Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/KW_8cQbCRZrMxXEyWhTa1RCtzvY.roa
File: KW_8cQbCRZrMxXEyWhTa1RCtzvY.roa (raw, json)
Hash identifier: lmD03CJD5jyT9rgsLt03/38cv3snb1tZTQ3m9TewTSk=
Subject key identifier: 29:6F:FC:71:06:C2:45:9A:CC:C5:71:32:5A:14:DA:D5:10:AD:CE:F6
Certificate issuer: /CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Certificate serial: 019C51CC5AB1888E7BAB1A3EE6EABF28B6C0
Authority key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/KW_8cQbCRZrMxXEyWhTa1RCtzvY.roa
Signing time: Thu 12 Feb 2026 12:21:12 +0000
ROA not before: Thu 12 Feb 2026 12:21:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49601
IP address blocks: 91.229.56.0/24 maxlen: 32
91.229.182.0/24 maxlen: 32
91.229.210.0/24 maxlen: 32
185.189.124.0/22 maxlen: 32
185.189.124.0/24 maxlen: 32
185.189.125.0/24 maxlen: 32
185.189.126.0/24 maxlen: 32
185.189.127.0/24 maxlen: 32
185.226.60.0/22 maxlen: 32
185.226.60.0/24 maxlen: 32
185.226.61.0/24 maxlen: 32
185.226.62.0/24 maxlen: 32
185.226.63.0/24 maxlen: 32
185.252.96.0/22 maxlen: 32
185.252.96.0/24 maxlen: 32
185.252.97.0/24 maxlen: 32
185.252.98.0/24 maxlen: 32
185.252.99.0/24 maxlen: 32
193.162.107.0/24 maxlen: 32
2a0b:e680::/29 maxlen: 128
2a0c:3e00::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:51:cc:5a:b1:88:8e:7b:ab:1a:3e:e6:ea:bf:28:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Validity
Not Before: Feb 12 12:21:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=296ffc7106c2459accc571325a14dad510adcef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:09:2a:72:ae:eb:3a:d9:79:3b:84:1a:9f:
4d:5d:c5:f3:b4:02:8e:5d:1e:0d:99:ff:15:14:20:
07:e0:c1:36:51:81:4c:d1:bd:1c:b7:bf:d3:c8:fa:
50:f2:91:cc:65:29:54:9f:18:d4:5f:23:a5:7b:76:
e2:b5:1e:77:27:d2:79:a4:1e:c6:d3:d4:1f:6a:08:
70:a1:96:bc:ed:61:d0:c6:9a:d6:08:6f:6b:fc:66:
49:df:9d:3a:7b:73:8d:66:30:f4:b6:ef:55:d2:de:
c6:69:32:ac:4e:57:93:c9:ca:2a:33:11:dc:51:dd:
d7:a4:e2:2d:72:2e:08:79:6e:f9:f6:cf:90:73:b5:
69:2f:8e:da:66:be:14:79:a6:8f:0c:d0:53:16:2c:
97:8c:43:dd:15:77:37:d1:e6:e0:78:6d:7c:f8:df:
73:a4:f6:9f:31:fb:a5:9c:ae:9a:ab:d4:e3:b4:3e:
82:88:de:33:ad:c8:e2:55:3d:ae:08:07:54:e4:92:
ca:33:71:7c:0a:f7:c0:25:e6:29:86:90:14:5d:71:
71:da:77:a5:a1:22:b9:65:f5:d6:7b:45:84:81:d5:
39:c7:68:3d:1e:c9:53:b2:52:6c:56:f5:94:3a:d3:
7e:e4:25:23:3b:f5:9d:a8:fd:0c:a2:c8:c8:f1:5b:
7e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6F:FC:71:06:C2:45:9A:CC:C5:71:32:5A:14:DA:D5:10:AD:CE:F6
X509v3 Authority Key Identifier:
keyid:92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/KW_8cQbCRZrMxXEyWhTa1RCtzvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.56.0/24
91.229.182.0/24
91.229.210.0/24
185.189.124.0/22
185.226.60.0/22
185.252.96.0/22
193.162.107.0/24
IPv6:
2a0b:e680::/29
2a0c:3e00::/29
Signature Algorithm: sha256WithRSAEncryption
8f:51:c2:1f:89:81:e3:fc:26:45:05:ee:a7:99:20:56:f6:50:
8d:e0:48:af:d8:1d:15:b0:f6:cb:c8:23:bd:50:2c:c0:d4:ff:
73:7c:ad:eb:5c:21:b0:76:7a:6d:9d:ce:fa:ba:db:5c:14:1e:
fe:2d:c4:f1:d8:fa:b8:90:d5:8d:54:b8:8e:66:43:1e:40:e3:
1b:22:e0:5d:98:36:c3:6a:50:90:d1:2a:5b:6e:b1:46:00:07:
70:09:a9:e5:c4:88:f0:ff:d0:94:13:ae:93:6f:4e:b0:87:7e:
9a:e3:64:be:3c:ec:43:b2:7d:8a:05:6b:8b:d8:5b:c9:6c:35:
66:83:7d:50:ba:f8:7e:50:c9:2f:e7:6f:c4:d4:3f:b2:65:3c:
8a:12:9f:b5:fa:d8:32:cf:8c:0c:c7:2f:75:03:88:13:46:ba:
56:73:fd:86:85:9a:81:9f:27:27:a6:dd:df:a6:8a:50:19:29:
f5:e3:d7:76:0a:de:4b:10:ae:bd:55:4a:b9:dd:6c:91:6d:e5:
1f:d3:a8:e5:ac:26:26:62:d4:34:aa:ba:af:76:f5:3b:0c:4b:
b4:6b:d1:51:99:b2:c2:69:af:a3:22:c5:d9:bb:ae:34:ee:72:
f4:fb:69:86:2b:11:31:d6:72:b7:f2:36:ad:b9:db:bb:95:bd:
97:9d:b1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:23:37 2026 by rpki-client