Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/kjQiljeUwEx-0O3qxw80JEcNHTk.roa
File: kjQiljeUwEx-0O3qxw80JEcNHTk.roa (raw, json)
Hash identifier: Nj75u7cki0A+yVZeLl5QIeG1w+agzNtRDNjOCJHZFpc=
Subject key identifier: 92:34:22:96:37:94:C0:4C:7E:D0:ED:EA:C7:0F:34:24:47:0D:1D:39
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 019EFDEE50B91F08262EBE4C87FAC8B6EE06
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/kjQiljeUwEx-0O3qxw80JEcNHTk.roa
Signing time: Thu 25 Jun 2026 08:38:34 +0000
ROA not before: Thu 25 Jun 2026 08:38:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213922
IP address blocks: 62.164.156.0/22 maxlen: 24
89.126.232.0/24 maxlen: 24
91.188.248.0/24 maxlen: 24
91.188.249.0/24 maxlen: 24
91.188.250.0/23 maxlen: 24
91.202.245.0/24 maxlen: 24
91.202.246.0/23 maxlen: 24
181.202.0.0/16 maxlen: 24
185.109.28.0/22 maxlen: 24
2a0c:6ec0:2::/48 maxlen: 48
2a0c:6ec0:3::/48 maxlen: 48
2a0c:6ec0:a01::/48 maxlen: 48
2a0c:6ec0:b00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:ee:50:b9:1f:08:26:2e:be:4c:87:fa:c8:b6:ee:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: Jun 25 08:38:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=923422963794c04c7ed0edeac70f3424470d1d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a1:0f:db:d2:54:ae:b1:08:19:e9:07:9b:ef:
43:86:9c:13:74:c7:26:7c:b6:d9:d5:57:42:33:e6:
a1:6d:fa:4e:4e:09:f5:e8:b0:c6:d0:f1:e8:cc:30:
c0:42:35:13:f9:82:e0:e8:64:cd:50:53:40:c0:9f:
28:9e:e7:1c:6a:82:d2:17:dd:8b:0c:71:09:72:27:
4a:93:80:42:f2:26:d7:32:bb:be:72:df:b7:6d:02:
2b:b9:33:17:07:34:60:ba:06:97:ea:1d:32:bc:a6:
e0:40:56:af:73:4f:37:7c:a6:8d:7f:bf:3c:0e:4a:
5f:0e:f7:6a:f3:da:be:95:ae:81:6d:c2:fa:76:51:
bf:60:7b:5e:45:71:63:f5:52:2e:4a:e7:94:e7:ff:
35:7c:e2:42:17:90:3b:fa:2e:6a:c7:7f:91:48:63:
1b:77:e6:ef:34:51:07:9d:17:02:f5:34:8a:73:9e:
04:66:2f:dc:1e:bf:82:54:16:f1:c7:04:8b:a1:45:
e7:c5:07:e6:ac:4b:80:e9:9b:a4:7c:98:d0:f6:17:
09:9f:99:f2:e3:e9:dd:9c:c3:29:73:2c:93:25:f0:
24:b4:3e:ee:23:8f:47:cf:be:1a:9e:15:80:6d:fb:
28:87:30:3d:f3:87:cd:97:ff:84:62:5e:e4:a6:e8:
11:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:34:22:96:37:94:C0:4C:7E:D0:ED:EA:C7:0F:34:24:47:0D:1D:39
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/kjQiljeUwEx-0O3qxw80JEcNHTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.156.0/22
89.126.232.0/24
91.188.248.0/22
91.202.245.0-91.202.247.255
181.202.0.0/16
185.109.28.0/22
IPv6:
2a0c:6ec0:2::/47
2a0c:6ec0:a01::/48
2a0c:6ec0:b00::/40
Signature Algorithm: sha256WithRSAEncryption
74:be:7b:0f:53:98:41:bb:73:07:89:16:f0:4d:25:22:0c:4a:
fc:75:3f:88:2e:0c:79:e5:b2:b8:b9:d4:31:5e:15:c9:3d:61:
a2:b0:af:19:7c:9e:39:5b:74:64:d8:5c:51:a6:dc:8b:e1:7e:
23:6b:37:7c:5a:13:17:e2:0f:dc:06:4a:f4:6f:88:5d:0c:a4:
1d:80:d3:f6:61:59:19:4c:23:3b:e7:e5:f9:df:fe:df:4e:f8:
26:55:65:07:c4:fb:f1:4b:be:c1:16:a1:9f:ef:a5:f0:55:f2:
51:97:2f:fa:fe:b9:e8:41:3e:36:b9:ed:ef:3d:45:a8:ae:71:
37:fa:a8:75:5d:10:82:ba:ad:24:78:b6:10:f5:33:46:4b:d0:
87:50:bc:3e:52:4e:da:89:d3:30:d7:12:f7:11:a2:3f:f3:3e:
e8:2e:53:51:30:18:a8:14:f3:73:01:33:dd:29:41:31:ce:68:
c8:cb:71:d3:a8:84:ef:9e:71:45:da:7f:51:c9:21:be:fd:ef:
dd:47:40:6e:c5:4b:9d:26:6d:0c:0b:37:12:a8:70:3d:95:5f:
01:eb:6d:5d:fa:98:6d:66:19:b1:c3:d0:1d:5f:b2:23:da:f5:
f9:07:25:d1:20:48:bf:de:ec:bd:df:3c:d3:16:c2:93:3d:b8:
14:cc:bb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:31 2026 by rpki-client