Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/KcSvPfe5DoRqYWJFmoxJIXRijEo.roa
File: KcSvPfe5DoRqYWJFmoxJIXRijEo.roa (raw, json)
Hash identifier: H0NuABrOBsjeS38tV+DFzL65YidFgRChdX5I6oMi1ys=
Subject key identifier: 29:C4:AF:3D:F7:B9:0E:84:6A:61:62:45:9A:8C:49:21:74:62:8C:4A
Certificate issuer: /CN=593b53fb9306346f272494928d77839cbaf9ddc7
Certificate serial: 01A1AA5150758A49DED0F0936C0443627E7F
Authority key identifier: 59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/KcSvPfe5DoRqYWJFmoxJIXRijEo.roa
Signing time: Thu 05 Nov 2026 06:06:58 +0000
ROA not before: Thu 05 Nov 2026 06:06:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12417
IP address blocks: 91.234.46.0/24 maxlen: 24
178.218.160.0/20 maxlen: 24
178.218.163.0/24 maxlen: 24
178.218.170.0/24 maxlen: 24
178.218.171.0/24 maxlen: 24
178.218.172.0/24 maxlen: 24
178.218.173.0/24 maxlen: 24
178.218.174.0/24 maxlen: 24
185.220.24.0/22 maxlen: 24
185.220.24.0/24 maxlen: 24
185.220.25.0/24 maxlen: 24
185.220.27.0/24 maxlen: 24
2a0b:ee41::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:51:50:75:8a:49:de:d0:f0:93:6c:04:43:62:7e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=593b53fb9306346f272494928d77839cbaf9ddc7
Validity
Not Before: Nov 5 06:06:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29c4af3df7b90e846a6162459a8c492174628c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:34:94:05:b0:4e:3a:ce:f3:59:37:57:63:2c:
64:cb:59:ac:45:1d:fd:41:34:77:cd:c6:fb:5c:59:
d4:2d:be:5a:7e:8b:fc:87:12:89:47:dd:be:01:cd:
c3:6f:76:f9:32:bc:1f:6e:cc:7f:49:f5:1a:2a:21:
45:2e:5b:83:07:e0:8a:bb:c7:9c:8b:5b:81:f9:87:
5c:7c:50:8e:72:e7:18:85:4e:9d:96:d9:26:c8:2c:
ca:2e:47:d4:c5:ea:c8:a6:93:98:a9:b2:44:15:72:
d9:80:64:f1:25:02:4e:5c:7b:55:1e:e6:88:4b:91:
7a:dc:66:00:12:d7:cf:40:8e:3f:01:88:b6:df:26:
89:03:f7:5a:95:59:0f:ee:aa:d5:2b:c1:3b:ed:db:
09:a1:40:90:55:c1:ec:07:26:73:48:49:be:fc:2a:
8d:2f:7c:e7:02:e5:a0:27:0d:55:33:8d:3f:f7:81:
ec:65:25:f4:a9:60:9b:2f:82:de:b3:8b:ec:46:eb:
a7:45:a8:c8:22:62:77:09:c4:87:07:a9:d4:47:1f:
d5:8e:5b:66:c0:96:1b:cf:2c:07:d4:61:d3:32:ef:
10:35:f4:59:16:5c:74:0a:6c:e8:46:09:a7:d9:83:
ff:44:ec:47:cd:fc:ec:f3:cf:71:c1:4c:a3:e0:f9:
fb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C4:AF:3D:F7:B9:0E:84:6A:61:62:45:9A:8C:49:21:74:62:8C:4A
X509v3 Authority Key Identifier:
keyid:59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/KcSvPfe5DoRqYWJFmoxJIXRijEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.46.0/24
178.218.160.0/20
185.220.24.0/22
IPv6:
2a0b:ee41::/32
Signature Algorithm: sha256WithRSAEncryption
2e:b2:f7:dc:a1:d8:06:a1:4c:56:aa:96:72:fa:bf:4c:a0:60:
60:15:9f:a9:c7:89:c4:59:18:10:52:57:29:17:38:96:e9:76:
23:f6:e6:53:9d:da:c0:7b:25:65:d7:ac:17:38:36:eb:f8:69:
ce:5f:66:6a:41:c9:d3:d0:21:b2:68:ea:d3:33:82:c4:ed:48:
43:b0:15:2b:20:f4:83:e6:d7:82:41:2b:81:28:a7:74:dd:9e:
92:98:f6:e3:9b:8d:68:8e:39:cc:03:94:1d:f9:ec:10:d0:8f:
f6:1f:b3:5b:96:35:75:40:2d:2e:c5:4b:5b:36:b1:1f:a0:b0:
e6:7a:34:ab:57:1a:b4:70:0f:3d:be:a2:ce:b1:4c:65:73:fb:
cc:ba:74:2a:d6:63:47:5a:51:2b:9c:55:b6:46:b0:28:bb:90:
bc:43:5e:e1:c0:95:69:b4:c8:f2:ec:ac:6c:c0:75:ab:1b:ea:
31:20:54:17:7e:00:d4:17:24:46:89:f8:32:02:70:c7:61:3b:
af:72:22:1a:45:5d:a8:1e:b7:d1:5f:c2:1f:1e:ff:1d:13:0f:
25:5d:34:7d:2d:a9:0e:94:1b:66:4c:25:4a:18:d7:6a:22:36:
5c:37:84:6b:d6:a2:ce:9b:ef:a3:6f:f5:d7:aa:7c:50:07:bd:
91:55:2f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:55:40 2026 by rpki-client