Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/XK7iQaU0ibGjEmBUzMozmrSfhbc.roa
File: XK7iQaU0ibGjEmBUzMozmrSfhbc.roa (raw, json)
Hash identifier: U9qW+JklQc+W/oxzZ+WR/keQlP+7lei7+YnjX9sV+4Y=
Subject key identifier: 5C:AE:E2:41:A5:34:89:B1:A3:12:60:54:CC:CA:33:9A:B4:9F:85:B7
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F23694FF0B5808588408960D9A8134DCD
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/XK7iQaU0ibGjEmBUzMozmrSfhbc.roa
Signing time: Thu 02 Jul 2026 15:18:51 +0000
ROA not before: Thu 02 Jul 2026 15:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209767
IP address blocks: 31.132.192.0/22 maxlen: 22
31.132.196.0/22 maxlen: 22
46.174.204.0/22 maxlen: 22
91.224.213.0/24 maxlen: 24
91.226.52.0/23 maxlen: 23
91.226.54.0/23 maxlen: 23
91.229.30.0/24 maxlen: 24
91.239.179.0/24 maxlen: 24
91.239.224.0/24 maxlen: 24
91.245.92.0/22 maxlen: 24
91.246.204.0/22 maxlen: 22
91.246.216.0/24 maxlen: 24
109.207.133.0/24 maxlen: 24
109.207.142.0/24 maxlen: 24
109.207.143.0/24 maxlen: 24
176.116.229.0/24 maxlen: 24
176.116.237.0/24 maxlen: 24
178.213.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:4f:f0:b5:80:85:88:40:89:60:d9:a8:13:4d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5caee241a53489b1a3126054ccca339ab49f85b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:4d:24:c2:30:c3:68:2d:ee:bb:03:e3:8f:
a4:8a:1c:6f:29:25:3a:07:c3:7d:e8:4f:b1:69:0d:
a6:97:49:8f:f0:02:53:39:cd:6c:f7:1c:0c:b5:7e:
13:ff:6c:19:dc:41:b4:9d:e2:22:47:1b:d9:55:53:
8c:55:09:c3:1f:2b:7a:50:20:c1:8b:79:b4:3c:55:
da:8b:4c:99:b4:a2:ef:47:bd:ff:59:5e:eb:a3:ad:
43:3b:42:dc:b4:45:c6:bd:d5:98:02:d3:1e:99:6d:
99:30:19:1a:15:9b:a2:48:16:5d:82:ce:61:26:07:
99:30:0c:64:a7:f8:9e:c8:17:ab:3e:a1:b9:21:3e:
fb:4d:0e:6c:97:ba:f2:f7:e3:6f:61:a6:e6:03:10:
43:44:41:d2:c8:9e:74:72:09:46:34:85:12:41:67:
0e:22:0d:0c:05:5c:f8:58:da:45:3b:3f:03:bb:9d:
bb:50:30:c3:e4:bc:d0:8d:a6:f0:30:5a:08:83:d3:
6a:87:96:17:55:4e:61:76:43:30:a7:be:9e:0f:d0:
a3:d9:93:74:cb:fe:fb:29:aa:a3:86:66:f8:47:33:
dd:62:77:03:f4:c4:e4:bb:32:ad:88:3a:36:67:28:
99:13:27:87:07:57:dd:7d:00:48:7b:a1:2d:9c:f1:
46:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AE:E2:41:A5:34:89:B1:A3:12:60:54:CC:CA:33:9A:B4:9F:85:B7
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/XK7iQaU0ibGjEmBUzMozmrSfhbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.192.0/21
46.174.204.0/22
91.224.213.0/24
91.226.52.0/22
91.229.30.0/24
91.239.179.0/24
91.239.224.0/24
91.245.92.0/22
91.246.204.0/22
91.246.216.0/24
109.207.133.0/24
109.207.142.0/23
176.116.229.0/24
176.116.237.0/24
178.213.176.0/22
Signature Algorithm: sha256WithRSAEncryption
03:b9:5a:31:c4:7d:20:7c:33:b1:0f:87:cd:4d:f0:5d:d1:ef:
6f:81:9b:88:64:ad:87:55:4b:4b:57:b6:78:44:55:81:84:4a:
d4:4e:eb:e0:7e:d7:c5:6c:a2:a6:40:cd:21:68:57:89:02:c1:
3a:bb:ef:a7:3d:22:44:bc:88:e5:13:e4:b1:81:5f:04:07:20:
dc:8f:01:0a:3a:80:a7:d8:17:a8:a9:87:06:07:eb:4e:8f:90:
c3:4f:37:fc:2c:a7:e9:27:3f:6d:4a:71:39:dd:3a:f8:9b:bc:
63:16:21:96:fe:b1:49:69:53:1f:94:01:ff:10:69:47:e9:b9:
b7:00:b0:f6:fe:73:f1:fb:11:cc:95:cb:19:05:ef:af:d0:b1:
bb:ef:79:69:08:90:44:4a:87:2c:6a:dd:db:25:75:c3:5d:be:
33:72:03:d1:ee:b9:72:77:40:16:2e:8a:72:ac:a6:57:c6:fb:
7a:0c:b0:22:b5:24:f4:d7:7a:f3:d3:bd:66:5a:dd:aa:43:f3:
23:07:d0:6d:d5:23:3c:12:2d:a8:06:c3:30:81:01:65:ed:99:
fc:d7:3a:27:e1:07:1d:0b:bc:dc:6d:f6:74:42:0b:a2:14:9f:
fa:f3:34:19:77:70:8a:84:97:d1:45:3c:d6:ef:3f:88:66:a7:
1c:05:8b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:45 2026 by rpki-client