Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/mK6bLvQl-7u-M_nYRpM4NDJVzQo.roa
File: mK6bLvQl-7u-M_nYRpM4NDJVzQo.roa (raw, json)
Hash identifier: cZU7xlc5yA0pT242ghiFqY0qb9VHzkge0cm6LlBwZs8=
Subject key identifier: 98:AE:9B:2E:F4:25:FB:BB:BE:33:F9:D8:46:93:38:34:32:55:CD:0A
Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Certificate serial: 01A144672CABE15220A66643D29DB6ED784D
Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/mK6bLvQl-7u-M_nYRpM4NDJVzQo.roa
Signing time: Fri 16 Oct 2026 11:09:34 +0000
ROA not before: Fri 16 Oct 2026 11:09:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209181
IP address blocks: 2.58.192.0/22 maxlen: 22
2.58.192.0/24 maxlen: 24
2.58.193.0/24 maxlen: 24
2.58.194.0/24 maxlen: 24
2.58.195.0/24 maxlen: 24
79.143.16.0/24 maxlen: 24
79.143.17.0/24 maxlen: 24
79.143.18.0/24 maxlen: 24
89.46.123.0/24 maxlen: 24
185.252.0.0/24 maxlen: 24
185.252.1.0/24 maxlen: 24
185.252.2.0/24 maxlen: 24
185.252.3.0/24 maxlen: 24
2a09:e9c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:67:2c:ab:e1:52:20:a6:66:43:d2:9d:b6:ed:78:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Validity
Not Before: Oct 16 11:09:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98ae9b2ef425fbbbbe33f9d8469338343255cd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1b:fe:c1:a9:b8:d6:1e:f1:be:5f:a4:d5:1e:
7e:9c:2e:05:3a:15:fd:78:34:e6:2d:df:41:f3:41:
43:76:6b:70:6c:6b:4e:1c:7b:12:95:f5:03:ef:70:
e8:8b:fe:a4:a1:a0:bc:3b:62:dd:b0:08:e8:77:b1:
ff:45:79:11:85:2f:fc:f3:f0:0e:36:22:8d:9f:bf:
2f:4a:d3:d0:8a:cc:6f:07:21:0d:34:64:d5:8c:d3:
5b:e2:e4:c0:bc:8c:e5:c5:88:3d:1b:96:84:1b:14:
5c:bf:4f:d8:45:b0:2e:af:1d:69:25:45:75:79:9b:
0a:c4:19:3d:2c:6b:6a:ca:01:95:2d:18:59:28:0d:
47:fc:6f:cf:b8:7c:64:1a:10:eb:2c:f9:f2:c8:83:
74:22:f4:52:97:cc:0b:23:39:09:22:4a:f3:80:90:
b8:e4:e5:58:93:09:40:34:05:d1:20:35:f8:d8:6c:
21:e3:e3:6c:87:9e:52:fa:94:48:8b:f8:e1:ff:d4:
82:5e:90:eb:fd:f6:7c:d6:ae:8f:07:56:c4:78:59:
ed:0b:18:81:b4:1a:fa:f9:8a:b3:f5:f3:09:1e:af:
f4:76:d9:e3:69:3b:d1:cd:ad:b2:b3:87:cb:23:23:
2f:79:f8:11:11:65:09:a0:32:3d:73:15:6c:43:77:
a1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AE:9B:2E:F4:25:FB:BB:BE:33:F9:D8:46:93:38:34:32:55:CD:0A
X509v3 Authority Key Identifier:
keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/mK6bLvQl-7u-M_nYRpM4NDJVzQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.192.0/22
79.143.16.0-79.143.18.255
89.46.123.0/24
185.252.0.0/22
