Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/KIREq3B_mRi_ruYLjq_b_qaPiMU.roa
File: KIREq3B_mRi_ruYLjq_b_qaPiMU.roa (raw, json)
Hash identifier: XxQhGm3arKEfc0Jix82KOHGdF1oeChWiOIWCuWRPrpg=
Subject key identifier: 28:84:44:AB:70:7F:99:18:BF:AE:E6:0B:8E:AF:DB:FE:A6:8F:88:C5
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 019DB533FA1C9DDB096238D50312FFC76E27
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/KIREq3B_mRi_ruYLjq_b_qaPiMU.roa
Signing time: Wed 22 Apr 2026 12:39:35 +0000
ROA not before: Wed 22 Apr 2026 12:39:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51324
IP address blocks: 185.80.144.0/22 maxlen: 24
2a05:7dc2:1::/48 maxlen: 48
2a05:7dc2:1000::/36 maxlen: 36
2a05:7dc2:2000::/36 maxlen: 36
2a05:7dc2:3000::/36 maxlen: 36
2a05:7dc2:4000::/36 maxlen: 36
2a05:7dc2:5000::/36 maxlen: 36
2a05:7dc2:6000::/36 maxlen: 36
2a05:7dc2:7000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b5:33:fa:1c:9d:db:09:62:38:d5:03:12:ff:c7:6e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: Apr 22 12:39:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=288444ab707f9918bfaee60b8eafdbfea68f88c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:10:34:23:ca:85:15:4f:2a:54:b4:1c:55:
76:ae:96:60:83:8e:d3:c8:24:5e:d4:b2:45:94:8c:
40:01:80:49:9d:e2:7d:a5:99:37:81:08:eb:60:04:
d3:f9:9d:89:06:cc:56:2b:47:31:5c:71:cd:e3:98:
36:04:03:02:93:a6:a0:6d:a8:ca:62:c7:04:5c:5f:
11:7a:4d:96:0a:d1:4e:ba:12:72:24:84:a7:41:4c:
d7:e4:97:aa:14:89:81:0b:ed:2a:e5:63:bb:14:d5:
bc:a8:67:62:a6:04:db:b6:47:0b:de:49:8a:b7:f4:
6f:e0:45:07:36:a2:5c:28:43:1d:0e:46:f1:95:c2:
19:44:dc:6b:e8:e8:8e:99:83:f2:07:1a:52:44:3e:
82:e3:9d:69:2e:71:d3:8f:f6:3b:d9:39:64:30:96:
d2:3f:3b:08:d4:a5:3d:93:a3:d3:35:9e:b6:e7:65:
34:d6:17:a1:7b:e6:2a:0c:2f:1e:a9:f0:84:1c:87:
85:64:8d:69:24:c0:03:6e:25:e0:20:0b:95:c6:c9:
b9:f2:97:9f:67:56:bb:2a:f1:56:e2:d8:76:cf:a0:
84:54:e7:95:36:b3:47:31:37:ca:24:94:be:de:7d:
72:5e:50:27:40:81:b5:f8:1c:1d:f3:98:ce:69:e3:
5f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:84:44:AB:70:7F:99:18:BF:AE:E6:0B:8E:AF:DB:FE:A6:8F:88:C5
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/KIREq3B_mRi_ruYLjq_b_qaPiMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.144.0/22
IPv6:
2a05:7dc2:1::/48
2a05:7dc2:1000::-2a05:7dc2:7fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
84:a8:39:9b:11:6a:95:34:cc:0c:89:f5:f6:6e:aa:db:ee:da:
4e:5b:0a:69:7f:e1:6b:3f:6a:ab:68:a1:bf:81:af:42:e9:8f:
65:ee:37:9d:6a:03:53:7e:cb:56:f7:69:fa:89:f5:9d:91:ae:
a8:e1:7f:cc:c4:f5:f0:1c:6a:78:2e:82:e0:21:6b:b0:2a:37:
a0:28:68:28:51:56:84:38:97:e0:53:da:40:ec:22:86:6d:f7:
1d:52:1a:62:f9:53:7c:11:74:ef:53:0a:b5:eb:03:c6:cf:7a:
63:af:34:d5:0c:ea:13:37:be:91:e9:a9:89:d3:1c:c9:9b:ae:
1e:05:5b:ca:dd:80:ff:dc:a8:42:34:c7:81:b5:85:31:6b:03:
9c:f6:26:cd:bd:16:7e:7f:b0:fe:22:83:92:39:26:f0:ac:d4:
17:cb:c9:d8:6b:57:70:99:ad:b1:9b:1c:b2:fc:cd:73:be:18:
10:47:9e:b9:74:2b:bf:e6:fb:eb:44:ac:4c:80:68:a7:3c:30:
8a:f2:6f:2d:bb:79:2d:25:f9:05:04:53:54:64:b4:0e:48:7d:
9c:1e:ac:05:91:23:af:85:b6:ce:77:8c:85:61:ae:c2:0a:7e:
6c:33:24:bd:49:c8:f7:82:2d:7e:7c:c6:c5:2a:7c:75:3f:15:
33:7b:1e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:55 2026 by rpki-client