Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/JkQ4aVmEo0WkHMZ_oANgNHXJ7rs.roa
File: JkQ4aVmEo0WkHMZ_oANgNHXJ7rs.roa (raw, json)
Hash identifier: WvzwlWcKB8DAPsEPJPfwxdTtEc0sC4oWKRlFphGPBFI=
Subject key identifier: 26:44:38:69:59:84:A3:45:A4:1C:C6:7F:A0:03:60:34:75:C9:EE:BB
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F2369481671EC3F87696CBA390F7A9211
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/JkQ4aVmEo0WkHMZ_oANgNHXJ7rs.roa
Signing time: Thu 02 Jul 2026 15:18:50 +0000
ROA not before: Thu 02 Jul 2026 15:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 31.135.4.0/23 maxlen: 23
31.135.4.0/24 maxlen: 24
31.135.5.0/24 maxlen: 24
46.173.240.0/24 maxlen: 24
46.173.241.0/24 maxlen: 24
46.173.242.0/24 maxlen: 24
46.173.243.0/24 maxlen: 24
46.173.244.0/24 maxlen: 24
46.173.245.0/24 maxlen: 24
46.173.252.0/24 maxlen: 24
46.173.253.0/24 maxlen: 24
77.36.112.0/24 maxlen: 24
77.36.113.0/24 maxlen: 24
77.36.114.0/24 maxlen: 24
77.36.115.0/24 maxlen: 24
91.193.28.0/24 maxlen: 24
91.193.29.0/24 maxlen: 24
91.200.133.0/24 maxlen: 24
91.232.226.0/24 maxlen: 24
91.232.227.0/24 maxlen: 24
91.233.0.0/24 maxlen: 24
91.233.1.0/24 maxlen: 24
91.238.39.0/24 maxlen: 24
91.246.176.0/24 maxlen: 24
91.246.177.0/24 maxlen: 24
91.246.178.0/24 maxlen: 24
91.246.179.0/24 maxlen: 24
109.207.136.0/24 maxlen: 24
109.207.137.0/24 maxlen: 24
109.207.138.0/24 maxlen: 24
109.207.139.0/24 maxlen: 24
176.96.95.0/24 maxlen: 24
176.110.216.0/24 maxlen: 24
176.110.217.0/24 maxlen: 24
176.110.218.0/24 maxlen: 24
176.110.219.0/24 maxlen: 24
176.110.220.0/24 maxlen: 24
176.110.221.0/24 maxlen: 24
176.110.222.0/24 maxlen: 24
176.110.223.0/24 maxlen: 24
176.112.80.0/22 maxlen: 24
193.36.220.0/24 maxlen: 24
193.36.221.0/24 maxlen: 24
193.36.222.0/24 maxlen: 24
193.36.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:48:16:71:ec:3f:87:69:6c:ba:39:0f:7a:92:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=264438695984a345a41cc67fa003603475c9eebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:65:0b:38:b2:7b:31:a7:54:86:5f:eb:95:ad:
9f:61:fa:12:91:ae:dc:25:9c:4e:e4:21:b8:94:f2:
43:43:41:3c:d8:15:08:82:2a:85:c4:c9:6a:01:ad:
b2:6c:00:6b:ce:87:c0:3a:4f:ae:f2:61:32:dd:1b:
3c:4a:cd:da:a8:42:13:f9:de:16:8f:f4:e4:64:17:
b9:9e:b7:c8:c2:e1:a5:14:57:2a:4c:7d:b9:ca:f3:
c8:cf:de:fe:86:34:cc:d1:27:77:82:b7:ef:ff:bb:
6c:98:78:71:6d:b3:56:41:78:35:45:26:fb:5a:7b:
cc:33:a8:ca:9a:7c:b9:51:b1:3e:d2:17:81:37:3c:
a5:f2:88:88:f7:8c:0a:3b:df:2e:0b:d0:15:51:84:
7c:20:06:01:e3:dc:18:a6:a2:7c:23:96:af:8b:cd:
69:44:60:c0:37:9d:c3:8f:42:c4:d3:34:54:71:c0:
e1:e4:eb:60:fa:ce:e0:f7:e9:60:7f:b5:ca:55:5c:
a1:b9:38:65:56:86:04:54:e8:e2:93:b9:59:ee:5e:
31:b0:23:c8:62:c9:af:5f:00:d8:c2:ab:f7:cc:e6:
ca:32:97:54:b6:c9:9d:6a:86:68:a1:af:a3:ed:40:
f5:3f:ef:e9:04:c3:b0:13:c1:f2:57:56:39:3d:cc:
e7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:44:38:69:59:84:A3:45:A4:1C:C6:7F:A0:03:60:34:75:C9:EE:BB
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/JkQ4aVmEo0WkHMZ_oANgNHXJ7rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.4.0/23
46.173.240.0-46.173.245.255
46.173.252.0/23
77.36.112.0/22
91.193.28.0/23
91.200.133.0/24
91.232.226.0/23
91.233.0.0/23
91.238.39.0/24
91.246.176.0/22
109.207.136.0/22
176.96.95.0/24
176.110.216.0/21
176.112.80.0/22
193.36.220.0/22
Signature Algorithm: sha256WithRSAEncryption
56:ff:6a:8e:bf:d8:85:d5:ba:55:90:98:c5:6f:c2:dd:a9:a3:
f5:13:58:bc:26:20:c2:42:5e:06:0a:ee:4e:41:97:be:03:25:
29:2e:85:bd:9a:ae:55:cd:4b:28:1c:f4:33:e1:cf:da:ce:8e:
24:e1:ad:b9:5a:fa:9e:35:c0:61:fb:14:85:83:21:db:d5:17:
cd:40:fe:5f:99:19:3a:57:39:36:ab:4d:d1:27:7b:c0:d1:02:
88:6e:17:34:30:cf:db:c4:0c:be:01:73:90:8f:fa:bd:9a:df:
18:99:9a:87:19:99:13:4a:c6:bd:6a:09:6c:8c:04:c3:48:1f:
c4:18:0a:a0:5e:c5:89:50:82:f8:ed:7a:22:20:f3:57:01:ff:
60:74:f9:ec:5e:f5:71:e3:22:a7:e8:15:4c:10:f2:7b:0c:a9:
bb:c5:c1:79:ea:be:f5:b7:70:ed:ed:e1:4a:af:ae:e4:b7:bf:
c3:4c:7a:aa:a6:98:d4:44:13:81:23:97:3b:2f:fe:87:53:2c:
6c:0c:c9:52:64:4a:ca:15:f3:0f:51:f0:eb:73:5e:49:27:4c:
41:a5:fe:a3:2c:d0:9a:55:f3:2a:e5:bd:13:73:77:07:4d:e1:
f4:da:a7:98:fd:d0:6a:ef:71:73:4d:8c:25:00:2f:fd:fe:84:
e4:7e:5a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:45 2026 by rpki-client