Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/K1mq2GbmpX0KP1xWyfCvsWlPVuE.roa
File: K1mq2GbmpX0KP1xWyfCvsWlPVuE.roa (raw, json)
Hash identifier: tF8zzrUu7oZ1U07zxMpwv3itOgNZWrmyvl5O6XyuiLM=
Subject key identifier: 2B:59:AA:D8:66:E6:A5:7D:0A:3F:5C:56:C9:F0:AF:B1:69:4F:56:E1
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019CC41C7FEF9F4373D0FAEC03E1AA20E988
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/K1mq2GbmpX0KP1xWyfCvsWlPVuE.roa
Signing time: Fri 06 Mar 2026 17:05:28 +0000
ROA not before: Fri 06 Mar 2026 17:05:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201034
IP address blocks: 95.46.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c4:1c:7f:ef:9f:43:73:d0:fa:ec:03:e1:aa:20:e9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 6 17:05:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b59aad866e6a57d0a3f5c56c9f0afb1694f56e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:30:cc:03:6b:26:bf:d3:e3:9c:7a:71:8f:8b:
58:91:50:8d:47:16:a4:74:17:c7:28:d4:64:78:20:
ca:a3:9e:e3:cd:2b:24:a1:d1:0d:11:8d:30:8b:35:
b4:3e:6e:a0:4d:16:fe:af:86:df:ff:d6:70:04:d3:
8e:a0:16:29:73:f4:dd:6f:f7:31:7c:85:87:88:98:
8e:eb:cd:8f:2f:81:2c:54:0c:b9:c4:70:c1:e5:0f:
bc:ca:df:e1:dc:ec:3c:e7:5a:c9:65:23:93:73:de:
9a:0d:0c:69:f1:06:1d:b6:80:dd:9e:d6:d2:e1:a3:
2e:6e:14:a6:37:51:6c:46:2d:cf:88:58:c3:87:cd:
04:91:10:de:9b:3f:33:f6:ec:5e:bb:2d:0f:d0:06:
98:ed:cf:bc:43:81:11:c6:ea:a6:eb:de:80:0f:f5:
1f:c6:82:0b:a6:66:bb:1e:09:8c:b6:58:9b:4e:09:
6f:63:03:2f:44:58:d2:b6:ca:92:b6:d7:de:a7:0e:
0d:89:f9:97:6e:73:60:03:d3:1c:d2:80:63:5d:c1:
e9:00:3b:af:1a:bd:23:48:91:d4:b1:d4:66:64:6a:
07:d2:c2:b8:1d:d7:c7:ed:6a:f9:38:c2:03:e0:4f:
3f:d9:71:7d:8e:d8:6f:85:3a:d3:dc:7b:0e:4e:01:
9a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:59:AA:D8:66:E6:A5:7D:0A:3F:5C:56:C9:F0:AF:B1:69:4F:56:E1
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/K1mq2GbmpX0KP1xWyfCvsWlPVuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.157.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ef:5d:c2:ac:28:9d:92:35:cf:f8:42:c9:9e:45:68:4a:dd:
30:3d:88:95:6d:74:42:cf:b5:70:0c:03:93:9c:a7:00:32:80:
23:aa:a4:32:bf:88:f5:69:ef:98:af:c0:75:ab:8d:a2:22:90:
eb:d6:6b:5d:5e:c9:3c:5b:a1:4c:ac:c1:80:39:2c:87:40:47:
ad:14:6b:0b:bc:84:45:43:34:0d:f2:71:93:11:c4:fe:59:0a:
21:38:e2:eb:11:ec:78:75:d2:4f:a9:85:d7:e5:23:12:76:51:
24:b8:9e:af:09:c5:69:df:27:bd:d2:fa:46:b4:60:c4:2e:f1:
57:e2:98:4f:97:e7:04:f6:7b:07:ce:02:8d:76:7e:0f:4b:e5:
85:3f:11:9a:8c:00:b3:ab:b7:b5:e6:29:a0:b5:ba:54:d1:b0:
f8:35:82:11:e5:d8:d9:8f:65:e2:aa:8d:7e:ae:76:80:03:d4:
ce:c5:12:e9:28:6b:d8:41:0d:56:35:b0:76:ef:b0:75:ea:da:
ca:4c:ec:05:e7:db:b1:b4:a9:4d:05:f1:97:4a:24:63:21:8d:
91:4a:53:f8:8f:81:ff:d6:64:8f:9b:d3:28:ed:73:d7:67:0e:
dc:70:de:7c:15:24:d2:a6:46:13:25:05:22:47:40:67:92:50:
b7:11:0c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 12:46:44 2026 by rpki-client