d4:bf:36:08:17:f1:38:7a:84:a9:db:a2:f5:7e:7c:b7:
ca:51:fc:c0:fb:03:38:94:87:a1:df:90:78:77:22:a0:40:67:
09:b1:c7:f8:6b:36:5b:40:ae:3a:59:e8:ba:9f:b9:0d:66:55:
72:95:b7:b0:d0:1b:60:17:af:a7:2b:af:9c:2c:2a:0e:0a:ff:
07:f1:48:82:ed:b8:87:05:e9:aa:44:e9:97:b7:63:fc:3a:2a:
8b:db:3a:1a:a9:db:3a:fa:26:f6:ef:34:bb:95:59:a1:c7:5a:
5a:5f:17:81:04:af:68:80:1e:db:c6:9b:ed:de:63:20:ae:2c:
49:cc:8d:fd:cb:18:3d:e5:96:37:5c:74:32:dc:19:39:7e:ca:
9b:3d:eb:0a:ef:62:c3:ef:32:ab:ec:b5:6a:65:58:bc:1d:81:
16:8a:a0:09:7e:78:bb:11:8d:49:4f:26:99:36:61:28:94:64:
3f:db:60:71
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ+JuVCudB7qm1UTW0tzoXyhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw
MWZiODkwHhcNMjYwNzIyMTIwNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTU5YjU5YzY4ZmYyZDIzMDE3Y2E5MzIxODk4ZWYwMDg2OWVhMjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55NY8yjslhYNU+SLocb2xdSU/4aw
Iu1p6pj97MbmduS6sVlYKkoJwx6ZhT0BemDkn6R0GMEUc/5+WhSB2ZToL1MV+80l
qeaf8FV2qumoH2ffARnwsmm2jNttwSABm2vicdd4LOfP5znDI67bgBK+wWHQPEfS
wwdb6vpRjSycwNz6QFP1p1/xwkepa6EQU3GtxCYskf2DYZKYqK0fEMf4N95LDW4c
sR/qvrCmgyecF0tB9PgZ6ROaSKqjn0poL3khUmRgt58BiqQpoQXlU1wjJqYUjJTd
KUL7jH1wRYtoOQl4d22TC6j5vs6Cl4rY4PC6jMElRBJqqVcmtxJ4st+RCQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFCpZtZxo/y0jAXypMhiY7wCGnqJNMB8GA1UdIwQY
MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt
NmFiMTExNTVmNmZiLzEvS2xtMW5Hal9MU01CZktreUdKanZBSWFlb2swLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi
LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVcsJAwQA
VcsQAwQAVcsZAwQAVcsmAwQCVcs4MA0GCSqGSIb3DQEBCwUAA4IBAQAOcKDUUh+e
KOY1PikaLIS7W9turGdCoqP8raVc9tCDUe8PLxyiL7hHVla/Dl76PyHSf4M4CZFt
bqCSlkZEfvF119zrlpqEMsQeBtS/NggX8Th6hKnbovV+fLfKUfzA+wM4lIeh35B4
dyKgQGcJscf4azZbQK46Wei6n7kNZlVylbew0BtgF6+nK6+cLCoOCv8H8UiC7biH
BemqROmXt2P8OiqL2zoaqds6+ib27zS7lVmhx1paXxeBBK9ogB7bxpvt3mMgrixJ
zI39yxg95ZY3XHQy3Bk5fsqbPesK72LD7zKr7LVqZVi8HYEWiqAJfni7EY1JTyaZ
NmEolGQ/22Bx
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:24 2026 by rpki-client