Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/KnCjXC0CtDz7MRhB0QGe_0O_Pbo.roa
File: KnCjXC0CtDz7MRhB0QGe_0O_Pbo.roa (raw, json)
Hash identifier: ifpbxLGdjsNwInt+UoHo2Q5p0zJ8zz1iOEpU4LLAFmo=
Subject key identifier: 2A:70:A3:5C:2D:02:B4:3C:FB:31:18:41:D1:01:9E:FF:43:BF:3D:BA
Certificate issuer: /CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Certificate serial: 01A0EC3038051F0322AB1BC66AE3D26EAF82
Authority key identifier: 80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/KnCjXC0CtDz7MRhB0QGe_0O_Pbo.roa
Signing time: Tue 29 Sep 2026 08:02:58 +0000
ROA not before: Tue 29 Sep 2026 08:02:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 5.39.0.0/17 maxlen: 17
5.135.0.0/16 maxlen: 16
5.196.0.0/16 maxlen: 16
37.59.0.0/16 maxlen: 16
37.187.0.0/16 maxlen: 16
46.105.0.0/16 maxlen: 16
46.105.198.0/24 maxlen: 24
46.105.199.0/24 maxlen: 24
46.105.200.0/24 maxlen: 24
46.105.201.0/24 maxlen: 24
46.105.202.0/24 maxlen: 24
46.105.203.0/24 maxlen: 24
46.105.204.0/24 maxlen: 24
46.105.206.0/24 maxlen: 24
46.105.207.0/24 maxlen: 24
51.38.0.0/16 maxlen: 16
51.68.0.0/16 maxlen: 16
51.75.0.0/16 maxlen: 16
51.77.0.0/16 maxlen: 16
51.83.0.0/16 maxlen: 16
51.89.0.0/16 maxlen: 16
51.91.0.0/16 maxlen: 16
51.178.0.0/16 maxlen: 16
51.195.0.0/16 maxlen: 16
51.210.0.0/16 maxlen: 16
51.254.0.0/15 maxlen: 15
54.36.0.0/16 maxlen: 16
54.37.0.0/16 maxlen: 16
54.38.0.0/16 maxlen: 16
57.128.0.0/17 maxlen: 17
57.128.128.0/18 maxlen: 18
57.128.192.0/18 maxlen: 18
57.129.0.0/17 maxlen: 17
57.129.128.0/17 maxlen: 17
57.130.0.0/16 maxlen: 16
57.131.0.0/17 maxlen: 17
57.131.128.0/18 maxlen: 18
57.131.192.0/18 maxlen: 18
79.137.0.0/17 maxlen: 17
87.98.128.0/17 maxlen: 17
91.121.0.0/16 maxlen: 16
91.134.0.0/16 maxlen: 16
92.222.0.0/16 maxlen: 16
94.23.0.0/16 maxlen: 16
135.125.0.0/17 maxlen: 17
135.125.128.0/17 maxlen: 17
137.74.0.0/16 maxlen: 16
141.94.0.0/16 maxlen: 16
141.95.0.0/17 maxlen: 17
141.95.128.0/17 maxlen: 17
141.227.128.0/20 maxlen: 24
141.227.148.0/22 maxlen: 24
141.227.152.0/21 maxlen: 24
141.227.160.0/19 maxlen: 24
145.239.0.0/16 maxlen: 16
146.59.0.0/16 maxlen: 16
146.59.0.0/17 maxlen: 17
147.135.128.0/17 maxlen: 17
149.202.0.0/16 maxlen: 16
151.80.0.0/16 maxlen: 16
152.228.128.0/17 maxlen: 17
159.173.0.0/18 maxlen: 18
162.19.0.0/17 maxlen: 17
162.19.128.0/17 maxlen: 17
164.132.0.0/16 maxlen: 16
176.31.0.0/16 maxlen: 16
178.32.0.0/15 maxlen: 15
188.165.0.0/16 maxlen: 16
193.70.0.0/17 maxlen: 17
198.244.128.0/17 maxlen: 17
213.32.0.0/17 maxlen: 17
213.186.32.0/19 maxlen: 19
213.251.128.0/18 maxlen: 18
217.182.0.0/16 maxlen: 16
2001:41d0::/32 maxlen: 32
2001:41d0:ab00::/40 maxlen: 48
2001:41d0:ac00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:30:38:05:1f:03:22:ab:1b:c6:6a:e3:d2:6e:af:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Validity
