Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/pqwRBXUcAnZqjiL9UGEgNKttfMw.roa
File: pqwRBXUcAnZqjiL9UGEgNKttfMw.roa (raw, json)
Hash identifier: KLJLEaiqEl8jVoLuW9YGcmelUy/xD6v0/HEztq1UB0Q=
Subject key identifier: A6:AC:11:05:75:1C:02:76:6A:8E:22:FD:50:61:20:34:AB:6D:7C:CC
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019C7C22973EEE576326056F607C0F4499DB
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/pqwRBXUcAnZqjiL9UGEgNKttfMw.roa
Signing time: Fri 20 Feb 2026 17:39:27 +0000
ROA not before: Fri 20 Feb 2026 17:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31108
IP address blocks: 88.221.82.0/24 maxlen: 24
88.221.86.0/24 maxlen: 24
195.245.126.0/24 maxlen: 24
2a02:26f0:1c::/48 maxlen: 48
2a02:26f0:36::/48 maxlen: 48
2a02:26f0:3d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7c:22:97:3e:ee:57:63:26:05:6f:60:7c:0f:44:99:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Feb 20 17:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6ac1105751c02766a8e22fd50612034ab6d7ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:b1:c5:8d:08:e3:af:31:e1:94:2d:96:83:
8a:de:2a:45:01:97:40:cb:ef:2f:7f:ce:77:b0:20:
0f:7e:d5:bb:93:e6:90:5f:37:f8:37:7b:23:61:7a:
85:ee:f8:ea:9e:31:d8:8c:f1:64:8c:30:e5:df:8e:
5d:5c:f4:9e:8c:6f:20:f3:df:74:8e:a6:e3:2b:10:
9c:12:e4:60:26:dc:cd:a4:e3:f5:d3:8d:01:5e:32:
42:ce:23:9b:88:77:0b:6c:bf:00:66:df:85:21:0a:
55:35:b3:98:1d:07:e3:ff:3b:d8:2c:1b:3a:0a:09:
29:0f:d9:48:1b:be:ad:7e:16:7a:85:36:4d:8e:3e:
ff:c2:eb:ea:fd:42:6b:00:48:24:74:bf:2d:96:c1:
55:ca:68:9c:d6:72:d3:d1:27:5b:fd:cc:2c:76:50:
a1:27:ec:02:35:40:9f:47:bd:82:01:95:ab:ac:38:
8f:aa:e6:cc:e5:24:7f:3b:0e:6f:c1:7f:13:bc:44:
cb:24:be:e0:bb:35:e8:a6:56:29:ee:06:cc:8c:68:
fb:d0:ab:ff:3d:ed:67:77:1b:18:0a:74:b0:ff:a7:
26:76:eb:ff:1a:59:06:f4:cb:c4:df:36:d1:de:68:
5e:18:28:34:97:da:1f:9a:ea:4c:6a:d8:ab:ff:ed:
d4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AC:11:05:75:1C:02:76:6A:8E:22:FD:50:61:20:34:AB:6D:7C:CC
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/pqwRBXUcAnZqjiL9UGEgNKttfMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.221.82.0/24
88.221.86.0/24
195.245.126.0/24
IPv6:
2a02:26f0:1c::/48
2a02:26f0:36::/48
2a02:26f0:3d::/48
Signature Algorithm: sha256WithRSAEncryption
67:df:0b:2e:a8:5f:47:1c:e5:f6:63:34:a7:3c:cc:d5:51:ba:
d4:27:f9:bb:8c:6d:34:70:ae:30:06:13:8f:e5:af:1b:05:48:
43:9b:be:4e:6c:99:9a:43:89:ef:78:66:25:2b:78:33:72:27:
4a:41:e8:11:cb:09:2b:69:47:ff:fe:bf:94:33:8b:06:2f:2d:
44:f0:e7:91:78:52:08:ae:88:11:a3:c9:7a:67:c0:4d:d5:ff:
65:12:e5:8a:11:93:49:47:76:05:91:74:7f:91:19:4e:bc:de:
3e:a5:d2:d3:4c:aa:b2:3e:5c:42:cf:55:83:06:45:0a:25:03:
e0:33:77:11:ad:9b:97:80:2d:58:d5:8b:35:90:e6:e1:f3:f9:
31:a6:fe:76:5c:4c:87:64:82:1a:22:a2:49:41:54:e2:1d:3b:
40:cd:67:69:49:38:7a:f3:9e:dd:8e:dc:6a:41:bb:c9:b0:af:
a1:f7:fb:7d:48:62:a3:54:4e:db:00:c5:24:04:95:83:f9:9d:
d4:c6:f3:bf:14:59:7c:0d:c2:75:93:8b:ab:30:e8:a1:2e:06:
69:f3:79:f6:00:cf:19:c4:f3:e9:c7:f8:47:83:8a:8c:f5:23:
55:c1:4f:02:d7:4d:15:83:8a:98:93:b5:eb:dd:f4:37:d0:89:
3f:4e:d6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:00 2026 by rpki-client