Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/KnqLm83Z2hlavX1T4fc9lfOMzqw.roa
File: KnqLm83Z2hlavX1T4fc9lfOMzqw.roa (raw, json)
Hash identifier: r6PDB8P6tsiT5QQpwA2/Urm/y2YE3Dk/QLO59cu8riw=
Subject key identifier: 2A:7A:8B:9B:CD:D9:DA:19:5A:BD:7D:53:E1:F7:3D:95:F3:8C:CE:AC
Certificate issuer: /CN=a753b33aa27b6384622520a619a7999f34bbe1c9
Certificate serial: 019F236892261251869C408D5E00469DC8CA
Authority key identifier: A7:53:B3:3A:A2:7B:63:84:62:25:20:A6:19:A7:99:9F:34:BB:E1:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/KnqLm83Z2hlavX1T4fc9lfOMzqw.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48815
IP address blocks: 109.233.120.0/24 maxlen: 24
109.233.121.0/24 maxlen: 24
109.233.122.0/24 maxlen: 24
109.233.123.0/24 maxlen: 24
109.233.124.0/24 maxlen: 24
109.233.125.0/24 maxlen: 24
109.233.126.0/24 maxlen: 24
109.233.127.0/24 maxlen: 24
176.221.48.0/24 maxlen: 24
176.221.49.0/24 maxlen: 24
176.221.50.0/24 maxlen: 24
176.221.51.0/24 maxlen: 24
176.221.52.0/24 maxlen: 24
176.221.53.0/24 maxlen: 24
176.221.54.0/24 maxlen: 24
176.221.55.0/24 maxlen: 24
185.49.204.0/24 maxlen: 24
185.49.207.0/24 maxlen: 24
195.88.6.0/23 maxlen: 23
212.112.64.0/24 maxlen: 24
212.112.65.0/24 maxlen: 24
212.112.67.0/24 maxlen: 24
212.112.72.0/24 maxlen: 24
212.112.73.0/24 maxlen: 24
212.112.74.0/24 maxlen: 24
212.112.75.0/24 maxlen: 24
212.112.84.0/22 maxlen: 22
212.112.88.0/24 maxlen: 24
212.112.91.0/24 maxlen: 24
212.112.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:92:26:12:51:86:9c:40:8d:5e:00:46:9d:c8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a753b33aa27b6384622520a619a7999f34bbe1c9
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a7a8b9bcdd9da195abd7d53e1f73d95f38cceac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:71:5f:ed:41:be:32:0b:74:d7:20:ad:09:
6b:9d:b8:0d:61:6a:d1:35:4b:15:cd:ee:d0:86:c3:
7c:b5:1a:cd:e4:e8:4c:f0:b8:d5:39:7e:96:23:22:
ad:b0:0d:d3:c2:88:bf:dc:11:b1:cd:a3:8e:cc:5f:
6a:be:02:2c:9e:82:31:e2:1b:1f:ad:18:d7:d3:67:
5b:cb:29:f5:99:aa:66:da:35:bc:15:04:5e:4c:45:
d0:bf:09:1c:81:f1:0e:0b:c6:5e:61:c3:61:13:17:
49:c9:08:0c:38:7d:d4:81:90:e7:84:02:e8:a3:5d:
f4:cf:8a:c3:81:a1:33:fd:95:0a:67:d0:0a:8a:34:
27:de:da:ff:a1:4f:74:dc:33:5f:66:d9:af:db:18:
48:8b:30:61:74:b2:88:c3:aa:bb:61:3b:16:1f:d7:
67:8e:b2:70:09:c5:f8:e1:08:52:d4:f5:31:39:09:
12:a5:38:fb:77:7b:87:0e:3b:ed:56:af:b1:52:80:
08:7f:29:75:fa:ef:d3:10:7e:a8:d0:52:a6:71:83:
a6:29:8f:90:c8:a6:92:48:5b:42:1c:49:4b:58:96:
39:57:a5:87:07:04:07:6c:c0:79:67:b5:af:4f:74:
7b:da:9b:19:e0:48:fb:3e:9c:87:53:ea:62:ae:84:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7A:8B:9B:CD:D9:DA:19:5A:BD:7D:53:E1:F7:3D:95:F3:8C:CE:AC
X509v3 Authority Key Identifier:
keyid:A7:53:B3:3A:A2:7B:63:84:62:25:20:A6:19:A7:99:9F:34:BB:E1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/KnqLm83Z2hlavX1T4fc9lfOMzqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.120.0/21
176.221.48.0/21
185.49.204.0/24
185.49.207.0/24
195.88.6.0/23
212.112.64.0/23
212.112.67.0/24
212.112.72.0/22
212.112.84.0-212.112.88.255
212.112.91.0-212.112.95.255
Signature Algorithm: sha256WithRSAEncryption
86:77:5b:ad:7d:b0:27:d6:62:bd:14:b1:92:ca:ec:f7:13:1e:
cb:de:1e:5a:cf:18:4d:96:7b:88:91:46:31:d3:dd:12:ff:9d:
df:af:86:25:4a:61:98:a8:84:e7:1d:83:e5:51:8a:58:8c:ca:
1c:5e:21:e6:1e:89:5d:bc:02:51:c5:f0:40:a9:1f:ea:7c:50:
83:d7:45:34:d0:e9:60:a5:42:6a:34:8b:b0:59:a2:09:55:1b:
77:15:51:af:e8:76:c7:ea:68:c9:95:19:70:cf:26:e3:7a:88:
ee:ee:c2:3c:15:0f:ad:e1:15:f4:25:2d:3c:7f:64:bf:9c:18:
0e:03:df:cd:f4:97:d6:57:a4:ad:53:b3:73:e8:d1:7d:55:f0:
4d:bd:2c:17:3b:86:6a:a4:b5:99:cd:a6:90:84:3a:27:ad:b6:
15:31:84:07:31:95:33:9e:18:c0:8a:6a:bf:bb:c1:3b:ba:44:
6b:57:d3:a3:dd:59:eb:3e:21:6f:6f:ab:b2:63:4e:f4:92:14:
ce:a5:3b:76:c6:f8:eb:e7:45:5f:0f:68:d0:20:3e:7a:28:49:
77:bb:ef:81:b6:4d:e6:c3:f6:9b:f4:0a:9f:c6:3b:6d:bb:c6:
ae:32:40:a6:a4:ec:1d:7f:5a:5e:3f:52:13:1a:2e:6a:07:9e:
11:08:fb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:50 2026 by rpki-client