Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/KqXW5eiWEmBqSnw-_aIhCHEUPt4.roa
File: KqXW5eiWEmBqSnw-_aIhCHEUPt4.roa (raw, json)
Hash identifier: p/iDfnuzAgEMFkp2Xh+HbNgqmnQt20LPs/9g4uupD6Q=
Subject key identifier: 2A:A5:D6:E5:E8:96:12:60:6A:4A:7C:3E:FD:A2:21:08:71:14:3E:DE
Certificate issuer: /CN=8166038385b343d55e76b728efe23c0731787668
Certificate serial: 01A120954257487C7EADD1A65EE63CE695ED
Authority key identifier: 81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/KqXW5eiWEmBqSnw-_aIhCHEUPt4.roa
Signing time: Fri 09 Oct 2026 12:13:35 +0000
ROA not before: Fri 09 Oct 2026 12:13:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31363
IP address blocks: 89.17.33.0/24 maxlen: 24
89.17.35.0/24 maxlen: 24
89.17.49.0/24 maxlen: 24
89.17.51.0/24 maxlen: 24
89.17.52.0/22 maxlen: 22
185.127.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:95:42:57:48:7c:7e:ad:d1:a6:5e:e6:3c:e6:95:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8166038385b343d55e76b728efe23c0731787668
Validity
Not Before: Oct 9 12:13:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2aa5d6e5e89612606a4a7c3efda2210871143ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:97:56:89:da:0c:2c:fc:f9:c5:7b:40:9e:
0f:10:8e:79:bf:14:f1:df:08:ae:43:0f:0c:c3:a8:
20:d5:68:83:3e:8e:c4:59:78:37:00:b2:0b:e5:82:
be:e4:bc:54:7c:20:95:91:67:8d:41:80:18:df:95:
58:63:88:18:3d:c1:a9:81:df:60:97:57:14:ee:4e:
16:e7:0b:8b:0d:d9:e2:25:66:b9:ca:e3:b7:90:b8:
41:30:69:ee:b4:e6:30:0b:59:f0:66:b6:5e:f3:5d:
66:74:f1:d8:f3:13:b8:c7:73:85:45:00:08:87:6b:
4e:95:1d:08:78:25:09:c6:77:67:a3:7f:18:4e:c7:
12:a2:c2:4b:9c:81:5f:bf:51:d2:62:f3:64:0f:f2:
65:21:6d:c7:73:c2:ba:5c:9d:43:78:c3:14:9f:e7:
b5:f2:bf:d6:38:ba:58:5e:69:40:47:6b:21:1b:95:
04:b4:a4:e9:0f:bf:cf:43:17:e8:86:ba:8e:58:ea:
8a:63:10:75:08:c0:b9:3f:00:ba:a0:48:43:4d:1e:
ca:eb:fc:da:c9:9c:71:7b:9b:2d:55:dd:77:97:e3:
05:e9:d4:07:46:8b:45:da:de:6e:80:36:01:fc:bf:
3b:ac:63:d4:11:68:07:9e:71:38:05:66:d0:d7:5f:
0b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A5:D6:E5:E8:96:12:60:6A:4A:7C:3E:FD:A2:21:08:71:14:3E:DE
X509v3 Authority Key Identifier:
keyid:81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/KqXW5eiWEmBqSnw-_aIhCHEUPt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.17.33.0/24
89.17.35.0/24
89.17.49.0/24
89.17.51.0-89.17.55.255
185.127.224.0/22
Signature Algorithm: sha256WithRSAEncryption
99:be:ba:9e:32:28:37:92:2b:b8:68:cc:5f:18:da:3b:ef:c3:
07:de:82:eb:92:fa:85:dd:8b:f4:5d:c5:a5:d9:e1:89:10:de:
ba:33:3e:a3:ec:b1:63:b6:ab:0a:fc:cb:fa:c2:c0:3d:91:76:
22:81:9a:5d:8f:3c:0d:ea:2a:82:66:d5:5a:21:f9:9f:56:64:
ac:f2:b1:09:fb:60:2a:4e:43:89:1e:65:b2:b0:9d:d9:d2:06:
cf:8a:e4:20:72:53:be:1c:54:0e:28:03:91:a2:e7:ef:57:d2:
47:a7:04:06:7d:9d:fd:40:37:44:a3:46:29:da:8d:10:76:46:
1c:b8:96:6d:f2:0c:7c:19:01:41:6a:a0:90:8a:96:f7:38:48:
02:7f:63:da:dd:02:fc:14:10:8d:37:a6:09:0b:01:09:a1:0d:
32:b7:3f:b5:03:b3:a5:99:65:6e:c9:86:a4:e1:99:47:df:76:
cc:12:57:8b:ee:6c:7c:8e:ff:bd:45:d7:ab:18:14:f3:2b:df:
b0:7c:10:f2:f2:1d:c6:2a:57:0d:31:f0:8d:4f:5f:4d:37:49:
b3:06:8e:51:35:a2:08:63:ac:29:47:94:76:55:c2:11:4e:5e:
db:d6:14:47:13:47:5b:86:2c:b1:a0:0a:ea:bf:da:b3:02:8b:
36:3f:73:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 18:32:32 2026 by rpki-client