Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/KQADPW4owxweNKfg2K59-o0aLv8.roa
File: KQADPW4owxweNKfg2K59-o0aLv8.roa (raw, json)
Hash identifier: K4s/3hL7SRQbmE+iSSxyvalPmcaK7KFBbuUY95NP3Mg=
Subject key identifier: 29:00:03:3D:6E:28:C3:1C:1E:34:A7:E0:D8:AE:7D:FA:8D:1A:2E:FF
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019C9A89983D5A0D9B9A8C1D78A538446B68
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/KQADPW4owxweNKfg2K59-o0aLv8.roa
Signing time: Thu 26 Feb 2026 15:20:34 +0000
ROA not before: Thu 26 Feb 2026 15:20:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215496
IP address blocks: 91.217.166.0/24 maxlen: 24
2a05:9080:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Mar 2026 16:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9a:89:98:3d:5a:0d:9b:9a:8c:1d:78:a5:38:44:6b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Feb 26 15:20:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2900033d6e28c31c1e34a7e0d8ae7dfa8d1a2eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cb:c9:1e:47:06:f0:9b:1e:aa:e7:a7:2a:a1:
73:ef:43:cb:f5:77:da:11:cf:57:c3:2b:af:00:c7:
9a:07:50:eb:48:ef:36:0f:05:44:b9:64:85:37:10:
53:e1:68:19:2e:00:e0:3b:5c:69:67:c3:32:6a:65:
be:82:23:df:1c:30:51:fd:49:af:1b:49:73:4b:a6:
68:1c:8e:58:cd:5d:64:a5:69:42:7f:69:f2:03:dc:
b8:bf:4f:04:2a:16:d8:15:dc:b4:c1:2e:de:15:eb:
97:8a:07:70:ff:39:8c:c2:7d:cf:83:95:ef:4e:1d:
dd:7d:74:05:4b:c0:8c:0a:c8:71:66:50:17:bf:aa:
24:35:a3:9f:14:f1:9f:97:b2:5c:8b:c9:8f:5c:f6:
70:e5:96:35:a0:c8:80:cc:9b:a2:8e:4a:bd:70:58:
c3:5b:f1:84:bf:38:70:86:f3:cb:d3:25:f2:57:df:
9e:e6:a1:65:26:61:84:54:6d:47:2c:1d:96:ae:e5:
96:aa:09:c2:d1:e8:01:9d:46:06:b4:ab:86:92:df:
86:85:06:e0:dd:24:9b:ba:93:04:49:76:65:b1:1d:
bb:2e:dd:5e:5e:9d:12:86:9f:1c:99:41:56:8f:bb:
9e:e9:a4:df:43:c8:38:51:0e:31:23:fc:0d:63:2b:
1e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:00:03:3D:6E:28:C3:1C:1E:34:A7:E0:D8:AE:7D:FA:8D:1A:2E:FF
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/KQADPW4owxweNKfg2K59-o0aLv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.166.0/24
IPv6:
2a05:9080:12::/48
Signature Algorithm: sha256WithRSAEncryption
48:28:d6:1f:3f:fa:33:e2:cd:92:de:6a:30:02:c5:d2:c3:9a:
49:0f:37:c6:8b:d2:5d:2e:b0:7e:b1:47:77:0c:55:ac:f4:ab:
91:7d:78:98:83:b8:6f:c6:89:51:44:6c:b5:a0:9a:77:5e:bb:
33:d9:c8:fe:26:e1:19:dc:d1:9c:87:00:4e:c8:23:35:1c:7d:
3a:79:f4:a4:dd:d0:82:40:60:f0:0a:1f:a4:0e:c4:5d:10:93:
a3:9b:e1:aa:14:c9:ef:84:e6:bb:1a:46:77:4d:fe:e0:c0:80:
92:78:35:86:bd:90:b3:8d:97:fe:aa:96:73:a7:a0:9b:8f:67:
cf:ec:8b:21:75:39:c9:d1:5b:fd:97:b6:a4:0a:22:4c:ab:93:
68:7c:7e:c9:e0:e0:b7:d1:70:fe:6b:8c:39:da:9b:c0:87:df:
6e:04:62:b3:b7:b9:d0:66:2d:dc:2d:6e:0d:31:2c:84:2b:6a:
6d:51:47:94:74:9d:55:47:bf:5b:8a:33:2f:41:6b:7e:bf:c0:
af:ce:dc:b4:15:67:e0:e9:c6:d9:a4:99:c9:99:d2:2f:a9:64:
92:d6:5f:03:73:e5:65:1b:f5:bf:91:bc:18:65:0f:4d:3e:81:
eb:c7:c8:7d:4f:b9:8f:a5:21:b8:c1:37:2a:6d:cb:59:03:27:
a3:40:cf:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 28 23:09:57 2026 by rpki-client