Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/KQ9NUN7oGMqkGy48qShcFsLUMqQ.roa
File: KQ9NUN7oGMqkGy48qShcFsLUMqQ.roa (raw, json)
Hash identifier: LY59lJPsq/Ho5IEawKOzYx8oKjkX+wRs6NrD45/hcKU=
Subject key identifier: 29:0F:4D:50:DE:E8:18:CA:A4:1B:2E:3C:A9:28:5C:16:C2:D4:32:A4
Certificate issuer: /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Certificate serial: 019CB3F8B55F16B824D64988D6D6E86F5C58
Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/KQ9NUN7oGMqkGy48qShcFsLUMqQ.roa
Signing time: Tue 03 Mar 2026 13:52:26 +0000
ROA not before: Tue 03 Mar 2026 13:52:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56655
IP address blocks: 45.88.200.0/24 maxlen: 24
45.88.201.0/24 maxlen: 24
45.88.202.0/24 maxlen: 24
91.217.206.0/24 maxlen: 24
151.216.2.0/23 maxlen: 24
185.14.97.0/24 maxlen: 24
185.125.168.0/22 maxlen: 22
185.181.60.0/22 maxlen: 22
185.243.216.0/24 maxlen: 24
185.243.217.0/24 maxlen: 24
185.243.218.0/24 maxlen: 24
193.200.221.0/24 maxlen: 24
193.200.229.0/24 maxlen: 24
193.200.238.0/24 maxlen: 24
193.243.189.0/24 maxlen: 24
194.32.107.0/24 maxlen: 24
194.110.207.0/24 maxlen: 24
195.16.73.0/24 maxlen: 24
198.140.141.0/24 maxlen: 24
2a03:94e0::/32 maxlen: 32
2a03:94e1::/32 maxlen: 32
2a03:94e2::/32 maxlen: 32
2a03:94e3::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:f8:b5:5f:16:b8:24:d6:49:88:d6:d6:e8:6f:5c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Validity
Not Before: Mar 3 13:52:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=290f4d50dee818caa41b2e3ca9285c16c2d432a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:db:1d:bb:57:35:4f:5b:e0:9d:e8:7c:16:4c:
72:e1:c6:2d:ab:67:41:af:db:9b:b6:34:41:b0:98:
4d:63:e0:e4:9c:df:fc:9f:6b:03:a9:0f:3d:3f:c4:
c2:ef:82:ad:81:4b:5e:db:10:98:f2:c0:31:bd:87:
29:3f:82:23:89:5f:af:be:45:eb:9a:9c:27:4f:84:
7c:31:0f:0c:05:4e:c0:20:ef:da:c1:d6:4a:45:63:
e1:1f:7c:33:7c:2a:2c:f0:52:45:68:f8:44:70:6d:
cc:68:40:4d:7d:7a:c7:23:21:03:cd:4a:c1:6f:ba:
41:02:c2:eb:6f:92:d6:08:a7:47:ec:da:a7:df:37:
ef:4d:a7:54:8e:1c:44:09:22:4a:c3:fa:95:6a:6d:
a8:91:55:01:70:06:f6:6a:b4:f4:81:64:94:07:36:
ae:a3:72:a6:44:dc:99:28:ce:92:f2:f0:a5:c8:b5:
f6:6c:8c:23:60:f8:5f:eb:df:54:fe:80:b2:4b:7b:
4a:da:3d:f0:b3:5d:b5:50:fc:e0:74:2b:01:99:bd:
5e:50:fc:1b:3b:0b:f8:44:d6:f1:1d:c2:ff:fd:cb:
86:24:01:12:9f:64:30:e8:8e:ee:ce:07:13:1c:55:
46:51:f3:f0:02:a7:e5:d4:a5:ef:88:19:fc:a9:be:
98:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0F:4D:50:DE:E8:18:CA:A4:1B:2E:3C:A9:28:5C:16:C2:D4:32:A4
X509v3 Authority Key Identifier:
keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/KQ9NUN7oGMqkGy48qShcFsLUMqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.200.0-45.88.202.255
91.217.206.0/24
151.216.2.0/23
185.14.97.0/24
185.125.168.0/22
185.181.60.0/22
185.243.216.0-185.243.218.255
193.200.221.0/24
193.200.229.0/24
193.200.238.0/24
193.243.189.0/24
194.32.107.0/24
194.110.207.0/24
195.16.73.0/24
198.140.141.0/24
IPv6:
2a03:94e0::/30
Signature Algorithm: sha256WithRSAEncryption
1b:89:ba:cd:8b:b5:90:1c:da:3d:32:79:49:48:89:36:71:44:
31:e8:65:2f:6e:be:23:94:0c:63:32:42:09:a7:02:39:67:d6:
4b:a9:03:4e:80:9b:18:cb:ee:c6:20:87:fa:53:83:1b:77:97:
87:4a:da:f3:56:4c:a4:eb:03:6b:bf:01:6b:19:c7:3f:21:01:
d6:f4:d7:bf:ca:1d:35:58:3f:6b:2f:a2:a4:10:ae:ba:a9:06:
35:51:ba:25:3a:bf:af:d3:ef:19:7a:91:54:be:af:1b:eb:07:
b5:79:e4:46:0b:63:df:8f:04:09:96:41:51:5b:85:8e:1c:b4:
a2:de:04:76:fd:6f:c5:b6:95:ab:b6:17:1e:9c:7b:54:75:43:
74:a3:21:6c:ca:ed:fb:b2:ce:b7:9f:63:80:aa:9b:7a:50:cc:
92:f1:54:24:78:d6:bc:c2:98:3b:29:40:59:13:69:30:09:1e:
20:81:69:be:34:b7:db:5d:2e:af:c2:d0:44:26:08:4b:3e:a2:
ba:ee:95:7c:62:65:2f:c5:ef:1f:f4:19:7e:a4:ac:62:54:88:
bd:17:b4:cd:4e:ad:78:6e:c6:91:46:45:81:c1:b5:0a:3d:7d:
36:5e:7a:7e:3b:9e:81:22:97:07:6a:85:5f:67:46:95:02:48:
79:c7:6f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 09:55:02 2026 by rpki-client