Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/KSqbYIiPC6hjZpCBNYyri7RkHz8.roa
File: KSqbYIiPC6hjZpCBNYyri7RkHz8.roa (raw, json)
Hash identifier: 7dy/EjEvp/VIWQEGsyWTmFFkXo9hH0Lswc/1YNyFJRs=
Subject key identifier: 29:2A:9B:60:88:8F:0B:A8:63:66:90:81:35:8C:AB:8B:B4:64:1F:3F
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 019F6B4402158980BCA0B890728038BB3ADC
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/KSqbYIiPC6hjZpCBNYyri7RkHz8.roa
Signing time: Thu 16 Jul 2026 14:10:46 +0000
ROA not before: Thu 16 Jul 2026 14:10:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58321
IP address blocks: 91.198.146.0/24 maxlen: 24
91.199.22.0/24 maxlen: 24
91.228.196.0/22 maxlen: 24
91.234.146.0/24 maxlen: 24
91.237.52.0/24 maxlen: 24
91.239.66.0/23 maxlen: 24
93.157.96.0/21 maxlen: 24
94.152.254.0/24 maxlen: 24
94.152.255.0/24 maxlen: 24
178.250.40.0/21 maxlen: 24
185.5.96.0/22 maxlen: 24
185.25.148.0/22 maxlen: 24
185.84.136.0/23 maxlen: 24
185.123.160.0/22 maxlen: 24
185.140.120.0/22 maxlen: 24
185.180.204.0/22 maxlen: 24
185.193.112.0/22 maxlen: 24
185.201.112.0/22 maxlen: 24
185.204.216.0/22 maxlen: 24
185.208.164.0/24 maxlen: 24
185.243.52.0/22 maxlen: 24
193.17.184.0/24 maxlen: 24
193.218.152.0/22 maxlen: 24
194.169.227.0/24 maxlen: 24
195.2.254.0/23 maxlen: 24
195.62.12.0/23 maxlen: 24
195.78.66.0/23 maxlen: 24
195.114.0.0/23 maxlen: 24
195.149.224.0/21 maxlen: 24
195.242.116.0/23 maxlen: 24
213.108.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:44:02:15:89:80:bc:a0:b8:90:72:80:38:bb:3a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Jul 16 14:10:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=292a9b60888f0ba863669081358cab8bb4641f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:f4:7a:e7:09:12:79:32:61:e4:41:2f:08:
9d:c4:b1:f7:ec:84:4b:08:eb:41:ee:d2:88:d3:87:
17:3e:61:ec:e3:d9:c8:12:4e:32:98:f0:d6:a5:ea:
b0:90:49:ab:4e:7f:ee:05:31:7e:f2:ea:33:eb:a1:
70:0e:83:18:a4:bc:7a:b7:e4:97:02:cf:c1:dc:8c:
af:c2:d8:3f:b9:27:82:0c:ce:0a:3a:e9:8d:0c:ba:
42:53:ff:dc:22:e1:84:33:90:3a:6b:2d:ba:0f:ba:
bf:c1:92:74:40:63:cc:00:00:0d:17:b9:26:c1:8c:
14:d6:26:9e:56:9d:23:3b:c6:e4:5d:de:67:c1:76:
af:8a:69:1f:85:6b:1c:7d:ea:bc:c9:dd:eb:06:1b:
3d:c3:d3:3c:65:0e:7c:54:5a:36:d9:ed:95:eb:43:
0f:e7:8c:73:c4:68:14:16:db:df:36:bf:bd:41:4d:
2a:e4:13:b7:fa:f2:7a:03:bc:45:fe:e8:c0:08:8d:
b1:34:06:6f:d1:b9:ca:58:90:d0:d0:42:54:03:2c:
28:32:12:68:4f:37:6f:1c:d3:1b:b4:fb:0f:9d:16:
28:19:83:5c:19:a2:57:ed:ab:91:eb:da:65:ab:ee:
87:a8:f3:a0:0b:bb:90:25:8b:16:ff:fc:15:ed:ed:
8b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2A:9B:60:88:8F:0B:A8:63:66:90:81:35:8C:AB:8B:B4:64:1F:3F
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/KSqbYIiPC6hjZpCBNYyri7RkHz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.146.0/24
91.199.22.0/24
91.228.196.0/22
91.234.146.0/24
91.237.52.0/24
91.239.66.0/23
93.157.96.0/21
94.152.254.0/23
178.250.40.0/21
185.5.96.0/22
185.25.148.0/22
185.84.136.0/23
185.123.160.0/22
185.140.120.0/22
185.180.204.0/22
185.193.112.0/22
185.201.112.0/22
185.204.216.0/22
185.208.164.0/24
185.243.52.0/22
193.17.184.0/24
193.218.152.0/22
194.169.227.0/24
195.2.254.0/23
195.62.12.0/23
195.78.66.0/23
195.114.0.0/23
195.149.224.0/21
195.242.116.0/23
213.108.56.0/21
Signature Algorithm: sha256WithRSAEncryption
20:5a:81:89:19:ed:9d:51:cb:aa:c0:c0:cf:60:a3:cc:b4:66:
6e:98:5f:d4:a8:e6:23:d1:e4:45:ab:db:61:24:9a:13:85:e7:
f4:54:5e:94:94:7f:78:75:f6:68:5c:d3:a1:44:e0:98:93:b1:
6e:2e:69:bf:25:5f:d4:69:cc:71:77:e2:b1:82:4a:09:a8:ab:
64:73:cb:a8:18:20:a5:77:aa:c8:b8:47:07:a1:ab:fc:bc:6d:
e5:9a:a3:0b:19:1d:5a:8d:04:08:2d:9e:94:08:95:dd:5e:d3:
f4:27:f4:76:81:fe:7b:99:af:14:57:56:73:39:93:76:f2:22:
89:8e:60:1c:19:dd:08:1e:84:be:b8:90:3c:f4:3d:ca:8d:f6:
ec:f9:5e:51:c1:9d:6f:d3:95:a5:6c:ff:3d:94:09:9b:c3:ff:
bc:c3:4e:1a:83:e3:4a:67:bf:e0:5f:e0:77:00:7d:06:b6:ad:
79:42:f7:db:98:33:f2:c3:2a:62:7b:f8:35:87:50:ed:84:8d:
65:c7:a9:aa:f6:b0:fa:c0:67:53:67:b3:2d:8f:9e:79:39:f2:
36:21:91:eb:56:c7:5d:77:a0:3a:c4:c2:de:59:e4:4a:f2:07:
2c:cd:2e:b5:c3:5b:d4:87:15:96:54:ec:f3:41:60:33:8a:ca:
bc:d0:47:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:43:07 2026 by rpki-client