Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/KWHKj0yy1AORNl9bklDchRMpIHA.roa
File: KWHKj0yy1AORNl9bklDchRMpIHA.roa (raw, json)
Hash identifier: D9JW3hXl5Ft55VUXmC+esffiRhXSXkf+HuY0d0NfVcE=
Subject key identifier: 29:61:CA:8F:4C:B2:D4:03:91:36:5F:5B:92:50:DC:85:13:29:20:70
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019F8B9F33CCA02DA6130BE162E9924B9E5E
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/KWHKj0yy1AORNl9bklDchRMpIHA.roa
Signing time: Wed 22 Jul 2026 20:58:14 +0000
ROA not before: Wed 22 Jul 2026 20:58:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48018
IP address blocks: 31.172.64.0/24 maxlen: 24
31.172.66.0/24 maxlen: 24
31.172.67.0/24 maxlen: 24
31.172.76.0/24 maxlen: 24
81.85.78.0/24 maxlen: 24
89.127.197.0/24 maxlen: 24
89.127.209.0/24 maxlen: 24
89.127.217.0/24 maxlen: 24
130.17.2.0/24 maxlen: 24
130.17.11.0/24 maxlen: 32
199.68.197.0/24 maxlen: 24
213.193.198.0/24 maxlen: 32
217.177.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:9f:33:cc:a0:2d:a6:13:0b:e1:62:e9:92:4b:9e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Jul 22 20:58:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2961ca8f4cb2d40391365f5b9250dc8513292070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:79:98:07:11:6b:50:10:5a:12:65:74:59:ac:
6a:eb:93:63:22:11:2c:65:91:df:ba:10:64:66:da:
cd:14:75:5f:c4:ea:73:2b:dc:12:f6:b7:d7:c3:98:
55:2d:fb:b0:fe:a9:59:da:fb:b1:4a:20:a2:3d:e0:
bd:eb:a3:e1:ae:18:47:fd:f8:55:6f:a6:23:db:cc:
7c:9e:3d:89:7f:cd:ae:da:2d:f7:6b:d5:2c:c5:f2:
ca:5a:3a:dd:51:9e:a4:d3:6b:0d:70:dc:39:ca:76:
d6:17:df:35:11:f9:09:df:cc:30:46:8b:9c:b5:f8:
c4:b0:d1:c9:9f:9f:40:d3:f9:67:03:63:bf:5f:a5:
51:c6:e9:09:89:ab:f5:9c:4f:21:9b:6a:eb:fe:32:
e3:aa:44:c9:72:2b:0d:46:57:45:98:eb:ac:bc:16:
07:5f:0c:c3:56:bb:73:b7:56:e1:e8:e4:54:7f:88:
ea:6a:92:8a:c2:cc:77:3c:c5:78:da:fb:36:0e:83:
79:71:02:05:b6:23:b1:be:18:08:56:5e:ac:15:39:
57:f7:8e:3b:e4:8e:a3:e1:be:a7:67:a4:90:00:82:
13:3b:46:17:95:50:79:ba:c7:40:bf:c4:1e:7e:7d:
01:b3:dd:9c:76:8a:2b:30:3b:aa:a3:de:ea:cc:2e:
c7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:61:CA:8F:4C:B2:D4:03:91:36:5F:5B:92:50:DC:85:13:29:20:70
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/KWHKj0yy1AORNl9bklDchRMpIHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.64.0/24
31.172.66.0/23
31.172.76.0/24
81.85.78.0/24
89.127.197.0/24
89.127.209.0/24
89.127.217.0/24
130.17.2.0/24
130.17.11.0/24
199.68.197.0/24
213.193.198.0/24
217.177.74.0/24
Signature Algorithm: sha256WithRSAEncryption
18:a1:e9:4a:d7:ec:96:ca:07:71:96:b6:b2:76:2f:8a:0b:82:
c5:5d:a4:b6:ef:d5:17:61:cd:16:e8:a2:33:8d:3e:61:a8:6a:
c8:a7:c9:f1:4c:ee:11:4c:89:25:06:08:68:95:49:c6:a0:5e:
b7:67:c2:57:ac:94:55:ef:8b:c5:15:fa:aa:fb:ad:04:b1:01:
64:a6:fe:33:07:ec:a7:f9:b1:bc:6e:ca:5c:a2:cc:6f:8c:45:
a1:26:04:3d:b4:62:8b:8b:42:8d:7e:dc:de:45:21:60:e8:dd:
d2:c4:cc:83:b3:6b:0d:6b:74:cf:ac:50:f4:b3:ec:2b:47:ea:
1a:c8:5c:80:67:23:31:19:d4:c3:c3:52:30:11:39:18:81:d9:
de:53:cf:37:58:1a:4b:c1:75:84:2f:ae:d1:61:1c:ad:fd:43:
d8:2d:14:39:8b:c5:68:64:fa:4a:85:3b:bd:52:a0:aa:eb:79:
a0:90:72:be:1b:85:26:aa:60:39:fc:0e:3b:c4:c4:94:a6:a1:
39:23:f7:35:09:c9:d8:2b:28:36:42:71:ac:24:c9:bf:94:8d:
15:4a:20:5b:93:e5:b1:08:63:ac:ce:38:ae:f1:4f:e0:6b:f1:
7b:bb:93:5a:a6:99:fe:6f:56:ca:6c:fa:fe:db:5f:28:c8:ac:
90:4f:17:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:05 2026 by rpki-client