Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Kq7QJSlg_4QY0R7RaYj4Ti58qcw.roa
File: Kq7QJSlg_4QY0R7RaYj4Ti58qcw.roa (raw, json)
Hash identifier: bBRpWE7OiUMYeqNpou2p2Wpdx4ns4UHX64/R4Kr6c+U=
Subject key identifier: 2A:AE:D0:25:29:60:FF:84:18:D1:1E:D1:69:88:F8:4E:2E:7C:A9:CC
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 019D492B953D1890B7368695EB342844184B
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Kq7QJSlg_4QY0R7RaYj4Ti58qcw.roa
Signing time: Wed 01 Apr 2026 13:11:25 +0000
ROA not before: Wed 01 Apr 2026 13:11:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212913
IP address blocks: 45.151.139.0/24 maxlen: 24
80.76.42.0/24 maxlen: 24
81.22.193.0/24 maxlen: 24
89.221.204.0/24 maxlen: 24
130.49.181.0/24 maxlen: 24
130.49.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:2b:95:3d:18:90:b7:36:86:95:eb:34:28:44:18:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Apr 1 13:11:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2aaed0252960ff8418d11ed16988f84e2e7ca9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:8d:b1:82:5b:40:0d:17:38:d8:93:9a:0f:
3b:96:54:a3:f3:cc:14:7a:45:d9:60:91:64:86:61:
0a:1d:5a:40:b9:f2:4c:8c:7b:32:43:31:07:84:a0:
48:fe:81:40:20:59:66:de:ae:8c:2a:fc:03:5a:88:
42:11:f3:a0:b4:45:08:9b:28:18:a2:63:33:d3:3a:
cd:3d:63:d6:d0:55:66:bc:3b:84:d0:e9:a1:f8:62:
6e:60:55:d1:f4:20:58:c1:0f:92:06:52:0d:54:8c:
26:af:7e:16:c9:65:0b:10:e5:8a:e4:33:7a:83:18:
7c:be:8b:d1:6f:38:6b:c0:1c:4a:f4:b7:38:13:be:
f7:d6:15:a6:81:24:84:16:8d:21:82:3d:7b:21:dc:
e8:9c:23:76:a0:6a:37:6a:d2:3b:81:1b:97:29:59:
fa:3c:1d:32:81:5a:80:96:39:cb:73:b0:05:c6:84:
d2:a5:fc:93:bd:dc:1d:41:c5:98:28:1d:b9:85:cf:
12:47:d5:1b:68:d7:8f:eb:28:a2:e4:01:71:f6:46:
21:9c:3c:97:49:0c:ad:f5:ba:e3:32:bd:45:9c:75:
41:bc:e3:4d:42:d1:fc:22:f6:c0:fd:4c:9d:69:b7:
fd:62:30:75:38:bc:d6:22:5c:cf:09:27:00:a1:e3:
48:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AE:D0:25:29:60:FF:84:18:D1:1E:D1:69:88:F8:4E:2E:7C:A9:CC
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Kq7QJSlg_4QY0R7RaYj4Ti58qcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.139.0/24
80.76.42.0/24
81.22.193.0/24
89.221.204.0/24
130.49.181.0/24
130.49.186.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:74:47:86:fd:1c:bb:1e:2a:58:db:5e:05:11:35:e1:83:33:
1d:e4:d8:d4:77:1e:15:b8:79:5c:90:f8:39:a2:78:bf:24:e3:
4d:13:31:b7:af:74:5d:a0:6f:0e:9f:a3:be:82:24:fd:29:9d:
aa:5c:51:cc:d9:33:73:c3:f4:bb:a2:d2:98:96:fc:83:4f:4c:
a9:d8:c5:95:e6:01:63:c2:ca:e4:20:f9:a6:75:c5:b0:40:99:
a2:a3:59:e8:44:b9:af:54:f4:b1:f0:a8:0b:e0:ae:f2:92:37:
f1:5b:59:f2:66:46:bc:ac:28:6c:b6:3e:d0:b0:4f:54:ec:bc:
ff:90:16:07:ba:ad:2a:27:f1:02:5e:70:60:b1:09:6d:28:3d:
2d:23:40:60:85:a9:cd:da:2c:bc:bb:5c:b9:b7:fb:38:a0:8f:
05:b9:dd:a9:30:70:63:df:18:35:66:a4:a8:68:56:e8:f6:8a:
6b:82:4c:47:a0:a0:0e:cb:1b:b7:96:22:da:d2:20:c9:49:28:
f5:d3:2f:5c:2d:cc:ce:d6:c5:c6:de:5a:fa:4a:14:01:8f:35:
14:61:8c:16:58:ac:cc:a6:8f:e4:ea:97:9a:f9:d6:12:a6:09:
f2:3e:29:c9:52:0e:c7:72:36:a1:43:83:d0:cd:ec:34:88:8c:
b9:e1:48:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:48 2026 by rpki-client