Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/kb6gSfM5mGHVL2sldaFxnmKjhg0.roa
File: kb6gSfM5mGHVL2sldaFxnmKjhg0.roa (raw, json)
Hash identifier: M9+8l6+F24TF6oMlUeKq+hsgUYqqlaAwBaPlCZF5HRE=
Subject key identifier: 91:BE:A0:49:F3:39:98:61:D5:2F:6B:25:75:A1:71:9E:62:A3:86:0D
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 01A04231B4A82130C56E753A692CC40B9CD3
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/kb6gSfM5mGHVL2sldaFxnmKjhg0.roa
Signing time: Thu 27 Aug 2026 07:49:08 +0000
ROA not before: Thu 27 Aug 2026 07:49:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203978
IP address blocks: 185.176.104.0/22 maxlen: 22
185.176.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:31:b4:a8:21:30:c5:6e:75:3a:69:2c:c4:0b:9c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Aug 27 07:49:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91bea049f3399861d52f6b2575a1719e62a3860d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b4:04:f4:41:5b:ba:b5:6d:0b:7b:67:54:b0:
c7:d2:ce:a4:4a:c0:13:94:9f:49:64:d2:40:ed:da:
ab:21:06:c7:47:43:93:22:4d:08:4e:2d:cd:ec:e8:
0d:0c:a4:db:b1:ee:6c:d9:83:b0:b9:4d:0b:bb:b6:
d1:e7:5c:9d:f9:b8:54:29:eb:eb:af:b9:2a:cc:e0:
ed:12:c1:57:4f:32:9e:42:9f:6f:db:21:49:57:0a:
a6:f9:6b:88:dc:a6:08:e7:55:74:7c:66:1b:1a:a4:
04:91:13:c1:4e:ac:5c:df:53:42:66:9d:f6:3b:5e:
51:22:08:48:e0:d1:11:25:9e:f4:b3:2d:52:8f:b5:
b3:78:4d:63:18:c5:ac:97:21:e9:84:2a:00:ee:b9:
f2:84:00:8f:53:f5:c5:86:0e:27:61:ec:56:0f:84:
c4:64:ea:7e:73:b2:e0:20:97:d4:c4:b3:3e:fb:1c:
af:3c:60:b2:0c:cc:c3:45:22:d5:e1:c0:7f:ec:8f:
f2:e8:c0:df:82:cf:4c:c3:db:c9:c2:ab:49:2f:b0:
c9:df:0d:a4:6b:46:6f:2c:ff:a1:13:1e:94:fe:2e:
23:38:55:0f:6c:b3:fb:07:1b:8d:2c:f0:d5:9c:bd:
86:81:f9:bf:8d:2e:0a:4b:1c:5d:c2:ea:63:9b:b9:
11:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BE:A0:49:F3:39:98:61:D5:2F:6B:25:75:A1:71:9E:62:A3:86:0D
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/kb6gSfM5mGHVL2sldaFxnmKjhg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.104.0/22
Signature Algorithm: sha256WithRSAEncryption
29:46:f1:db:1c:4b:8f:13:a5:f9:04:2c:bd:cb:50:22:6d:63:
c4:a6:d1:7e:20:91:da:13:4f:76:85:8d:8a:fa:89:7a:5b:09:
fe:e3:df:c4:e2:12:26:4f:85:5d:90:22:65:14:98:46:00:e5:
fc:bc:60:78:09:49:8b:e6:05:c6:f0:9d:50:c0:af:d3:ff:e6:
2a:dc:eb:3e:39:4a:c0:35:0e:d9:f1:4f:be:8f:3d:7e:67:f3:
49:d4:94:53:56:ee:a9:f1:d7:4a:62:65:3f:b2:e7:2f:85:78:
bb:48:aa:76:7b:3a:40:77:75:84:09:11:44:e6:66:82:49:ce:
3f:65:56:32:e8:11:44:65:a9:c2:37:47:a5:fa:2b:f2:9e:f8:
ff:47:91:94:f7:b3:fa:28:a4:c5:f7:cd:87:3a:75:00:39:34:
d3:a5:47:45:8e:c5:86:2e:c6:be:01:9d:83:8a:61:c0:a1:ef:
43:64:99:2f:46:f8:31:28:18:66:50:58:9b:2d:d7:ce:f4:fc:
40:54:ae:46:cc:1a:f0:e9:01:5e:24:25:50:b4:dc:d9:77:ad:
2f:93:3b:46:52:70:96:23:bc:5a:b1:e7:10:6c:81:a1:4a:1a:
b6:60:7b:1e:ad:83:86:49:6b:14:58:76:13:a3:60:3d:61:cb:
a2:ae:ab:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBCMbSoITDFbnU6aSzEC5zTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0
NjVjMmUwHhcNMjYwODI3MDc0OTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWJlYTA0OWYzMzk5ODYxZDUyZjZiMjU3NWExNzE5ZTYyYTM4NjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7QE9EFburVtC3tnVLDH0s6kSsAT
lJ9JZNJA7dqrIQbHR0OTIk0ITi3N7OgNDKTbse5s2YOwuU0Lu7bR51yd+bhUKevr
r7kqzODtEsFXTzKeQp9v2yFJVwqm+WuI3KYI51V0fGYbGqQEkRPBTqxc31NCZp32
O15RIghI4NERJZ70sy1Sj7WzeE1jGMWslyHphCoA7rnyhACPU/XFhg4nYexWD4TE
ZOp+c7LgIJfUxLM++xyvPGCyDMzDRSLV4cB/7I/y6MDfgs9Mw9vJwqtJL7DJ3w2k
a0ZvLP+hEx6U/i4jOFUPbLP7BxuNLPDVnL2Ggfm/jS4KSxxdwupjm7kRuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJG+oEnzOZhh1S9rJXWhcZ5io4YNMB8GA1UdIwQY
MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt
OTE2NDZiZjAxNTNkLzEva2I2Z1NmTTVtR0hWTDJzbGRhRnhubUtqaGcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk
LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubBoMA0G
CSqGSIb3DQEBCwUAA4IBAQApRvHbHEuPE6X5BCy9y1AibWPEptF+IJHaE092hY2K
+ol6Wwn+49/E4hImT4VdkCJlFJhGAOX8vGB4CUmL5gXG8J1QwK/T/+Yq3Os+OUrA
NQ7Z8U++jz1+Z/NJ1JRTVu6p8ddKYmU/sucvhXi7SKp2ezpAd3WECRFE5maCSc4/
ZVYy6BFEZanCN0el+ivynvj/R5GU97P6KKTF982HOnUAOTTTpUdFjsWGLsa+AZ2D
imHAoe9DZJkvRvgxKBhmUFibLdfO9PxAVK5GzBrw6QFeJCVQtNzZd60vkztGUnCW
I7xasecQbIGhShq2YHserYOGSWsUWHYTo2A9YcuirqvZ
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:25:43 2026 by rpki-client