Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/QkyiZavgXwR-KLZEbdU8PvKpm8E.roa
File: QkyiZavgXwR-KLZEbdU8PvKpm8E.roa (raw, json)
Hash identifier: dA0wp0Ncat/vR7fy/9cV9E2SH1rwxX2enCsjk+CVlOY=
Subject key identifier: 42:4C:A2:65:AB:E0:5F:04:7E:28:B6:44:6D:D5:3C:3E:F2:A9:9B:C1
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019EF91A5CBB7D1D406E48609ACFB1E01ABE
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/QkyiZavgXwR-KLZEbdU8PvKpm8E.roa
Signing time: Wed 24 Jun 2026 10:08:34 +0000
ROA not before: Wed 24 Jun 2026 10:08:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 45.8.68.0/24 maxlen: 24
45.67.96.0/24 maxlen: 24
45.91.50.0/24 maxlen: 24
45.130.80.0/24 maxlen: 24
45.130.81.0/24 maxlen: 24
45.130.83.0/24 maxlen: 24
45.135.186.0/24 maxlen: 24
45.140.135.0/24 maxlen: 24
82.197.193.0/24 maxlen: 24
89.36.23.0/24 maxlen: 24
89.38.70.0/24 maxlen: 24
89.47.15.0/24 maxlen: 24
91.217.249.0/24 maxlen: 24
185.192.16.0/24 maxlen: 24
185.192.71.0/24 maxlen: 24
188.212.135.0/24 maxlen: 24
193.19.109.0/24 maxlen: 24
203.26.81.0/24 maxlen: 24
203.159.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:1a:5c:bb:7d:1d:40:6e:48:60:9a:cf:b1:e0:1a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 24 10:08:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=424ca265abe05f047e28b6446dd53c3ef2a99bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:4c:7d:71:26:79:0b:87:78:00:3c:e7:51:
31:f4:12:fb:7d:6b:f8:a5:f4:e7:95:c4:3b:9d:15:
80:0d:72:7b:da:71:f4:46:3c:2b:cc:ac:a6:b2:21:
f4:72:4b:f8:b0:6f:5c:12:25:c4:4c:9f:7b:09:a9:
8c:ed:76:7c:ff:ce:dc:23:0a:be:89:4f:8a:36:3e:
06:c0:b3:37:10:ce:57:cd:48:40:53:a9:a8:60:32:
eb:9e:3b:5f:9b:59:a8:de:1a:9b:18:a9:dd:b4:e8:
69:c6:a3:39:4f:28:e7:17:ed:27:40:0f:47:a0:d5:
5c:ce:35:a6:5a:cd:3c:4a:47:67:22:1b:93:6e:41:
42:ce:f9:5d:c7:3c:fe:53:c1:bd:a4:11:58:46:ac:
32:4b:95:ec:5a:b5:d0:6a:f3:dc:09:78:22:cb:e4:
a3:8c:8d:b5:b5:d4:d8:15:a2:8a:23:cf:cf:b3:d9:
3e:4c:1f:ad:b9:13:e7:83:26:5c:c8:60:06:8f:c7:
2b:42:ab:c7:e6:c1:9a:49:cd:ee:49:d2:f6:14:e7:
28:b5:6d:60:87:68:7a:71:1e:fd:e4:69:82:a7:1e:
41:69:51:3d:2e:f8:68:c0:f9:7f:e2:e5:3d:3e:c3:
ff:81:22:d1:d8:7b:df:7c:21:89:62:10:c7:6a:22:
16:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4C:A2:65:AB:E0:5F:04:7E:28:B6:44:6D:D5:3C:3E:F2:A9:9B:C1
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/QkyiZavgXwR-KLZEbdU8PvKpm8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.68.0/24
45.67.96.0/24
45.91.50.0/24
45.130.80.0/23
45.130.83.0/24
45.135.186.0/24
45.140.135.0/24
82.197.193.0/24
89.36.23.0/24
89.38.70.0/24
89.47.15.0/24
91.217.249.0/24
185.192.16.0/24
185.192.71.0/24
188.212.135.0/24
193.19.109.0/24
203.26.81.0/24
203.159.81.0/24
Signature Algorithm: sha256WithRSAEncryption
81:f9:9a:21:55:65:30:be:94:8e:e6:fe:b5:54:86:00:b4:24:
bf:ca:55:ac:3a:06:17:36:3b:16:10:84:d0:65:00:32:cf:c6:
61:68:9f:bd:36:c9:b1:de:60:11:c8:ab:60:4e:20:7d:95:57:
59:12:6f:20:cd:20:09:f7:67:e0:06:98:1a:b5:11:b5:9a:7f:
68:a7:de:54:62:8f:1e:20:7b:08:96:05:c3:b3:e1:a9:34:99:
b3:be:a9:b9:5f:59:07:f8:ec:02:9f:1f:43:80:f2:d7:77:7f:
b2:c4:25:6b:e8:f8:b9:80:4f:6b:27:4b:19:29:e0:96:17:47:
e6:64:cc:ee:62:00:10:cf:59:72:af:85:53:f9:59:8c:6c:81:
72:1c:db:43:c6:6c:81:ef:40:1e:24:3b:75:7b:7b:7f:4b:c2:
4e:5f:94:9d:08:51:db:00:bd:d4:2f:a4:4b:b7:ee:10:ea:dd:
2a:58:e6:10:3d:a1:56:cc:5b:82:43:9a:b8:28:c3:35:ef:98:
20:57:42:70:6b:7e:92:e1:0b:e7:60:37:1c:5c:63:2e:5c:34:
ca:aa:52:a2:d0:59:17:c4:c5:5a:79:fa:56:97:39:48:c6:c8:
8a:b4:44:cd:60:e7:d7:c0:62:be:57:14:fe:de:7b:e2:27:c4:
93:7a:09:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:46:54 2026 by rpki-client