IPv6:
2a09:e9c0::/29
Signature Algorithm: sha256WithRSAEncryption
a4:cb:ee:52:15:52:fb:54:29:66:fb:c0:ae:90:8b:f9:1f:ad:
f9:7c:1c:57:3c:1f:da:8b:4e:02:96:86:5d:a7:6b:d9:76:32:
ee:b0:ae:19:90:d7:e3:6f:48:1b:48:03:c5:c6:e0:a6:58:a8:
d1:b6:ff:66:7f:f7:dd:60:39:74:7a:e3:36:77:88:0a:fa:53:
39:71:8c:ea:de:03:ff:cf:47:07:c2:ad:9e:b2:18:d8:8c:7e:
0d:2c:fc:33:76:9b:09:ab:a4:de:14:7c:4d:0d:05:e6:ad:77:
3f:07:fb:7d:55:e1:87:c7:46:35:cc:4b:a4:ce:82:78:9d:af:
f8:43:38:53:09:c0:6a:e5:7f:63:aa:84:e0:54:f6:cd:56:f7:
3e:b1:e2:61:02:ab:a2:b8:4b:fc:1d:10:f8:9a:e6:90:d5:0c:
a0:a9:97:a3:6d:d4:8c:23:db:b1:52:76:35:91:bb:a8:d2:17:
9b:13:df:4d:10:40:20:6c:f0:93:8a:93:11:ff:df:93:54:a6:
74:0b:88:c5:49:8c:6b:ab:f7:0b:8f:b2:2f:d1:2a:8b:f8:8b:
43:5d:3d:39:f4:06:fb:b3:56:ea:be:12:8e:fd:28:40:61:ec:
34:96:5b:2d:40:5e:21:d1:db:f0:7a:09:58:98:54:91:97:35:
0e:9a:36:d2
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAaFEZyyr4VIgpmZD0p227XhNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YThmZjRjOWM1NjY2N2Q5OTAyNWQ3ZjAxNTkxY2JmNzdh
ZDJmMDkwHhcNMjYxMDE2MTEwOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGFlOWIyZWY0MjVmYmJiYmUzM2Y5ZDg0NjkzMzgzNDMyNTVjZDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBv+wam41h7xvl+k1R5+nC4FOhX9
eDTmLd9B80FDdmtwbGtOHHsSlfUD73Doi/6koaC8O2LdsAjod7H/RXkRhS/88/AO
NiKNn78vStPQisxvByENNGTVjNNb4uTAvIzlxYg9G5aEGxRcv0/YRbAurx1pJUV1
eZsKxBk9LGtqygGVLRhZKA1H/G/PuHxkGhDrLPnyyIN0IvRSl8wLIzkJIkrzgJC4
5OVYkwlANAXRIDX42Gwh4+Nsh55S+pRIi/jh/9SCXpDr/fZ81q6PB1bEeFntCxiB
tBr6+Yqz9fMJHq/0dtnjaTvRza2ys4fLIyMvefgREWUJoDI9cxVsQ3ehVQIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFJiumy70Jfu7vjP52EaTODQyVc0KMB8GA1UdIwQY
MBaAFIao/0ycVmZ9mQJdfwFZHL93rS8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQt
MDZhNDk5NjhjMmQzLzEvbUs2Ykx2UWwtN3UtTV9uWVJwTTROREpWelFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQtMDZhNDk5NjhjMmQz
LzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQCAjrAMAwD
BARPjxADBABPjxIDBABZLnsDBAK5/AAwDQQCAAIwBwMFAyoJ6cAwDQYJKoZIhvcN
AQELBQADggEBAKTL7lIVUvtUKWb7wK6Qi/kfrfl8HFc8H9qLTgKWhl2na9l2Mu6w
rhmQ1+NvSBtIA8XG4KZYqNG2/2Z/991gOXR64zZ3iAr6UzlxjOreA//PRwfCrZ6y
GNiMfg0s/DN2mwmrpN4UfE0NBeatdz8H+31V4YfHRjXMS6TOgnidr/hDOFMJwGrl
f2OqhOBU9s1W9z6x4mECq6K4S/wdEPia5pDVDKCpl6Nt1Iwj27FSdjWRu6jSF5sT
300QQCBs8JOKkxH/35NUpnQLiMVJjGur9wuPsi/RKov4i0NdPTn0BvuzVuq+Eo79
KEBh7DSWWy1AXiHR2/B6CViYVJGXNQ6aNtI=
-----END CERTIFICATE-----
Generated at Sat Oct 24 05:28:31 2026 by rpki-client