Not Before: Sep 29 08:02:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a70a35c2d02b43cfb311841d1019eff43bf3dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:49:eb:94:8f:1d:db:c3:ff:30:b9:41:26:be:
cf:11:93:e5:fe:95:ba:4b:49:6f:3c:78:89:9c:4f:
64:b9:01:21:56:ef:59:93:de:50:5d:fb:50:81:0e:
ca:39:79:bf:74:6e:e8:ff:be:ea:da:8d:1a:35:fd:
45:6c:91:90:39:5a:e2:7f:88:11:e5:e2:cd:7c:c4:
33:ff:66:ae:0f:1d:6d:17:cf:32:ab:9e:97:d7:f9:
47:c3:98:74:8d:d6:27:c5:46:72:ad:92:3d:dc:52:
b5:1b:09:86:29:98:aa:eb:65:ee:2c:83:47:50:ca:
d6:17:89:42:f4:92:9a:36:1e:d7:57:93:1c:26:1d:
0b:9b:31:4f:98:0a:48:fd:19:8a:a9:ed:0b:53:7c:
ee:5d:ca:ec:d7:7b:5a:e5:a5:a9:80:df:f2:a4:3f:
33:68:e3:ea:e5:81:ef:7b:93:1e:32:e5:9a:dc:7d:
5e:7a:9f:a4:77:7c:3f:4f:d8:04:49:ca:cc:6a:60:
cc:1a:79:34:80:8a:39:a6:25:6c:58:be:7e:9e:ca:
22:f1:8c:4b:99:91:9b:00:04:fe:71:a9:2e:9d:42:
1d:fb:91:23:3c:06:8f:9d:ad:8c:29:ea:b4:a1:96:
5c:c9:2d:5f:c2:34:e7:cd:1f:6f:1c:c9:ad:7c:a3:
5a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:70:A3:5C:2D:02:B4:3C:FB:31:18:41:D1:01:9E:FF:43:BF:3D:BA
X509v3 Authority Key Identifier:
keyid:80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/KnCjXC0CtDz7MRhB0QGe_0O_Pbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.0.0/17
5.135.0.0/16
5.196.0.0/16
37.59.0.0/16
37.187.0.0/16
46.105.0.0/16
51.38.0.0/16
51.68.0.0/16
51.75.0.0/16
51.77.0.0/16
51.83.0.0/16
51.89.0.0/16
51.91.0.0/16
51.178.0.0/16
51.195.0.0/16
51.210.0.0/16
51.254.0.0/15
54.36.0.0-54.38.255.255
57.128.0.0/14
79.137.0.0/17
87.98.128.0/17
91.121.0.0/16
91.134.0.0/16
92.222.0.0/16
94.23.0.0/16
135.125.0.0/16
137.74.0.0/16
141.94.0.0/15
141.227.128.0/20
141.227.148.0-141.227.191.255
145.239.0.0/16
146.59.0.0/16
147.135.128.0/17
149.202.0.0/16
151.80.0.0/16
152.228.128.0/17
159.173.0.0/18
162.19.0.0/16
164.132.0.0/16
176.31.0.0/16
178.32.0.0/15
188.165.0.0/16
193.70.0.0/17
198.244.128.0/17
213.32.0.0/17
213.186.32.0/19
213.251.128.0/18
217.182.0.0/16
IPv6:
2001:41d0::/32
Signature Algorithm: sha256WithRSAEncryption
45:67:de:c8:c3:bf:36:81:2f:ba:de:f8:57:70:a4:f4:d9:7a:
3f:3c:f5:bf:e3:09:36:f0:46:b3:a4:95:49:93:6c:b4:d2:2a:
69:6a:b7:3a:f9:e4:13:80:3f:a9:25:f9:13:1c:1e:e8:5f:00:
4e:93:8c:42:cf:2b:6d:0d:de:51:1c:75:5b:8c:1a:02:a0:18:
3a:2e:05:6e:72:b5:c0:98:69:0e:43:00:53:83:1f:f6:57:1c:
73:ff:c8:b7:8f:f8:ca:80:3e:b8:d0:36:0b:30:f2:eb:ab:3c:
fc:b9:f8:ae:1e:7f:aa:99:6f:f7:ed:0b:29:3c:ce:83:43:26:
6a:f5:79:e8:23:20:1c:c6:53:51:c8:65:2e:be:6f:38:ee:71:
72:37:3c:7e:10:86:a1:a2:1e:5b:8e:6a:85:d4:51:f3:7d:38:
dd:95:9d:9d:19:c3:49:2e:28:21:7a:7f:ce:bb:13:95:05:d2:
f6:3c:46:2e:f4:5d:22:fd:83:0d:e3:74:6a:8b:9d:77:36:5c:
cc:b6:a0:f6:39:4a:46:4e:6a:2c:d1:6f:d2:c5:a3:0a:25:52:
05:29:72:8b:33:f4:69:c6:e2:88:de:ed:e1:37:c4:f5:ef:ff:
38:f4:e6:32:fe:0d:97:19:c6:9a:5a:71:f8:81:83:e3:3b:50:
e1:dc:b0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:57:28 2026 by rpki-client