Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/kkpzUVvG-LYlCr9E3iHqRQp1DOE.roa
File: kkpzUVvG-LYlCr9E3iHqRQp1DOE.roa (raw, json)
Hash identifier: LNEmIC3JpFWK673pT5gv8QslZm2bZ9FioJO226un0sU=
Subject key identifier: 92:4A:73:51:5B:C6:F8:B6:25:0A:BF:44:DE:21:EA:45:0A:75:0C:E1
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019D9A583E3372F1B5735FD66E034D343E1E
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/kkpzUVvG-LYlCr9E3iHqRQp1DOE.roa
Signing time: Fri 17 Apr 2026 07:29:27 +0000
ROA not before: Fri 17 Apr 2026 07:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 37.148.128.0/22 maxlen: 24
93.88.153.0/24 maxlen: 24
93.88.157.0/24 maxlen: 24
93.88.158.0/24 maxlen: 24
95.155.128.0/23 maxlen: 24
95.155.128.0/24 maxlen: 24
95.155.129.0/24 maxlen: 24
95.155.133.0/24 maxlen: 24
95.155.145.0/24 maxlen: 24
95.155.146.0/23 maxlen: 24
95.155.146.0/24 maxlen: 24
95.155.147.0/24 maxlen: 24
95.155.148.0/23 maxlen: 24
95.155.149.0/24 maxlen: 24
95.155.152.0/22 maxlen: 24
95.155.156.0/24 maxlen: 24
95.155.160.0/20 maxlen: 24
95.155.176.0/21 maxlen: 24
152.89.84.0/24 maxlen: 24
152.89.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:58:3e:33:72:f1:b5:73:5f:d6:6e:03:4d:34:3e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Apr 17 07:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=924a73515bc6f8b6250abf44de21ea450a750ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b5:0b:05:a8:fa:37:af:c3:94:5c:a4:01:3a:
b0:86:1f:49:9d:01:6b:c0:af:67:3d:4b:63:35:94:
66:46:78:e2:5d:05:f4:2c:53:56:de:3e:4e:4b:c3:
07:fe:33:1b:bf:63:50:b2:07:97:a0:b4:cf:c6:cb:
1d:70:b4:b4:5b:5b:65:7d:0f:ec:1c:5b:3a:15:72:
f3:0e:dc:10:a4:d1:01:1f:84:03:31:23:8f:de:89:
a6:2e:bb:ff:54:43:24:28:4d:0e:d7:d9:d5:45:89:
bf:3b:2b:92:f3:4a:4a:33:5d:2c:32:ef:b2:e6:3d:
0f:4c:1a:b5:f6:4e:ff:dc:fe:38:67:74:10:2a:de:
4f:2f:ec:75:b7:e6:2d:03:60:15:b6:8e:87:77:d1:
eb:b9:d1:bb:15:4e:1b:f3:ef:97:85:91:e3:cf:b5:
6c:78:e7:e7:67:4c:13:20:c4:b1:d1:8d:94:27:2e:
f0:9e:31:b6:f9:9f:ec:c4:6d:f6:63:4a:19:06:28:
f7:fa:d1:9e:4e:9f:65:55:be:40:e4:86:c3:46:df:
15:b9:22:77:40:65:41:94:07:26:2d:97:ac:49:5d:
50:41:79:2b:a3:98:dc:6e:9f:77:99:ee:03:3c:5d:
52:0d:73:08:4b:b0:84:ff:da:2d:96:92:5f:8e:7f:
13:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4A:73:51:5B:C6:F8:B6:25:0A:BF:44:DE:21:EA:45:0A:75:0C:E1
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/kkpzUVvG-LYlCr9E3iHqRQp1DOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.128.0/22
93.88.153.0/24
93.88.157.0-93.88.158.255
95.155.128.0/23
95.155.133.0/24
95.155.145.0-95.155.149.255
95.155.152.0-95.155.156.255
95.155.160.0-95.155.183.255
152.89.84.0/24
152.89.87.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:bf:ce:c2:e8:a6:a1:c6:5a:c2:93:cf:ce:c9:63:33:10:e9:
f2:86:66:c3:82:b4:4b:22:35:0d:7a:43:b5:cc:dc:b3:17:8f:
7d:dc:62:33:73:24:51:a7:fe:8b:86:52:18:4d:75:ad:ce:20:
d2:3e:c3:8e:d6:74:60:e7:55:08:17:d7:ea:9b:28:f8:69:82:
d6:a7:df:70:14:df:e0:dd:0a:b4:6f:e7:a3:ac:d0:90:e6:70:
39:4b:f8:5d:81:27:84:bd:e2:4f:f8:f5:6e:ec:7d:08:55:7d:
78:d0:cf:1a:72:ce:f9:ee:2d:ca:6d:57:91:8b:8a:b1:85:9e:
10:59:f8:26:3a:79:cc:8e:44:c3:f4:21:95:53:b0:3c:5b:d1:
93:9d:2c:79:4c:ae:a6:f7:76:0f:8b:32:36:fb:c8:24:92:73:
fa:4f:f6:5e:49:f5:75:0d:c9:41:73:df:36:d7:2e:96:be:ea:
b5:86:51:19:d4:e2:93:67:7b:96:50:c2:9e:9f:7e:c1:18:f3:
21:0e:68:88:50:3b:dc:58:ea:9d:57:29:9a:13:47:24:43:d6:
6c:0a:e8:03:88:7d:02:8b:90:79:de:2c:ff:c9:ac:60:5f:bf:
2a:b5:ae:e5:06:96:c5:81:8a:85:88:30:29:e0:28:f2:68:95:
8f:03:84:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:24:39 2026 by rpki-client