Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/K5_GAK6BtBGzPBmgtgBbHt3Ot6c.roa
File: K5_GAK6BtBGzPBmgtgBbHt3Ot6c.roa (raw, json)
Hash identifier: MarGqFt+Uv23NQPK5A+4/z+6RD4mCPWX9m3BUAFWy0w=
Subject key identifier: 2B:9F:C6:00:AE:81:B4:11:B3:3C:19:A0:B6:00:5B:1E:DD:CE:B7:A7
Certificate issuer: /CN=2d154ceb4cec941c20507a666be64d8851c4b086
Certificate serial: 019F2368B0E5BBA331EA7A236B1E03FEC029
Authority key identifier: 2D:15:4C:EB:4C:EC:94:1C:20:50:7A:66:6B:E6:4D:88:51:C4:B0:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRVM60zslBwgUHpma-ZNiFHEsIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/K5_GAK6BtBGzPBmgtgBbHt3Ot6c.roa
Signing time: Thu 02 Jul 2026 15:18:11 +0000
ROA not before: Thu 02 Jul 2026 15:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60453
IP address blocks: 89.33.107.0/24 maxlen: 24
89.42.108.0/23 maxlen: 23
89.43.79.0/24 maxlen: 24
185.128.96.0/22 maxlen: 22
185.197.149.0/24 maxlen: 24
195.62.51.0/24 maxlen: 24
213.170.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/LRVM60zslBwgUHpma-ZNiFHEsIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/LRVM60zslBwgUHpma-ZNiFHEsIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRVM60zslBwgUHpma-ZNiFHEsIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b0:e5:bb:a3:31:ea:7a:23:6b:1e:03:fe:c0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d154ceb4cec941c20507a666be64d8851c4b086
Validity
Not Before: Jul 2 15:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b9fc600ae81b411b33c19a0b6005b1eddceb7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:5e:e1:60:4b:39:51:16:63:21:2c:34:b0:
c6:7e:69:c5:28:50:e4:c4:68:de:19:8b:22:bd:f5:
53:af:e9:14:5e:c3:b4:6f:c4:cd:1e:d2:1d:ff:1f:
36:34:d7:46:66:fb:1c:c0:45:87:0d:c3:4b:8f:47:
80:e6:e2:10:26:59:f0:06:ba:e0:82:b7:b6:43:15:
60:a7:08:21:22:4c:3f:85:31:f7:cb:9a:9d:7e:1f:
e8:c9:65:43:be:02:73:e6:60:7d:2f:7d:d0:79:40:
ac:fe:87:ab:5e:90:c8:c1:68:c8:cc:06:22:36:17:
e3:ee:0a:85:6b:e0:c6:8b:d4:c2:11:0a:bf:0c:56:
fc:5f:6d:88:ec:30:ff:49:80:1b:c9:aa:0a:61:68:
c6:df:a7:92:db:16:c6:a5:f8:58:72:69:1a:c4:6c:
11:55:8a:ef:91:9d:a1:19:0e:de:59:22:b4:8a:ae:
70:9a:cc:db:fb:05:5e:e9:e3:12:95:e8:77:12:65:
ec:c6:75:78:e5:2c:5e:b6:fc:a5:9e:58:24:98:c1:
a2:ce:6e:0c:0d:0d:de:5c:6c:8f:f6:96:6b:a6:e2:
a9:56:1a:bf:48:36:ee:87:0b:4e:fc:f1:a7:8d:22:
03:21:c7:17:7b:2a:5e:b9:dd:cf:92:94:7f:a3:63:
ad:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9F:C6:00:AE:81:B4:11:B3:3C:19:A0:B6:00:5B:1E:DD:CE:B7:A7
X509v3 Authority Key Identifier:
keyid:2D:15:4C:EB:4C:EC:94:1C:20:50:7A:66:6B:E6:4D:88:51:C4:B0:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRVM60zslBwgUHpma-ZNiFHEsIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/K5_GAK6BtBGzPBmgtgBbHt3Ot6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/LRVM60zslBwgUHpma-ZNiFHEsIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.107.0/24
