Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/kesat7h3E6v8bFh3xVoq71a7cno.roa
File: kesat7h3E6v8bFh3xVoq71a7cno.roa (raw, json)
Hash identifier: sfNBkWHv7DK6Z5qM/Pt7KuieiXdpmiQI709Nv+bNwsI=
Subject key identifier: 91:EB:1A:B7:B8:77:13:AB:FC:6C:58:77:C5:5A:2A:EF:56:BB:72:7A
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 01A09FF19F0D345557A3D453B5AAF26EF827
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/kesat7h3E6v8bFh3xVoq71a7cno.roa
Signing time: Mon 14 Sep 2026 12:43:27 +0000
ROA not before: Mon 14 Sep 2026 12:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.217.223.0/24 maxlen: 24
103.69.226.0/24 maxlen: 24
185.191.20.0/24 maxlen: 24
185.191.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:f1:9f:0d:34:55:57:a3:d4:53:b5:aa:f2:6e:f8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Sep 14 12:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91eb1ab7b87713abfc6c5877c55a2aef56bb727a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:ec:34:5a:62:15:a6:c1:12:8b:55:47:fe:
e6:b9:b5:8c:0c:27:58:df:2e:db:bb:ce:85:66:70:
6c:fb:d5:be:fa:b1:79:0b:92:e4:69:7f:45:9e:7c:
05:9c:45:89:c8:f7:1f:ea:1c:b4:c5:52:1f:c0:ae:
b0:dc:e3:f4:30:f0:2a:3c:71:ce:6e:da:34:e8:69:
5b:e1:1f:f4:ce:1c:4f:1f:9c:7a:47:38:5e:dd:74:
da:56:ef:25:a3:9e:17:bb:79:46:14:e9:9c:2d:78:
fc:f2:0e:38:6a:40:c6:97:2f:53:70:57:4a:99:3c:
f8:67:83:34:b5:bd:9d:6e:27:32:2b:73:bc:75:fe:
36:02:7c:de:1b:85:b2:16:83:ca:52:9d:38:f0:1c:
2f:ce:b3:8e:b4:96:a5:8a:c5:22:33:8e:79:98:80:
a8:90:d3:47:86:a7:1c:77:20:3f:15:f1:f2:42:f2:
91:8f:3f:8a:99:d6:60:f1:f7:d6:a0:b4:f7:77:83:
49:7c:4f:18:66:8f:fa:e9:2d:45:d7:df:14:a6:e5:
d2:8a:39:45:e9:00:22:65:34:7c:e9:fe:08:cc:50:
67:9f:46:f6:19:03:50:2a:61:97:6c:64:92:bd:78:
32:cd:7e:cf:53:72:b3:78:7c:c0:5e:b1:c2:26:32:
ae:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EB:1A:B7:B8:77:13:AB:FC:6C:58:77:C5:5A:2A:EF:56:BB:72:7A
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/kesat7h3E6v8bFh3xVoq71a7cno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.223.0/24
103.69.226.0/24
185.191.20.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:84:9a:db:8f:43:51:6b:84:12:6e:f4:da:78:fc:6a:bb:3c:
60:21:e0:fd:e4:82:64:8c:26:83:b1:79:02:d1:63:31:83:fa:
f5:df:9f:f5:19:76:9c:c5:34:48:68:d6:7a:16:20:ee:56:66:
92:81:e3:89:cd:89:9e:f1:04:01:3b:41:3f:69:83:e0:7e:26:
b2:1b:52:5c:2e:d3:e6:39:4d:3a:79:82:1a:48:ad:cf:fa:5e:
40:0f:b1:ae:a5:aa:44:8b:8c:35:5d:d5:2f:59:e7:18:2a:aa:
7d:73:4d:ed:1f:f6:dd:79:cf:c0:4b:19:ce:03:34:13:fa:81:
3b:77:b3:66:bd:44:37:55:fa:62:20:ed:f2:ec:c4:74:90:fa:
7a:1c:5d:74:7e:1e:5a:93:0b:47:87:7f:d7:27:d3:0f:43:c0:
a4:32:e0:32:3e:94:f6:fe:bb:09:51:bb:f5:73:ab:49:81:62:
ef:63:9d:ee:72:3e:d9:4f:22:54:83:e0:fa:99:e6:a2:76:df:
42:ea:df:80:ad:fe:d3:66:d3:24:03:bb:48:87:bc:4c:93:93:
5d:3c:e7:a6:50:46:35:49:e1:a3:7b:86:fd:60:23:ca:22:5d:
f5:cc:61:f2:34:9e:f4:6f:c7:0f:92:84:64:c7:0a:75:ec:bb:
54:00:d3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:59:12 2026 by rpki-client