Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/KWuG2ZTCHPsMCDpVyumu3paq_3Q.roa
File: KWuG2ZTCHPsMCDpVyumu3paq_3Q.roa (raw, json)
Hash identifier: Jcw9eWUwDk9R7T5bYUQAFYJ3yFnH4VQvRTMQjlguOec=
Subject key identifier: 29:6B:86:D9:94:C2:1C:FB:0C:08:3A:55:CA:E9:AE:DE:96:AA:FF:74
Certificate issuer: /CN=9cfccef8d2c16c20ae5b8da4314277fecaadd3d7
Certificate serial: 019F23687CC113F296928E75CDC08D6EA286
Authority key identifier: 9C:FC:CE:F8:D2:C1:6C:20:AE:5B:8D:A4:31:42:77:FE:CA:AD:D3:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPzO-NLBbCCuW42kMUJ3_sqt09c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/KWuG2ZTCHPsMCDpVyumu3paq_3Q.roa
Signing time: Thu 02 Jul 2026 15:17:58 +0000
ROA not before: Thu 02 Jul 2026 15:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49601
IP address blocks: 91.229.56.0/24 maxlen: 32
91.229.182.0/24 maxlen: 32
91.229.210.0/24 maxlen: 32
185.189.124.0/22 maxlen: 32
185.189.124.0/24 maxlen: 32
185.189.125.0/24 maxlen: 32
185.189.126.0/24 maxlen: 32
185.189.127.0/24 maxlen: 32
185.226.60.0/22 maxlen: 32
185.226.60.0/24 maxlen: 32
185.226.61.0/24 maxlen: 32
185.226.62.0/24 maxlen: 32
185.226.63.0/24 maxlen: 32
185.252.96.0/22 maxlen: 32
185.252.96.0/24 maxlen: 32
185.252.97.0/24 maxlen: 32
185.252.98.0/24 maxlen: 32
185.252.99.0/24 maxlen: 32
193.162.107.0/24 maxlen: 32
2a0b:e680::/29 maxlen: 128
2a0c:3e00::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/nPzO-NLBbCCuW42kMUJ3_sqt09c.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/nPzO-NLBbCCuW42kMUJ3_sqt09c.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPzO-NLBbCCuW42kMUJ3_sqt09c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7c:c1:13:f2:96:92:8e:75:cd:c0:8d:6e:a2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cfccef8d2c16c20ae5b8da4314277fecaadd3d7
Validity
Not Before: Jul 2 15:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=296b86d994c21cfb0c083a55cae9aede96aaff74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:d2:53:14:65:fb:a9:bb:6f:b5:55:5d:30:
36:4e:5e:08:ec:ce:50:a1:25:a5:6b:20:da:80:54:
a6:36:a9:e6:21:aa:9b:f8:63:e7:ab:3b:2d:79:69:
2b:31:58:09:67:bd:72:70:c3:24:5e:38:d0:82:4d:
81:38:cd:3b:12:c2:5c:74:0f:ae:4f:8f:88:b8:0a:
6b:bb:b2:fd:26:07:4d:b7:90:9a:6b:6b:69:f4:78:
37:c7:c6:79:00:ea:6d:fe:9c:87:b6:99:d6:46:24:
9e:31:3a:4a:52:7b:8f:92:e6:9a:c2:3f:e8:8c:93:
b8:d2:6c:2e:6b:10:d2:7f:c9:12:14:ab:14:f1:6c:
cc:df:3d:ed:9e:e8:57:f0:59:a9:7f:3c:2f:c4:02:
20:55:d6:23:00:17:b3:30:36:27:8a:b1:94:22:f6:
21:2f:ca:37:67:cc:e1:fe:02:a7:70:65:b8:a0:9e:
12:36:41:94:aa:a5:12:aa:23:84:b9:96:4a:72:bc:
34:5d:f9:e9:37:e4:4b:86:95:da:41:10:6b:bc:4b:
98:2a:24:4f:55:48:6b:81:22:de:c4:63:e2:b9:db:
7d:ce:0a:1b:ed:74:21:22:82:ab:aa:68:3f:cc:1d:
ba:c4:2b:55:24:03:a9:ae:04:23:4a:d6:71:60:16:
7e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6B:86:D9:94:C2:1C:FB:0C:08:3A:55:CA:E9:AE:DE:96:AA:FF:74
X509v3 Authority Key Identifier:
keyid:9C:FC:CE:F8:D2:C1:6C:20:AE:5B:8D:A4:31:42:77:FE:CA:AD:D3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPzO-NLBbCCuW42kMUJ3_sqt09c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/KWuG2ZTCHPsMCDpVyumu3paq_3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/nPzO-NLBbCCuW42kMUJ3_sqt09c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.56.0/24
91.229.182.0/24
91.229.210.0/24
185.189.124.0/22
185.226.60.0/22
185.252.96.0/22
193.162.107.0/24
IPv6:
2a0b:e680::/29
2a0c:3e00::/29
Signature Algorithm: sha256WithRSAEncryption
11:7b:0f:36:31:40:6e:e3:c0:ed:58:95:0e:03:bb:de:f3:38:
5b:cc:f6:c9:52:5a:17:a1:65:6e:c1:a3:fb:08:32:c0:36:b0:
6f:a0:03:98:c4:8b:09:8c:de:06:6f:02:fd:e8:16:0e:47:14:
a3:59:83:59:5d:d4:3a:b4:5c:8e:b1:73:8e:0f:dc:0d:b2:76:
5b:95:b8:8e:84:19:00:72:ba:f7:03:89:c5:cb:8a:c3:29:90:
9e:6d:51:bc:38:d0:55:b0:ec:33:23:dc:fc:d1:01:fb:cd:1a:
1a:6e:c9:af:7e:ee:49:ac:1c:1e:d8:05:d8:89:da:16:54:13:
7f:ba:69:81:bd:82:41:49:9a:6f:3d:db:e2:a5:40:a5:55:6f:
cc:0a:bb:96:bb:d2:6b:f2:42:8b:d8:5e:75:aa:11:5a:0e:f7:
dc:04:5d:28:60:a0:b5:5c:28:32:2c:50:d2:e9:dc:12:6e:dc:
f2:2c:fa:57:11:98:a8:7e:dc:c3:4b:84:68:53:d8:e0:db:60:
e5:f9:6c:26:84:f6:97:3a:1b:14:39:ee:e9:16:ca:be:1d:87:
c2:43:e9:08:fd:e9:5b:f4:83:f8:55:a1:9a:62:a7:5a:cd:f2:
7a:56:dc:bb:57:7e:d4:ef:93:76:b5:c1:0b:80:a8:3d:2c:51:
3e:be:d8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:55:27 2026 by rpki-client