Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/KuCiITIBMCcyQIC0Wg-FfzXOy90.roa
File: KuCiITIBMCcyQIC0Wg-FfzXOy90.roa (raw, json)
Hash identifier: yh3dlgcYeMmwnjoODr0tY+uiIaOlKwyNpHWc8v9lZQ0=
Subject key identifier: 2A:E0:A2:21:32:01:30:27:32:40:80:B4:5A:0F:85:7F:35:CE:CB:DD
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 01A19F0FA11F765FE456193BA3B40181B313
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/KuCiITIBMCcyQIC0Wg-FfzXOy90.roa
Signing time: Tue 03 Nov 2026 01:39:23 +0000
ROA not before: Tue 03 Nov 2026 01:39:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 23.90.128.0/18 maxlen: 24
89.127.20.0/24 maxlen: 24
89.127.21.0/24 maxlen: 24
94.154.120.0/24 maxlen: 24
104.166.128.0/18 maxlen: 24
185.207.112.0/22 maxlen: 24
192.169.96.0/19 maxlen: 24
192.169.104.0/22 maxlen: 24
193.118.32.0/19 maxlen: 24
193.118.96.0/19 maxlen: 19
193.118.97.0/24 maxlen: 24
193.118.98.0/24 maxlen: 24
199.182.232.0/21 maxlen: 24
2a0b:21c0::/29 maxlen: 48
2a0b:21c1:602d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9f:0f:a1:1f:76:5f:e4:56:19:3b:a3:b4:01:81:b3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Nov 3 01:39:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ae0a22132013027324080b45a0f857f35cecbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:93:5e:5f:97:1c:84:9d:84:96:53:d8:28:
76:f8:da:09:30:b9:4e:eb:af:53:46:48:28:24:a8:
62:82:4f:a3:c0:c0:dd:48:fc:b3:33:22:6a:88:9e:
a8:9e:99:4b:8a:53:6f:fd:3f:58:1b:94:ba:66:c1:
a2:de:a9:56:16:c4:f0:fa:af:cf:79:4b:8b:b0:d5:
4f:2f:28:5e:66:39:72:0d:cf:31:d5:f8:69:df:b9:
eb:4a:21:72:72:33:d6:58:db:99:48:eb:46:09:f0:
64:86:4d:3f:6f:77:c8:b3:10:bd:0f:ee:42:4b:8a:
9f:8a:00:74:83:90:67:e7:65:ed:62:3a:82:01:73:
ed:65:d3:35:b2:60:2f:8b:f9:04:c3:0b:42:16:ae:
04:ea:99:16:ab:30:c5:0b:e8:0c:ef:44:a1:17:b3:
36:6b:92:c9:cb:50:18:a8:92:d4:19:f0:69:91:db:
d4:f4:a9:68:86:c4:af:68:48:d6:7d:a4:21:fb:a6:
66:60:85:80:d7:43:37:56:02:4e:ba:d4:b9:06:92:
3a:18:3f:9f:54:16:f2:ea:58:2b:fa:32:42:b6:2d:
01:8a:b7:ae:14:c6:47:3f:be:1a:9c:3d:79:1f:43:
03:35:4f:16:f5:84:e6:3a:da:6a:35:b5:37:9d:74:
d0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E0:A2:21:32:01:30:27:32:40:80:B4:5A:0F:85:7F:35:CE:CB:DD
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/KuCiITIBMCcyQIC0Wg-FfzXOy90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.90.128.0/18
89.127.20.0/23
94.154.120.0/24
104.166.128.0/18
185.207.112.0/22
192.169.96.0/19
193.118.32.0/19
193.118.96.0/19
199.182.232.0/21
IPv6:
2a0b:21c0::/29
Signature Algorithm: sha256WithRSAEncryption
29:3e:75:92:3f:ce:0c:ed:87:ca:d0:f4:8d:bd:50:a0:f3:45:
a7:55:6e:84:ce:ea:38:b2:c8:96:21:5f:3d:65:f1:4b:c9:ca:
d2:44:12:57:a6:f2:a2:e9:54:0c:87:c7:bd:57:29:73:fe:2d:
17:3c:ff:37:b1:7a:9c:b4:ac:05:ed:45:51:67:d0:25:17:51:
d9:01:41:a7:91:19:dd:55:d1:a5:85:a5:cb:dc:a6:00:6a:6d:
8c:e8:1c:ea:09:bd:03:4d:5e:68:59:0d:07:7e:4b:9d:e4:9d:
20:04:1f:51:3f:e5:3c:84:d3:22:c3:cb:e0:31:41:cc:24:e3:
84:38:1c:fe:b9:c2:7f:e8:d4:11:d1:71:c6:98:91:28:2d:82:
b7:b3:cd:83:49:a5:82:df:26:a5:18:da:39:32:fe:4c:5d:8c:
8a:3f:a4:14:da:a6:17:62:d0:3e:c5:dd:8f:18:54:20:1b:2a:
de:b6:a4:dc:b2:af:98:62:ea:5e:0c:55:53:c0:d0:f5:98:45:
e6:2c:fd:55:91:f0:2c:a0:53:a3:a6:22:d7:60:19:b8:6a:0b:
d8:a4:2a:cb:ef:a3:18:37:d6:ed:8f:f0:93:0b:6a:dc:d2:f6:
91:07:12:8d:83:d5:8b:aa:84:f7:f9:8b:6a:b5:13:ee:cd:8a:
10:74:72:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 20:09:02 2026 by rpki-client