89.42.108.0/23
89.43.79.0/24
185.128.96.0/22
185.197.149.0/24
195.62.51.0/24
213.170.208.0/22
Signature Algorithm: sha256WithRSAEncryption
53:33:ab:43:da:aa:88:ff:0f:79:e3:a2:c3:fd:75:14:12:d2:
1c:90:9a:d7:f2:37:ee:3b:6d:59:75:ed:14:ef:ac:d3:bd:eb:
9c:8a:e7:29:64:83:6e:76:0a:7e:ab:4c:d4:f6:80:88:02:22:
af:5b:a2:d8:27:e5:8b:39:af:df:93:5b:3f:97:16:bd:88:a6:
f5:89:2e:22:66:8e:50:f6:e1:0c:d4:08:f8:8a:80:7c:0c:63:
04:ab:38:fb:4b:38:3f:db:37:51:0e:e2:c9:f4:bf:4b:66:4f:
dd:95:00:22:1e:b4:2d:22:1f:3d:99:df:f8:b4:05:03:6c:d7:
37:2a:3a:49:d6:68:1a:3d:14:c1:89:09:29:44:95:d4:d8:ca:
86:01:5a:ae:a9:4a:21:61:03:09:6e:da:26:94:07:1a:27:7c:
f4:be:1c:3d:9d:73:55:aa:ce:a9:8e:ff:2a:1d:9a:08:3e:74:
a7:3e:19:22:e5:1a:62:51:e1:08:9c:0a:4c:bd:01:85:4c:65:
81:7b:e8:c0:03:be:30:6a:77:06:b6:9f:9b:2e:b1:a6:52:75:
da:c4:3c:13:32:0a:b8:f5:cb:f2:63:50:af:0f:da:46:20:bc:
10:ca:15:6a:b4:36:0d:4e:f1:7c:ab:e2:da:2e:2b:42:c4:7f:
c0:96:38:96
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZ8jaLDlu6Mx6nojax4D/sApMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMTU0Y2ViNGNlYzk0MWMyMDUwN2E2NjZiZTY0ZDg4NTFj
NGIwODYwHhcNMjYwNzAyMTUxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjlmYzYwMGFlODFiNDExYjMzYzE5YTBiNjAwNWIxZWRkY2ViN2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArble4WBLOVEWYyEsNLDGfmnFKFDk
xGjeGYsivfVTr+kUXsO0b8TNHtId/x82NNdGZvscwEWHDcNLj0eA5uIQJlnwBrrg
gre2QxVgpwghIkw/hTH3y5qdfh/oyWVDvgJz5mB9L33QeUCs/oerXpDIwWjIzAYi
Nhfj7gqFa+DGi9TCEQq/DFb8X22I7DD/SYAbyaoKYWjG36eS2xbGpfhYcmkaxGwR
VYrvkZ2hGQ7eWSK0iq5wmszb+wVe6eMSleh3EmXsxnV45SxetvylnlgkmMGizm4M
DQ3eXGyP9pZrpuKpVhq/SDbuhwtO/PGnjSIDIccXeypeud3PkpR/o2OtDwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFCufxgCugbQRszwZoLYAWx7dzrenMB8GA1UdIwQY
MBaAFC0VTOtM7JQcIFB6ZmvmTYhRxLCGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJWTTYwenNsQndnVUhwbWEtWk5pRkhFc0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iMjY4NTktOWIxNC00NTBmLWJiODUt
NTkyZWQ3Mzc2MWNhLzEvSzVfR0FLNkJ0Qkd6UEJtZ3RnQmJIdDNPdDZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iMjY4NTktOWIxNC00NTBmLWJiODUtNTkyZWQ3Mzc2MWNh
LzEvTFJWTTYwenNsQndnVUhwbWEtWk5pRkhFc0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAWSFrAwQB
WSpsAwQAWStPAwQCuYBgAwQAucWVAwQAwz4zAwQC1arQMA0GCSqGSIb3DQEBCwUA
A4IBAQBTM6tD2qqI/w9546LD/XUUEtIckJrX8jfuO21Zde0U76zTveuciucpZINu
dgp+q0zU9oCIAiKvW6LYJ+WLOa/fk1s/lxa9iKb1iS4iZo5Q9uEM1Aj4ioB8DGME
qzj7Szg/2zdRDuLJ9L9LZk/dlQAiHrQtIh89md/4tAUDbNc3KjpJ1mgaPRTBiQkp
RJXU2MqGAVquqUohYQMJbtomlAcaJ3z0vhw9nXNVqs6pjv8qHZoIPnSnPhki5Rpi
UeEInApMvQGFTGWBe+jAA74wancGtp+bLrGmUnXaxDwTMgq49cvyY1CvD9pGILwQ
yhVqtDYNTvF8q+LaLitCxH/AljiW
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:06 2026 by rpki-client