Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/Kxo0teOZwloERI7QoSNyGmfd6Lc.roa
File: Kxo0teOZwloERI7QoSNyGmfd6Lc.roa (raw, json)
Hash identifier: l3pXjBFAyH7G75ccUcJxbRG9IMuyFszbxgxuaSQ++ko=
Subject key identifier: 2B:1A:34:B5:E3:99:C2:5A:04:44:8E:D0:A1:23:72:1A:67:DD:E8:B7
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 019F65C795A47993ACFEB286C4C4D7A342E2
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/Kxo0teOZwloERI7QoSNyGmfd6Lc.roa
Signing time: Wed 15 Jul 2026 12:36:46 +0000
ROA not before: Wed 15 Jul 2026 12:36:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205516
IP address blocks: 5.35.80.0/24 maxlen: 24
5.35.81.0/24 maxlen: 24
37.233.81.0/24 maxlen: 24
45.94.23.0/24 maxlen: 24
45.130.145.0/24 maxlen: 24
45.133.234.0/24 maxlen: 24
45.139.29.0/24 maxlen: 24
77.73.232.0/24 maxlen: 24
83.222.22.0/23 maxlen: 24
89.40.233.0/24 maxlen: 24
89.169.36.0/23 maxlen: 24
90.156.252.0/23 maxlen: 24
91.218.140.0/24 maxlen: 24
91.218.141.0/24 maxlen: 24
109.94.211.0/24 maxlen: 24
109.196.165.0/24 maxlen: 24
178.236.16.0/24 maxlen: 24
178.236.17.0/24 maxlen: 24
2a04:bac1:4000::/36 maxlen: 36
2a04:bac1:5000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:c7:95:a4:79:93:ac:fe:b2:86:c4:c4:d7:a3:42:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Jul 15 12:36:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b1a34b5e399c25a04448ed0a123721a67dde8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:db:e0:d2:13:d5:06:19:c7:20:07:5f:0d:4b:
3c:93:fe:ef:c8:4c:55:1d:0f:18:f0:4f:97:ba:e0:
00:e0:32:b2:20:06:19:03:5b:4c:7d:75:21:7e:98:
89:90:86:59:59:c0:67:5f:e0:59:79:89:2c:d4:ea:
d8:5b:0b:d0:49:e9:44:c7:76:f6:26:75:89:ea:a3:
5b:54:bf:e5:aa:d2:25:e2:31:59:ff:b5:d7:93:da:
8e:ff:cf:58:21:e9:cf:54:24:a5:1e:6c:4f:b5:98:
d4:c9:5c:ee:50:a2:dd:b0:9c:a1:c6:fa:29:cc:86:
08:2d:6d:d5:f9:de:6e:b8:bc:b6:b5:ec:f1:d0:3b:
ee:da:68:e5:9a:58:3a:ba:78:72:74:2f:13:f3:b0:
81:79:ce:0c:aa:95:94:b4:79:91:5f:78:19:a7:3e:
0d:f6:ef:39:84:87:4a:6d:4b:b5:fa:7b:ad:1d:94:
48:d3:c0:fc:10:b0:77:82:41:46:58:df:b2:f0:7d:
7b:ee:3b:c3:e3:8e:a0:77:02:be:6f:c3:51:a2:d1:
74:78:47:03:c5:5d:bc:2a:5e:51:0d:54:05:3e:fb:
05:a8:2b:49:fb:05:84:91:83:89:12:81:d6:53:e2:
f2:c1:bf:b6:b9:0c:12:46:3c:6a:09:20:a1:b2:06:
b0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1A:34:B5:E3:99:C2:5A:04:44:8E:D0:A1:23:72:1A:67:DD:E8:B7
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/Kxo0teOZwloERI7QoSNyGmfd6Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.80.0/23
37.233.81.0/24
45.94.23.0/24
45.130.145.0/24
45.133.234.0/24
45.139.29.0/24
77.73.232.0/24
83.222.22.0/23
89.40.233.0/24
89.169.36.0/23
90.156.252.0/23
91.218.140.0/23
109.94.211.0/24
109.196.165.0/24
178.236.16.0/23
IPv6:
2a04:bac1:4000::/35
Signature Algorithm: sha256WithRSAEncryption
a8:4f:3a:49:58:f9:1e:80:47:0e:b6:2d:a0:5f:c1:0e:5d:f9:
86:89:e6:f0:0e:0f:72:c2:e5:28:a8:99:81:84:55:b8:9d:28:
f3:10:d4:bd:bc:a6:d3:5c:a6:81:6b:b0:59:b2:97:1f:83:76:
a2:fc:fb:e3:ba:a5:2f:58:ef:c0:7f:ea:7a:e8:87:a1:99:77:
07:f5:29:10:17:69:9c:37:ec:4d:5f:c9:33:22:38:49:78:85:
86:48:c1:56:83:21:a5:8d:ac:91:91:d7:54:cf:6b:65:7d:ec:
5f:0b:0a:0a:49:29:a6:d8:97:7d:49:e1:fd:40:16:f2:8b:c2:
64:fc:33:f5:3d:c1:9a:61:c1:7e:d6:f8:dd:e2:6b:9f:a0:57:
52:99:ab:3c:e5:58:9d:21:8b:07:61:3b:dd:55:fa:40:13:95:
f2:4a:ef:47:46:9c:55:1d:3d:5b:f4:98:21:bd:6f:35:28:03:
f1:a6:1c:49:ce:af:9a:8d:b2:c8:9c:92:37:c2:e2:f0:f5:fd:
5c:b1:d4:2c:12:51:61:a1:74:4e:a3:d3:fd:d4:48:da:5a:72:
22:9a:2a:67:34:7b:bd:68:a2:6b:93:09:11:82:69:2a:be:6a:
b4:d4:55:8b:da:63:c8:a3:52:17:23:65:dd:3f:d2:d9:a7:d3:
c3:78:2f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:16:10 2026 by rpki-client