Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/KPQ4IiWPA3G7hyFb_txepsgvrVY.roa
File: KPQ4IiWPA3G7hyFb_txepsgvrVY.roa (raw, json)
Hash identifier: x8j2jcYJvy2sXpzoszLNtwsruCB0RX392AOmSlBC9tI=
Subject key identifier: 28:F4:38:22:25:8F:03:71:BB:87:21:5B:FE:DC:5E:A6:C8:2F:AD:56
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0D1844FF263B65268D3CE3C384071625B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/KPQ4IiWPA3G7hyFb_txepsgvrVY.roa
Signing time: Thu 24 Sep 2026 03:45:04 +0000
ROA not before: Thu 24 Sep 2026 03:45:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 46.34.22.0/24 maxlen: 24
82.110.231.0/24 maxlen: 24
87.83.0.0/24 maxlen: 24
87.83.173.0/24 maxlen: 24
87.84.153.0/24 maxlen: 24
87.85.141.0/24 maxlen: 24
212.134.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:84:4f:f2:63:b6:52:68:d3:ce:3c:38:40:71:62:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 24 03:45:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28f43822258f0371bb87215bfedc5ea6c82fad56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ab:9d:36:17:95:b7:1c:5b:02:84:65:63:33:
7d:03:1a:22:50:90:2d:03:6a:84:48:f9:d4:ca:4d:
6b:bc:51:66:43:5b:63:d7:9d:82:0f:e4:04:29:17:
2a:7e:78:7d:ef:3e:59:8b:80:68:5f:21:a1:18:b7:
68:6f:4b:ea:11:d7:25:e2:3e:5f:7b:36:f5:e1:d3:
a7:45:e9:f5:07:14:2e:a8:bd:b9:6f:e8:d5:78:fd:
e9:3b:20:38:5e:08:7a:bd:1f:ee:dd:4d:48:d2:21:
a4:2d:c6:ac:d0:d0:04:7d:fd:b1:22:bf:f6:70:bf:
58:45:43:b6:68:d9:77:7d:05:03:ca:f8:99:f5:be:
c7:f2:9b:72:9f:0d:a3:15:4a:e8:a8:0f:3f:67:fe:
0c:03:98:20:ff:08:00:6d:ff:7d:23:4f:eb:bd:e3:
aa:b7:51:12:fd:07:b2:e0:d0:7a:cc:3c:0e:73:96:
18:d4:a0:2d:d2:c9:4a:ad:ae:99:97:a4:35:06:11:
45:bc:88:45:1e:8a:de:61:4e:a1:bc:36:b3:c9:50:
5d:35:5f:03:c1:7b:87:98:84:06:d6:15:bb:c5:9e:
ca:59:5b:b1:6c:1c:44:a3:10:b2:ce:2d:75:29:64:
b7:9e:3b:38:e4:88:74:02:f5:2d:01:6d:b7:31:fd:
60:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F4:38:22:25:8F:03:71:BB:87:21:5B:FE:DC:5E:A6:C8:2F:AD:56
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/KPQ4IiWPA3G7hyFb_txepsgvrVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.22.0/24
82.110.231.0/24
87.83.0.0/24
87.83.173.0/24
87.84.153.0/24
87.85.141.0/24
212.134.131.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:30:42:46:88:4b:3e:ab:cb:da:ab:e5:5d:b9:84:27:11:ab:
44:b0:12:60:83:54:bd:18:c6:c6:b5:80:5d:91:7a:e0:fe:05:
47:61:04:27:4b:c5:ea:58:ff:ad:77:35:10:9f:40:3f:ee:93:
1c:ef:80:05:85:e0:cc:d0:81:da:db:2f:0b:1f:0b:66:06:69:
88:72:9f:6a:f1:98:d2:f8:84:0c:05:fa:48:84:f3:29:34:8d:
4d:63:d7:bc:6e:58:70:36:22:01:d9:0a:db:18:3d:26:22:7f:
f4:1d:34:36:0b:61:d8:c3:2d:3b:9e:60:23:ab:a7:78:1b:ae:
31:53:d6:c6:5d:9f:aa:22:0a:5e:88:68:fa:f1:f9:7a:4d:e8:
57:de:ed:fb:4a:5d:0e:c5:f0:ea:67:c7:25:a7:73:38:f2:81:
6e:64:f9:aa:e9:a6:8e:ee:73:df:ff:9a:23:9c:eb:f0:ea:e4:
e0:d3:de:95:ec:24:7a:54:2a:20:a0:82:dd:86:57:09:6d:32:
14:be:8f:eb:a6:67:07:84:35:44:01:f9:ae:6b:28:76:60:76:
45:58:c7:c1:8f:7f:5d:bb:2f:ac:cf:d0:a2:c3:67:31:81:ec:
d2:15:f3:b4:f5:ae:c0:a7:9f:61:28:ac:cb:b8:bb:01:6b:79:
df:b4:76:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:04:53 2026 by rpki-client