Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/kc7Kfx6EAzUNR1fudBe9Aw5IRgw.roa
File: kc7Kfx6EAzUNR1fudBe9Aw5IRgw.roa (raw, json)
Hash identifier: wJrT2BB12mn5gXQveAogodqeQtpxZp1yzX5xTILo2ys=
Subject key identifier: 91:CE:CA:7F:1E:84:03:35:0D:47:57:EE:74:17:BD:03:0E:48:46:0C
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 019F7DFFF59B0463CFFF39D15AB92305D19B
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/kc7Kfx6EAzUNR1fudBe9Aw5IRgw.roa
Signing time: Mon 20 Jul 2026 05:29:14 +0000
ROA not before: Mon 20 Jul 2026 05:29:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205207
IP address blocks: 5.160.132.0/24 maxlen: 24
5.160.153.0/24 maxlen: 24
5.160.177.0/24 maxlen: 24
5.160.208.0/24 maxlen: 24
77.104.92.0/24 maxlen: 24
77.104.116.0/24 maxlen: 24
77.104.117.0/24 maxlen: 24
77.104.118.0/24 maxlen: 24
77.104.119.0/24 maxlen: 24
77.104.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7d:ff:f5:9b:04:63:cf:ff:39:d1:5a:b9:23:05:d1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Jul 20 05:29:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91ceca7f1e8403350d4757ee7417bd030e48460c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6d:4c:64:a7:41:a0:37:34:73:24:38:01:d9:
aa:13:bd:5f:cb:dc:56:7c:a9:66:24:56:a3:b8:19:
be:3a:63:38:c1:9a:e6:37:da:27:01:eb:75:88:cc:
0d:da:b2:36:d2:58:5f:10:a4:b7:6f:84:22:83:3a:
8a:d4:6c:80:4c:9c:10:ef:5b:da:81:65:b7:0e:4c:
09:26:a2:ff:6a:1b:8a:cf:ce:fe:94:92:78:9c:44:
03:bd:46:72:ab:99:d1:25:fb:59:3c:34:b7:eb:5a:
37:bc:31:69:b2:f5:e5:71:76:ec:f7:50:44:b6:32:
2f:4b:a4:92:28:ea:dc:6f:87:15:3a:7c:88:ff:4d:
6f:11:01:b8:1b:fc:37:ed:8d:8e:95:ff:38:09:e9:
82:d1:a9:8c:94:d1:a1:08:90:80:bc:81:b4:64:31:
a7:1e:02:12:14:b8:99:1f:b9:d4:e9:bd:1f:f5:3b:
08:af:46:7f:b3:62:d6:41:30:fe:41:15:fc:31:5d:
50:fa:80:18:c7:8f:95:c0:b0:58:36:d1:be:50:b0:
b8:d2:32:42:a1:24:1a:ae:d5:da:20:3c:c1:99:85:
b6:50:16:57:a7:8b:65:f7:54:05:ff:13:f7:4b:40:
fc:8e:90:da:41:e9:ae:14:bd:eb:e4:a9:07:76:f6:
0f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CE:CA:7F:1E:84:03:35:0D:47:57:EE:74:17:BD:03:0E:48:46:0C
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/kc7Kfx6EAzUNR1fudBe9Aw5IRgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.132.0/24
5.160.153.0/24
5.160.177.0/24
5.160.208.0/24
77.104.92.0/24
77.104.116.0/22
77.104.127.0/24
Signature Algorithm: sha256WithRSAEncryption
44:69:64:c5:75:46:73:fa:a7:4f:6c:0e:6a:14:6f:66:a1:c8:
c9:d0:78:b1:eb:ab:20:06:ef:fa:3e:24:88:e7:b1:55:34:ad:
c3:8e:97:19:96:42:fe:cc:8c:8a:14:41:7a:c8:9f:3a:ab:ba:
d7:b0:55:e4:44:c8:34:a2:22:6d:bd:91:30:92:a2:a4:96:d5:
a0:78:5f:d4:0e:2c:df:e3:dd:44:27:af:1f:52:26:14:2e:76:
ec:33:c3:92:cc:fb:a8:40:9d:d3:61:24:8d:de:46:d0:33:51:
b5:9e:78:e2:f9:45:bc:f5:f1:15:d0:d9:e3:82:a4:ed:a4:ce:
45:fe:66:f9:62:b3:f1:30:ca:d8:a5:cd:bc:89:24:6c:8f:2a:
28:ac:a9:8f:3d:ca:73:52:ab:f4:78:59:a0:f9:d2:22:0d:c4:
4c:e7:15:b4:97:e8:fa:51:c2:6a:1f:00:32:18:65:fe:1d:07:
28:9c:98:de:55:d3:5a:99:84:21:ee:80:c9:60:55:2f:8d:ce:
62:f0:ad:c6:7e:9c:ed:76:6b:db:9e:97:06:c8:68:cf:ad:b0:
49:59:7f:c2:fc:21:f4:fb:48:ea:5e:4a:9c:56:ec:a3:a7:32:
ca:7b:fa:2c:3a:08:f6:b5:2b:32:5c:7f:fc:b0:a0:a7:0b:8a:
8c:91:d7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:38 2026 by rpki-client