Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/K4nRKzI3t0qU5zPc_fpVXCB6bWc.roa
File: K4nRKzI3t0qU5zPc_fpVXCB6bWc.roa (raw, json)
Hash identifier: 0Zeu5WbfkcoRWCcChq+NWwrNo0Y/QIR7cp1J9a7juh8=
Subject key identifier: 2B:89:D1:2B:32:37:B7:4A:94:E7:33:DC:FD:FA:55:5C:20:7A:6D:67
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 019F17B549C15B23925912E2BA3C8F7B0BCE
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/K4nRKzI3t0qU5zPc_fpVXCB6bWc.roa
Signing time: Tue 30 Jun 2026 08:46:24 +0000
ROA not before: Tue 30 Jun 2026 08:46:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209341
IP address blocks: 65.181.113.0/24 maxlen: 24
69.72.149.0/24 maxlen: 24
69.72.244.0/24 maxlen: 24
192.250.229.0/24 maxlen: 24
192.250.230.0/24 maxlen: 24
194.147.95.0/24 maxlen: 24
208.116.19.0/24 maxlen: 24
208.116.57.0/24 maxlen: 24
209.42.26.0/24 maxlen: 24
209.42.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:b5:49:c1:5b:23:92:59:12:e2:ba:3c:8f:7b:0b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Jun 30 08:46:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b89d12b3237b74a94e733dcfdfa555c207a6d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:da:af:9f:73:6d:03:9d:f6:eb:be:85:63:
b7:17:53:02:56:89:f5:d0:8f:4c:67:46:fa:f1:18:
80:6b:87:ca:17:d3:bd:32:9f:63:53:4b:48:fc:fa:
4a:da:27:aa:01:d4:09:a6:c2:63:67:89:fb:f3:5f:
90:dc:29:fe:1d:17:fe:70:94:76:05:15:9f:63:79:
31:8a:20:3f:91:64:d1:e3:c2:21:c4:8b:20:ca:73:
2f:4d:83:6d:a7:a3:6c:63:8f:6f:bb:91:20:e9:ac:
8c:d9:48:07:c6:47:be:c5:a9:4b:12:d0:94:a8:9a:
1f:24:44:3d:9a:5d:c5:1e:b1:f5:49:f3:81:50:7a:
0d:37:46:49:4b:81:05:3e:2f:42:68:04:9f:7d:13:
a9:d8:5c:8d:58:6f:14:92:00:b4:1b:58:e1:f8:fc:
50:9d:b1:d2:b6:bd:be:05:fd:53:5a:31:55:09:c7:
77:1d:7a:e8:79:64:b4:51:e6:b1:8a:ba:aa:92:20:
55:c9:22:4d:d2:c6:92:ae:3a:a5:b8:dc:61:7a:41:
41:ef:e7:c5:3b:7d:47:57:79:be:31:12:00:14:ee:
00:b7:5c:fc:40:77:3d:51:d8:d2:2e:39:10:68:cf:
0c:75:bd:9c:2f:6c:8b:0b:21:cb:3b:09:17:74:7f:
91:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:89:D1:2B:32:37:B7:4A:94:E7:33:DC:FD:FA:55:5C:20:7A:6D:67
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/K4nRKzI3t0qU5zPc_fpVXCB6bWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.181.113.0/24
69.72.149.0/24
69.72.244.0/24
192.250.229.0-192.250.230.255
194.147.95.0/24
208.116.19.0/24
208.116.57.0/24
209.42.26.0/24
209.42.31.0/24
Signature Algorithm: sha256WithRSAEncryption
88:61:a3:69:87:9d:e3:9a:61:cb:73:36:bd:17:c0:bc:f9:56:
81:f3:f5:df:c2:1f:a1:4e:63:cd:96:00:b7:d3:df:a3:77:0b:
15:cb:e2:c9:f5:78:17:de:f6:c7:0d:68:fb:93:bb:2b:21:f9:
18:44:cc:18:e1:13:eb:0c:8a:34:e2:d3:1f:3c:20:82:22:8a:
17:3f:35:36:22:a0:aa:37:5f:56:32:fb:e4:94:ef:af:40:bd:
24:66:e3:13:28:3c:65:b2:96:b8:6f:34:01:ff:78:b8:29:91:
1a:c1:ca:5e:f6:25:c4:a7:7c:a4:51:09:74:09:0c:af:78:29:
09:6a:80:81:5e:32:bf:51:9f:84:5c:fe:36:c6:d1:5e:89:92:
a3:03:b1:dc:30:b7:cc:33:b8:79:a4:7d:35:a7:33:2e:1c:94:
44:b6:76:19:a6:c1:b7:23:f1:67:05:b9:cc:df:2b:89:65:05:
6a:c4:f0:cb:19:d2:7f:af:ea:ff:ae:fa:00:bf:38:5b:cd:06:
49:03:a8:31:3b:d2:63:e6:5a:bc:08:dc:b4:67:46:8b:5a:69:
37:32:ed:b5:ea:8a:f0:e8:ec:5a:65:bf:26:b7:b4:d8:37:e3:
4d:60:b7:a2:44:dc:e4:6f:fc:8c:cb:de:fb:6e:cd:5e:37:8a:
91:d3:06:68
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZ8XtUnBWyOSWRLiujyPewvOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy
ZWU4ZGQwHhcNMjYwNjMwMDg0NjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjg5ZDEyYjMyMzdiNzRhOTRlNzMzZGNmZGZhNTU1YzIwN2E2ZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWvar59zbQOd9uu+hWO3F1MCVon1
0I9MZ0b68RiAa4fKF9O9Mp9jU0tI/PpK2ieqAdQJpsJjZ4n781+Q3Cn+HRf+cJR2
BRWfY3kxiiA/kWTR48IhxIsgynMvTYNtp6NsY49vu5Eg6ayM2UgHxke+xalLEtCU
qJofJEQ9ml3FHrH1SfOBUHoNN0ZJS4EFPi9CaASffROp2FyNWG8UkgC0G1jh+PxQ
nbHStr2+Bf1TWjFVCcd3HXroeWS0UeaxirqqkiBVySJN0saSrjqluNxhekFB7+fF
O31HV3m+MRIAFO4At1z8QHc9UdjSLjkQaM8Mdb2cL2yLCyHLOwkXdH+RJQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFCuJ0SsyN7dKlOcz3P36VVwgem1nMB8GA1UdIwQY
MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt
Y2NhMzc2MDZiZjE4LzEvSzRuUkt6STN0MHFVNXpQY19mcFZYQ0I2YldjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4
LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAQbVxAwQA
RUiVAwQARUj0MAwDBADA+uUDBADA+uYDBADCk18DBADQdBMDBADQdDkDBADRKhoD
BADRKh8wDQYJKoZIhvcNAQELBQADggEBAIhho2mHneOaYctzNr0XwLz5VoHz9d/C
H6FOY82WALfT36N3CxXL4sn1eBfe9scNaPuTuysh+RhEzBjhE+sMijTi0x88IIIi
ihc/NTYioKo3X1Yy++SU769AvSRm4xMoPGWylrhvNAH/eLgpkRrByl72JcSnfKRR
CXQJDK94KQlqgIFeMr9Rn4Rc/jbG0V6JkqMDsdwwt8wzuHmkfTWnMy4clES2dhmm
wbcj8WcFuczfK4llBWrE8MsZ0n+v6v+u+gC/OFvNBkkDqDE70mPmWrwI3LRnRota
aTcy7bXqivDo7Fplvya3tNg3401gt6JE3ORv/IzL3vtuzV43ipHTBmg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:07 2026 by rpki-client