Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/krfpUOsKk9DoFNPp057CENG5hQQ.roa
File: krfpUOsKk9DoFNPp057CENG5hQQ.roa (raw, json)
Hash identifier: bEXca+e8qKhhGx3/Uy1v1Ih1d41nnDuRNWadtn30SPA=
Subject key identifier: 92:B7:E9:50:EB:0A:93:D0:E8:14:D3:E9:D3:9E:C2:10:D1:B9:85:04
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 019DD4481DD1ACCD1584625BCF95403DE900
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/krfpUOsKk9DoFNPp057CENG5hQQ.roa
Signing time: Tue 28 Apr 2026 13:29:49 +0000
ROA not before: Tue 28 Apr 2026 13:29:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62212
IP address blocks: 85.137.164.0/22 maxlen: 24
87.236.146.0/24 maxlen: 24
91.184.248.0/22 maxlen: 24
91.199.137.0/24 maxlen: 24
91.199.147.0/24 maxlen: 24
91.199.154.0/24 maxlen: 24
91.199.160.0/24 maxlen: 24
92.61.70.0/23 maxlen: 24
109.172.8.0/23 maxlen: 24
109.238.94.0/23 maxlen: 24
188.127.246.0/23 maxlen: 24
193.124.56.0/22 maxlen: 24
2a11:3b80::/29 maxlen: 48
2a11:3b80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:48:1d:d1:ac:cd:15:84:62:5b:cf:95:40:3d:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Apr 28 13:29:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92b7e950eb0a93d0e814d3e9d39ec210d1b98504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:0e:4b:e6:91:1a:9c:b8:ad:0b:6b:e6:76:
6e:9a:33:e3:b6:ae:c4:2a:77:81:7c:a1:92:a2:0f:
35:f8:3c:14:c5:c6:26:a9:a8:77:97:8a:a6:41:75:
e5:9e:f6:9b:47:96:79:8b:69:5a:ff:2a:21:11:4b:
d4:61:cc:9e:af:07:ea:5d:e3:90:53:98:a7:16:f8:
61:9c:62:fc:29:f7:4d:5a:13:82:ff:8f:36:90:8a:
2d:2e:49:99:51:3b:86:ed:ff:f6:39:88:b3:ce:62:
a1:4f:aa:13:82:0c:8b:96:35:87:cc:ef:58:5a:53:
f6:f2:26:86:53:0c:f4:57:80:20:1a:a4:69:24:c5:
7f:f5:e7:43:9c:15:72:f9:ad:a1:b9:e6:33:00:ca:
bb:ca:d9:ce:b1:23:18:59:26:2f:70:37:03:35:9c:
c6:3f:81:d7:a2:94:64:8b:0f:71:7b:0b:d1:39:a1:
d9:16:db:5e:bf:e1:64:ac:8a:1f:0f:3d:4d:7d:c4:
f5:03:8d:7f:38:2e:d1:42:63:da:36:9e:46:7d:29:
f4:92:5f:a4:33:3e:89:15:ee:d6:53:2f:28:27:ae:
14:ec:6f:77:08:24:c9:a5:55:bc:27:8d:60:23:45:
a8:30:bc:ea:52:ce:88:aa:63:cc:60:d9:93:54:2d:
92:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B7:E9:50:EB:0A:93:D0:E8:14:D3:E9:D3:9E:C2:10:D1:B9:85:04
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/krfpUOsKk9DoFNPp057CENG5hQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.137.164.0/22
87.236.146.0/24
91.184.248.0/22
91.199.137.0/24
91.199.147.0/24
91.199.154.0/24
91.199.160.0/24
92.61.70.0/23
109.172.8.0/23
109.238.94.0/23
188.127.246.0/23
193.124.56.0/22
IPv6:
2a11:3b80::/29
Signature Algorithm: sha256WithRSAEncryption
59:24:80:2d:63:17:4d:fe:23:45:d3:0a:ce:97:8e:64:b8:af:
05:d6:42:c1:4d:95:c6:d2:71:10:4b:77:8d:ad:28:11:c7:d0:
f9:fc:57:cd:e3:bb:ab:c5:9c:fb:0f:60:8d:44:10:12:8f:29:
6f:c7:1b:69:61:c9:14:37:5d:a5:32:1e:dd:3e:fc:96:8e:43:
4c:18:16:4d:ef:32:e9:91:68:bb:f1:3b:01:6b:d7:33:79:2b:
9a:71:e3:f2:65:cd:7a:ae:bf:cc:c4:69:45:e0:af:cc:e2:79:
a5:8b:59:8e:dd:2e:ff:df:fc:43:a1:d2:dc:2f:aa:dd:0d:0d:
ed:10:96:26:ff:3b:eb:10:7f:70:f0:77:39:6e:c1:59:65:48:
9a:51:0a:f1:e8:e1:22:a0:0b:b2:e5:d5:34:37:da:b0:37:8e:
b7:49:70:be:11:20:c8:5d:ce:f5:ad:44:e6:03:85:5d:07:49:
ee:ec:e5:65:69:ed:90:c1:8d:37:b7:1f:a0:f5:a0:a6:54:c2:
2c:82:e9:ff:59:a2:fb:df:22:7e:ff:6b:32:ec:ee:88:1f:d5:
ce:21:9a:68:b1:c0:ef:f9:74:af:ea:51:0d:c3:f5:0c:b0:3e:
4e:e5:ba:4f:e0:88:ba:57:fd:26:b3:ee:00:c6:7c:21:df:20:
94:8b:1d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:42 2026 by rpki-client