Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/kKPUL3XL5kfL6DXSXiFlJFUqzf8.roa
File: kKPUL3XL5kfL6DXSXiFlJFUqzf8.roa (raw, json)
Hash identifier: MqfgECWtHRXZOaXWHtLXuKHhrTsYhuIDOqY4suEA3jM=
Subject key identifier: 90:A3:D4:2F:75:CB:E6:47:CB:E8:35:D2:5E:21:65:24:55:2A:CD:FF
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 01A067291374782087C706A1B0351E96F137
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/kKPUL3XL5kfL6DXSXiFlJFUqzf8.roa
Signing time: Thu 03 Sep 2026 12:05:40 +0000
ROA not before: Thu 03 Sep 2026 12:05:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51402
IP address blocks: 178.239.64.0/20 maxlen: 20
185.128.120.0/22 maxlen: 22
185.186.24.0/22 maxlen: 22
185.196.224.0/22 maxlen: 22
185.221.136.0/22 maxlen: 22
2a02:2760::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:29:13:74:78:20:87:c7:06:a1:b0:35:1e:96:f1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Sep 3 12:05:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90a3d42f75cbe647cbe835d25e216524552acdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:9b:eb:6b:c5:85:cd:28:92:89:bb:5d:20:
10:3f:71:c7:f3:a0:77:0e:e4:27:48:37:48:b9:57:
4d:42:81:ee:4a:de:13:07:2d:4c:10:14:da:de:2f:
f4:9a:33:31:5a:7f:7d:f4:9f:4f:b4:44:08:3a:f9:
a1:1c:fe:51:5d:b6:1a:0b:ec:cc:42:6e:3c:32:62:
cb:5c:6c:a7:f3:a0:4b:3f:4b:24:e1:45:2f:d6:4d:
ca:1f:84:b5:d1:d8:8e:64:77:51:8b:b9:ce:97:2b:
2d:2b:39:23:8b:ad:17:8e:32:42:91:a5:52:3d:dd:
fa:6f:73:d0:6c:50:7b:10:65:72:f9:b9:a7:6b:77:
ec:67:86:b7:ad:62:d1:4f:2c:50:74:55:31:a0:d8:
5b:5d:b6:51:80:3b:c2:cf:f3:71:a3:bc:da:ff:4d:
7b:f9:ff:6b:fb:a1:0b:26:58:b9:7d:45:e2:95:be:
84:7c:c9:01:9e:9a:47:0c:c1:0e:85:3b:9a:78:bd:
d7:27:b1:34:c5:a1:6c:2d:3d:cd:68:34:e3:8c:b9:
74:d5:c9:d3:5d:30:61:f0:79:17:67:0e:e9:17:3d:
4b:e8:94:5f:4e:86:a3:c3:14:58:ad:0f:70:62:bc:
f0:93:dd:fb:ff:53:8f:bf:d9:97:00:0b:fd:b0:cb:
26:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A3:D4:2F:75:CB:E6:47:CB:E8:35:D2:5E:21:65:24:55:2A:CD:FF
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/kKPUL3XL5kfL6DXSXiFlJFUqzf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.64.0/20
185.128.120.0/22
185.186.24.0/22
185.196.224.0/22
185.221.136.0/22
IPv6:
2a02:2760::/32
Signature Algorithm: sha256WithRSAEncryption
c8:c2:13:6a:36:f5:b9:3c:14:fd:d1:95:3c:7c:d7:c3:a5:5d:
be:6b:fd:b9:72:8b:f3:10:f2:01:8a:3c:a1:66:7d:9e:da:eb:
c4:d3:d2:f2:8c:1a:75:f4:8a:49:89:c6:3b:ae:ed:18:66:25:
2a:6e:06:e0:23:89:c1:66:0e:4d:1a:b8:18:92:4c:08:c8:d2:
83:cd:6a:74:4f:1b:1d:a4:80:d9:f1:d9:b7:e8:55:40:8b:70:
34:f2:25:9f:9f:f4:53:b7:68:cc:ad:40:01:fe:f5:eb:2b:12:
2f:73:76:be:d6:0c:d1:c8:5a:45:2e:55:6c:88:7a:0e:53:50:
67:42:37:5d:d1:6d:49:3f:3c:56:71:c2:da:92:03:1a:56:d6:
b7:25:ad:ac:57:9b:7c:47:c0:36:6b:49:94:62:05:e1:01:cb:
02:33:1a:24:d2:c6:0a:16:01:4a:c4:ec:25:23:8e:c4:31:62:
b4:1e:e1:16:2d:10:b4:21:9a:af:5d:55:a4:9b:65:45:74:61:
79:c9:84:45:31:b0:69:0f:7c:87:62:69:2a:2d:17:9b:e7:c0:
b6:36:d4:1d:34:7a:2b:66:02:5a:7c:6f:21:43:dd:20:11:43:
3e:7c:69:a5:85:45:67:64:d0:11:51:49:68:af:7e:c1:7a:5f:
d0:42:12:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:12:26 2026 by rpki-client