Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/KQYzDmlbtLb0TIveiic0hQtg1_8.roa
File: KQYzDmlbtLb0TIveiic0hQtg1_8.roa (raw, json)
Hash identifier: KwMCQ5pXReeQWpe8C0PWaWWc7IeA3pbKv8Ezi0wF6Rc=
Subject key identifier: 29:06:33:0E:69:5B:B4:B6:F4:4C:8B:DE:8A:27:34:85:0B:60:D7:FF
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 019F5AE941601C7CFC79E10CEEA9C33651D8
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/KQYzDmlbtLb0TIveiic0hQtg1_8.roa
Signing time: Mon 13 Jul 2026 09:57:43 +0000
ROA not before: Mon 13 Jul 2026 09:57:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 80.86.212.0/24 maxlen: 24
80.86.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:e9:41:60:1c:7c:fc:79:e1:0c:ee:a9:c3:36:51:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Jul 13 09:57:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2906330e695bb4b6f44c8bde8a2734850b60d7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:85:e7:de:6c:52:9c:6d:2d:e1:dd:58:57:
ab:59:1c:9f:15:45:0e:3f:7c:3c:d4:1d:eb:d9:ce:
23:3a:22:2e:92:2f:c3:dc:bf:ea:f7:25:ab:57:61:
cc:7b:3a:af:00:bf:85:b3:7c:a0:8a:cc:44:cd:5c:
92:75:97:81:34:e3:0d:8f:8b:46:25:2e:da:24:ae:
3a:10:4b:32:d5:ed:fa:ef:28:50:13:ff:ac:cd:bb:
d9:be:7e:dc:82:78:fa:c4:eb:30:80:57:fe:6d:73:
db:34:dc:a5:d0:07:12:d7:64:90:d5:d7:62:7f:72:
ca:0d:2b:7e:6c:ab:3f:92:60:4a:1c:56:b7:dc:86:
65:fd:00:31:71:e5:a6:40:72:b8:2c:07:58:84:22:
73:e7:60:99:61:87:d4:60:3c:a6:d6:a4:57:4e:6c:
f2:dc:ae:fb:e2:1b:5a:01:3c:63:44:80:c0:73:66:
93:82:d1:9d:84:52:f7:cd:ba:a1:2f:e9:1a:4b:ab:
78:dc:e1:eb:ab:54:d7:fb:e6:f5:43:39:5d:01:68:
dd:6e:f2:c6:48:3f:4b:b5:80:c9:87:3a:d9:5e:60:
e3:c7:14:8f:ed:57:ed:db:f7:69:c5:55:01:a0:a5:
26:6d:35:bb:f6:06:0c:29:d1:1f:ed:11:f2:f5:a4:
a7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:06:33:0E:69:5B:B4:B6:F4:4C:8B:DE:8A:27:34:85:0B:60:D7:FF
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/KQYzDmlbtLb0TIveiic0hQtg1_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.212.0/24
80.86.221.0/24
Signature Algorithm: sha256WithRSAEncryption
50:95:b4:55:31:95:06:a6:90:99:07:56:ce:79:d0:8a:51:61:
2e:82:98:7e:72:c7:2c:90:fc:d3:b7:ad:d0:8e:4e:e1:ae:42:
23:68:a8:b5:3a:6d:c1:d3:9b:09:12:b9:7b:0e:d1:c0:42:72:
19:87:64:41:63:a9:df:28:7f:3c:ca:b7:fd:bf:1b:c5:41:7c:
58:f8:db:b6:e5:00:f4:db:22:f1:fd:05:c8:de:34:de:a4:9d:
84:cb:fd:b0:9b:37:0f:00:69:6f:80:52:5a:f7:d9:00:bc:29:
1b:99:1a:4b:08:f2:26:20:55:0e:43:46:90:43:15:c9:84:b4:
2a:7b:ad:dc:4c:bd:39:d3:62:42:da:47:b4:d6:5b:19:0b:f1:
c6:52:1c:79:fd:7d:8c:2d:8d:84:1f:44:23:c3:19:3a:ab:26:
da:27:a3:ea:09:8f:39:d6:13:51:fe:80:fb:c7:2a:34:60:ed:
d2:fb:9b:d8:56:63:a7:20:8a:87:45:0d:9f:15:ba:86:ce:b4:
27:aa:41:95:f3:58:e3:36:f8:f2:a3:fb:4c:c3:c9:b7:d8:70:
0e:85:e9:61:2b:73:b8:c5:0a:ee:06:0e:09:c4:b2:69:a7:00:
65:57:de:5f:1f:70:3c:34:43:36:ef:23:0c:00:dd:b8:78:7d:
62:33:7e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:54:04 2026 by rpki-client