Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/KY98OK9jKpqbO2GmZe7Es_X3AuY.roa
File: KY98OK9jKpqbO2GmZe7Es_X3AuY.roa (raw, json)
Hash identifier: cBxNonBZQsdFtI0G+UJX4+MOa5fw7YrWs9H/ZAWUf1Q=
Subject key identifier: 29:8F:7C:38:AF:63:2A:9A:9B:3B:61:A6:65:EE:C4:B3:F5:F7:02:E6
Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Certificate serial: 019E9342845046561E80B6153BB7D2A34B96
Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/KY98OK9jKpqbO2GmZe7Es_X3AuY.roa
Signing time: Thu 04 Jun 2026 15:31:10 +0000
ROA not before: Thu 04 Jun 2026 15:31:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201012
IP address blocks: 176.114.120.0/21 maxlen: 21
176.114.120.0/22 maxlen: 22
176.114.120.0/23 maxlen: 23
176.114.120.0/24 maxlen: 24
176.114.121.0/24 maxlen: 24
176.114.122.0/23 maxlen: 23
176.114.122.0/24 maxlen: 24
176.114.123.0/24 maxlen: 24
176.114.124.0/22 maxlen: 22
176.114.124.0/23 maxlen: 23
176.114.124.0/24 maxlen: 24
176.114.125.0/24 maxlen: 24
176.114.126.0/23 maxlen: 23
176.114.126.0/24 maxlen: 24
176.114.127.0/24 maxlen: 24
185.89.12.0/24 maxlen: 24
185.89.14.0/23 maxlen: 23
185.89.14.0/24 maxlen: 24
185.89.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:42:84:50:46:56:1e:80:b6:15:3b:b7:d2:a3:4b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Validity
Not Before: Jun 4 15:31:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=298f7c38af632a9a9b3b61a665eec4b3f5f702e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:ef:6f:c2:66:e2:6a:c7:a0:9f:30:00:79:
da:63:ff:ee:10:ba:1c:eb:e6:2b:0d:2a:c0:25:ae:
e9:01:7f:5e:e8:98:f0:9e:91:dc:4c:98:89:ee:8d:
7a:6a:9f:d0:5c:04:b7:a3:07:65:39:a5:1d:bd:95:
e4:d3:aa:cb:e7:f3:f3:18:23:fa:52:11:2a:c9:35:
ec:be:24:75:84:fe:7f:d8:6a:98:a3:c0:40:55:fc:
4c:a5:ee:87:d7:ff:7c:ff:0d:54:7c:86:1f:47:df:
dd:c8:ab:a2:2d:5b:a7:c0:d2:a0:dd:dc:90:0b:f5:
37:3f:57:65:fc:dd:e1:51:8f:64:6a:b8:4e:41:5d:
7f:f3:ed:d9:de:31:c3:b8:1a:49:88:fc:39:ad:2f:
eb:5a:c1:e9:39:0c:0c:cd:83:11:00:99:77:01:04:
93:a1:16:79:c6:28:5a:c7:55:e9:4f:69:21:26:37:
fb:c3:a7:f2:15:26:32:02:27:1d:d5:67:4a:a0:26:
8b:26:9f:9f:80:72:26:6f:b3:de:db:f3:71:14:6b:
c0:ab:b1:6a:24:69:6d:1c:7e:11:4a:a3:31:4b:68:
40:9a:80:92:e0:ec:f9:48:42:12:fc:db:f3:5f:7b:
8f:69:54:8c:94:3c:0c:8a:0f:ac:ce:08:29:83:b1:
df:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8F:7C:38:AF:63:2A:9A:9B:3B:61:A6:65:EE:C4:B3:F5:F7:02:E6
X509v3 Authority Key Identifier:
keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/KY98OK9jKpqbO2GmZe7Es_X3AuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.114.120.0/21
185.89.12.0/24
185.89.14.0/23
Signature Algorithm: sha256WithRSAEncryption
99:3c:bf:68:6b:9d:aa:7b:8f:39:75:99:4a:4d:be:5e:ce:a5:
83:fc:d2:33:9c:ab:bb:50:bf:d5:94:b3:f3:9a:36:a1:91:e4:
c0:68:2f:b7:0f:37:c6:5c:e8:ca:f4:3f:21:4c:7d:aa:4b:42:
1f:69:f3:11:43:a7:54:d4:fb:85:90:49:f2:4b:e9:a3:89:8c:
9f:b2:28:f3:dc:2b:75:c5:c5:71:cb:7a:f5:65:1f:37:2c:d0:
fd:37:57:80:d5:2a:42:eb:f4:17:36:3b:ec:00:69:8a:a5:da:
5e:af:27:0d:e9:ca:c6:f2:ce:0c:29:bb:c3:be:fd:26:11:04:
e2:95:fd:e7:aa:91:40:bd:49:cc:37:85:37:ed:02:a9:3e:f6:
0c:fb:de:95:23:33:93:93:69:e9:f8:44:41:35:e2:78:39:e9:
f4:73:b0:f2:35:51:f0:2f:24:aa:5f:ed:cd:6c:c4:b7:d6:64:
27:e2:f0:9f:6d:ce:e9:1e:5b:5a:27:cf:d9:38:de:29:5a:8c:
76:e3:ea:f7:a0:57:f8:4b:d9:9c:91:73:1b:87:0d:d3:f6:e0:
57:e7:2c:4b:d5:20:9f:44:25:6e:74:2b:ec:23:9d:c9:d0:d6:
5c:67:79:be:f4:fb:cb:d3:3b:34:2d:c5:a9:45:d2:1f:cf:d1:
44:85:0d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:20 2026 by rpki-client