Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/jCzG-o91dYpKnMMjF8du1lttZoA.roa
File: jCzG-o91dYpKnMMjF8du1lttZoA.roa (raw, json)
Hash identifier: 6j5XWLAY97525XS8qhwQwoYanGymNIWWiK7dP5ILKsY=
Subject key identifier: 8C:2C:C6:FA:8F:75:75:8A:4A:9C:C3:23:17:C7:6E:D6:5B:6D:66:80
Certificate issuer: /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial: 019D4E87F401424D62351D33D7138B7DFFB1
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/jCzG-o91dYpKnMMjF8du1lttZoA.roa
Signing time: Thu 02 Apr 2026 14:10:25 +0000
ROA not before: Thu 02 Apr 2026 14:10:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197979
IP address blocks: 37.130.14.0/24 maxlen: 24
91.231.24.0/24 maxlen: 24
91.231.25.0/24 maxlen: 24
91.231.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4e:87:f4:01:42:4d:62:35:1d:33:d7:13:8b:7d:ff:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Validity
Not Before: Apr 2 14:10:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c2cc6fa8f75758a4a9cc32317c76ed65b6d6680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:d8:67:86:97:93:55:9b:c7:08:1b:00:17:
5e:2f:f4:fe:38:b3:7a:cd:44:83:60:db:15:d8:71:
59:54:72:99:65:e3:b1:9d:b8:ed:36:6d:5b:9c:3e:
9c:e6:f7:40:aa:5e:2b:8e:ad:62:30:18:29:e4:ed:
3a:15:ab:2c:7e:85:b5:93:e4:07:35:8f:d3:1b:77:
da:fb:df:75:18:44:50:88:47:4c:ad:7f:32:3b:99:
75:4f:b9:4f:79:95:7b:40:90:91:57:6a:93:a1:cd:
ef:3f:46:45:a4:ef:ce:5e:20:0a:f7:8f:0d:0e:6b:
ab:27:03:0e:a8:be:1e:63:48:90:b1:ec:20:63:57:
2a:ca:4c:15:8b:b4:41:f5:f0:53:c6:11:21:f5:77:
a6:49:31:55:1f:43:4c:54:28:91:b5:67:ce:77:a3:
b8:15:9d:9c:99:2c:08:c9:2d:de:16:18:6b:47:e7:
c7:68:03:68:4c:31:1c:02:8d:60:f9:e5:32:f0:fe:
6e:53:72:46:2f:ab:3e:5a:94:1f:a4:11:7e:93:24:
cf:4d:a0:d0:57:ba:61:7d:df:a4:6e:69:4e:9f:29:
22:19:d6:74:8a:b1:ad:40:e8:29:5a:51:78:fd:15:
c5:bf:70:1f:3e:05:53:3e:d7:ce:3f:11:7d:67:f7:
89:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2C:C6:FA:8F:75:75:8A:4A:9C:C3:23:17:C7:6E:D6:5B:6D:66:80
X509v3 Authority Key Identifier:
keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/jCzG-o91dYpKnMMjF8du1lttZoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.130.14.0/24
91.231.24.0/23
91.231.27.0/24
Signature Algorithm: sha256WithRSAEncryption
50:45:10:3a:dd:1e:fa:56:6c:9a:94:26:7f:49:6f:b4:5f:ec:
ca:df:14:32:5b:43:76:0a:6c:d1:6b:12:11:9e:de:06:7c:c3:
ee:4e:05:91:9c:16:a0:64:58:73:2a:94:c9:7d:90:bd:44:63:
d3:00:40:44:a5:b2:91:c2:26:a5:9f:55:b3:3b:f7:d1:a3:df:
20:e8:28:b3:12:c5:ca:f6:3c:99:a5:57:35:b9:f5:5a:bf:55:
c9:55:08:35:f9:3a:aa:58:89:00:6c:02:fc:59:82:62:d7:99:
fa:7a:23:73:3e:82:61:33:09:bd:6f:2b:db:4f:9d:9e:28:24:
3a:dc:77:b7:d9:7f:11:d7:9b:38:93:5c:ee:a8:a2:e7:5e:c4:
2f:f9:9f:2b:91:ea:3e:1c:76:c1:3d:84:94:07:1e:17:47:97:
aa:68:9b:f6:8c:a5:23:13:72:f4:49:b4:b1:e6:c3:c2:09:e9:
56:6c:72:c3:4d:5e:30:d7:8c:72:d1:d0:fa:f5:8f:64:18:aa:
9b:b6:4b:2e:54:48:cf:ca:71:cb:cf:12:9b:2a:a0:98:fb:a3:
38:2b:25:83:1e:08:53:dd:0c:b7:61:de:77:50:52:d5:8b:ba:
f1:f0:d7:7c:55:1a:72:49:91:35:34:29:31:ad:7b:df:5c:aa:
b0:65:4a:e0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ1Oh/QBQk1iNR0z1xOLff+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYjhhMTU0NjZjM2ZmMWU5MTVkNzgwYTEwYjBiYWE5YWQ2
OTQ4NjAwHhcNMjYwNDAyMTQxMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzJjYzZmYThmNzU3NThhNGE5Y2MzMjMxN2M3NmVkNjViNmQ2NjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBjYZ4aXk1WbxwgbABdeL/T+OLN6
zUSDYNsV2HFZVHKZZeOxnbjtNm1bnD6c5vdAql4rjq1iMBgp5O06FassfoW1k+QH
NY/TG3fa+991GERQiEdMrX8yO5l1T7lPeZV7QJCRV2qToc3vP0ZFpO/OXiAK948N
DmurJwMOqL4eY0iQsewgY1cqykwVi7RB9fBTxhEh9XemSTFVH0NMVCiRtWfOd6O4
FZ2cmSwIyS3eFhhrR+fHaANoTDEcAo1g+eUy8P5uU3JGL6s+WpQfpBF+kyTPTaDQ
V7phfd+kbmlOnykiGdZ0irGtQOgpWlF4/RXFv3AfPgVTPtfOPxF9Z/eJrwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIwsxvqPdXWKSpzDIxfHbtZbbWaAMB8GA1UdIwQY
MBaAFJC4oVRmw/8ekV14ChCwuqmtaUhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMmRmNDQtMzhiMi00ZDEyLTgzNDct
NzhlOTk3ODY5OTUyLzEvakN6Ry1vOTFkWXBLbk1NakY4ZHUxbHR0Wm9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hMmRmNDQtMzhiMi00ZDEyLTgzNDctNzhlOTk3ODY5OTUy
LzEva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJYIOAwQB
W+cYAwQAW+cbMA0GCSqGSIb3DQEBCwUAA4IBAQBQRRA63R76VmyalCZ/SW+0X+zK
3xQyW0N2CmzRaxIRnt4GfMPuTgWRnBagZFhzKpTJfZC9RGPTAEBEpbKRwialn1Wz
O/fRo98g6CizEsXK9jyZpVc1ufVav1XJVQg1+TqqWIkAbAL8WYJi15n6eiNzPoJh
Mwm9byvbT52eKCQ63He32X8R15s4k1zuqKLnXsQv+Z8rkeo+HHbBPYSUBx4XR5eq
aJv2jKUjE3L0SbSx5sPCCelWbHLDTV4w14xy0dD69Y9kGKqbtksuVEjPynHLzxKb
KqCY+6M4KyWDHghT3Qy3Yd53UFLVi7rx8Nd8VRpySZE1NCkxrXvfXKqwZUrg
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:26:13 2026 by rpki-client