Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/kMOSZWtiewXuTyw15Rj0qERqvDU.roa
File: kMOSZWtiewXuTyw15Rj0qERqvDU.roa (raw, json)
Hash identifier: 0sRuOEf/juDtnk/XmtOYHhmqAObydjSuiq84TabvvMs=
Subject key identifier: 90:C3:92:65:6B:62:7B:05:EE:4F:2C:35:E5:18:F4:A8:44:6A:BC:35
Certificate issuer: /CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Certificate serial: 019B7F8094B4D8D09C4AD1F9E80C446D0014
Authority key identifier: 8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/kMOSZWtiewXuTyw15Rj0qERqvDU.roa
Signing time: Fri 02 Jan 2026 16:18:11 +0000
ROA not before: Fri 02 Jan 2026 16:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57808
IP address blocks: 91.235.144.0/22 maxlen: 22
91.235.144.0/23 maxlen: 23
91.235.144.0/24 maxlen: 24
91.235.145.0/24 maxlen: 24
91.235.146.0/23 maxlen: 23
91.235.146.0/24 maxlen: 24
91.235.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:80:94:b4:d8:d0:9c:4a:d1:f9:e8:0c:44:6d:00:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Validity
Not Before: Jan 2 16:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90c392656b627b05ee4f2c35e518f4a8446abc35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:bb:0f:64:26:c2:1d:c6:c0:01:5f:ef:3c:
25:dc:de:1e:24:18:73:68:43:1c:46:5e:00:74:d0:
90:40:3f:7a:f8:fb:d7:6f:2d:5f:93:e8:0c:a7:2c:
26:ec:d1:67:db:48:cb:10:13:d6:82:16:83:2e:90:
e1:b5:fb:24:ae:b6:6f:00:cb:09:a3:84:d7:8e:7f:
4a:29:c7:d3:1b:e5:f5:1b:c4:f5:18:f0:53:6a:45:
fa:b3:82:1a:f3:a7:8f:4a:42:e6:a3:23:4e:f1:3c:
29:84:87:ce:0c:82:db:5a:48:35:02:0e:b0:09:e6:
b0:fd:0b:6a:cd:61:f1:34:5a:e8:dd:3e:3f:c1:fc:
59:b0:70:08:86:fd:45:f0:a9:7d:24:7e:6a:76:2f:
e6:4c:74:83:dc:89:cd:67:71:19:fc:f2:4a:57:25:
18:3b:b0:2f:a5:02:71:f3:14:8a:45:22:b0:d0:3f:
bf:a8:ed:c9:40:6e:87:a0:fc:ac:e9:fc:0d:08:82:
21:14:ca:b0:40:b5:36:17:2f:14:4b:27:a9:82:fa:
1c:a8:ac:2d:cb:e5:32:56:26:14:f5:44:09:87:24:
cb:dd:23:c0:b1:e0:d4:8c:bd:cf:aa:e4:3e:27:18:
37:4a:b2:c8:63:20:88:e2:95:47:05:06:81:75:d1:
f5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C3:92:65:6B:62:7B:05:EE:4F:2C:35:E5:18:F4:A8:44:6A:BC:35
X509v3 Authority Key Identifier:
keyid:8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/kMOSZWtiewXuTyw15Rj0qERqvDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.144.0/22
Signature Algorithm: sha256WithRSAEncryption
59:c3:7b:83:f2:a4:7e:16:3e:8b:37:7c:c7:5d:a6:c9:c3:07:
14:66:04:73:20:ed:23:11:81:66:61:47:f2:09:98:ca:88:e0:
95:e6:bf:44:db:81:26:01:52:2d:86:35:3c:5d:d7:4f:4d:7b:
93:0e:90:17:da:8a:33:26:0a:f2:78:6f:81:ab:3e:63:c1:6b:
4b:e6:5c:47:5a:b2:06:3b:3a:2f:ac:c3:83:1b:e1:ec:0c:04:
1c:d0:c4:29:9c:0c:ab:e7:5f:b5:4c:e0:dc:c4:f9:ce:d7:81:
bd:5e:b0:05:ba:d2:49:0e:e7:06:8e:07:98:1d:81:dd:10:7f:
00:30:35:35:56:88:8f:45:43:9f:78:36:fd:b7:f9:aa:5d:49:
42:5f:ef:cd:da:d4:86:1d:38:8e:e7:f9:a8:9b:bd:46:47:e3:
2e:ae:a6:4b:0c:dd:de:4b:49:e0:2d:90:ac:26:2e:c5:26:52:
9d:5f:de:42:a5:95:87:e5:0f:5e:7d:ed:e0:47:45:d2:ed:91:
9b:32:20:11:71:80:8d:d5:c1:9f:2c:a1:8b:70:83:30:ac:5d:
5d:80:e7:6c:e4:f6:bb:7b:ae:c2:b3:6f:49:99:34:61:3e:6b:
a7:05:f9:8a:da:b2:f2:ce:1b:51:91:f8:42:3e:f9:1d:69:07:
8b:e3:6e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:06:40 2026 by rpki-client