Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/kqg0V3p8AX3iRQP_s6T2QX7-BW4.roa
File: kqg0V3p8AX3iRQP_s6T2QX7-BW4.roa (raw, json)
Hash identifier: qnyUd3WARrriN9STkePaKJJVJ+WTt9gaCB0dEQV5Ze0=
Subject key identifier: 92:A8:34:57:7A:7C:01:7D:E2:45:03:FF:B3:A4:F6:41:7E:FE:05:6E
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 019CF6AF0048CB0304B17070B2B2D750177B
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/kqg0V3p8AX3iRQP_s6T2QX7-BW4.roa
Signing time: Mon 16 Mar 2026 12:46:29 +0000
ROA not before: Mon 16 Mar 2026 12:46:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 84.232.29.0/24 maxlen: 24
84.236.247.0/24 maxlen: 24
88.148.121.0/24 maxlen: 24
89.32.161.0/24 maxlen: 24
89.35.149.0/24 maxlen: 24
89.44.64.0/24 maxlen: 24
89.45.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:af:00:48:cb:03:04:b1:70:70:b2:b2:d7:50:17:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Mar 16 12:46:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92a834577a7c017de24503ffb3a4f6417efe056e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d3:e9:da:67:34:0e:e5:04:3b:37:9a:44:b8:
54:39:6e:69:d5:4a:79:13:75:42:df:1c:5f:e5:21:
37:0e:4b:18:bf:c0:c1:ec:28:bf:3f:da:58:b0:6c:
0b:83:2f:8b:19:0a:85:2c:4b:22:4f:d4:79:be:7f:
2a:eb:6d:c9:66:30:b3:8f:9a:8e:bf:b1:7b:15:e5:
9f:13:ef:46:70:7f:ba:f4:d9:f7:4c:75:f6:d4:9f:
65:4b:64:d4:38:62:5a:86:ae:ef:2b:0f:99:2b:24:
7a:29:8c:97:22:38:38:d9:6a:b8:e4:b6:8b:35:1a:
be:1d:e4:a0:bb:0e:77:f3:57:4c:a1:2a:34:90:38:
04:b1:10:bc:0a:bb:fc:ad:36:cd:01:62:ed:f9:f3:
03:a0:44:82:9b:80:0f:a0:2f:29:bd:c3:75:8f:72:
01:45:ba:ab:28:7e:49:7e:58:b6:34:a6:0d:cc:7d:
5d:df:c6:be:67:d8:ba:cc:06:d1:1d:4f:ac:b5:2f:
c7:2f:b0:1e:71:15:1e:97:32:05:c4:9e:6d:07:72:
5e:ff:cd:a5:d5:49:d9:30:8d:9a:e9:dc:97:3e:b8:
bd:97:73:f1:cc:b7:6f:ed:c0:33:b3:2e:22:5e:ed:
26:c8:50:44:b5:21:b0:5b:59:fa:ed:4b:87:c4:2a:
f5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A8:34:57:7A:7C:01:7D:E2:45:03:FF:B3:A4:F6:41:7E:FE:05:6E
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/kqg0V3p8AX3iRQP_s6T2QX7-BW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.29.0/24
84.236.247.0/24
88.148.121.0/24
89.32.161.0/24
89.35.149.0/24
89.44.64.0/24
89.45.244.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:63:76:cd:6f:79:cb:a7:01:1d:f4:92:8b:44:5d:64:0c:2b:
a2:0e:b8:a9:22:48:e2:34:1f:bb:af:9e:39:13:2e:a4:0e:54:
51:cb:7f:b7:3c:1b:6d:95:7d:90:93:b6:f0:9c:ea:2a:a6:df:
4c:71:f4:3d:93:ef:20:86:68:e9:19:59:77:fc:d6:d9:01:db:
1b:b9:ef:bc:74:77:84:31:2d:bb:9a:be:d7:93:f5:58:67:2b:
e8:4a:79:17:ea:7a:35:89:8b:f8:cb:4a:c8:94:d6:14:85:52:
3c:c6:fb:91:fb:4a:2c:18:90:9c:32:6c:4d:b9:86:70:5f:10:
64:00:d1:e2:f6:9d:e2:10:06:ce:27:3d:48:c2:cc:38:b4:34:
37:31:4b:0b:6c:1b:7b:55:bd:67:28:6d:ed:7b:b3:7c:b7:d8:
2d:4e:ac:66:8b:b2:4a:50:e4:4d:43:5a:ae:63:9c:0a:b3:c1:
69:98:97:cd:47:47:e6:40:35:d3:20:a2:8b:51:f9:1e:8b:51:
33:7a:df:b1:dc:86:4a:ec:46:c8:e3:46:02:c7:ae:af:f2:62:
0a:ba:a5:4c:5d:1b:15:09:51:ee:b7:c2:f7:71:12:18:20:65:
c5:6a:7a:72:df:41:0f:b1:39:cf:a0:aa:e6:ab:00:84:dc:00:
f8:dd:28:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:32:06 2026 by rpki-client