Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/kJQsI98iVa9ZD7yxoQppC6FP-XY.roa
File: kJQsI98iVa9ZD7yxoQppC6FP-XY.roa (raw, json)
Hash identifier: DqgDfqLMHMB6Ed3JqGpWQxjC4rt/X0IDDmE+DZGx1YQ=
Subject key identifier: 90:94:2C:23:DF:22:55:AF:59:0F:BC:B1:A1:0A:69:0B:A1:4F:F9:76
Certificate issuer: /CN=005f0d44b221f4b11c89db68969f97c3c7154906
Certificate serial: 019B7C8078309F155ADFCFC2F1462C3FC9D2
Authority key identifier: 00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/kJQsI98iVa9ZD7yxoQppC6FP-XY.roa
Signing time: Fri 02 Jan 2026 02:19:12 +0000
ROA not before: Fri 02 Jan 2026 02:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203099
IP address blocks: 185.142.60.0/22 maxlen: 24
2a07:2a00::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:78:30:9f:15:5a:df:cf:c2:f1:46:2c:3f:c9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005f0d44b221f4b11c89db68969f97c3c7154906
Validity
Not Before: Jan 2 02:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90942c23df2255af590fbcb1a10a690ba14ff976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:74:51:68:85:87:60:f8:89:d8:f4:42:e7:
9c:d7:9b:28:58:47:0c:7d:e3:5f:f9:e2:58:3b:7e:
93:7f:ae:70:a5:7c:ad:9b:07:44:69:2d:2e:01:d8:
40:13:98:b9:b7:fa:41:6e:cc:9f:d3:62:4f:d6:37:
f7:c4:03:a3:b8:18:af:4f:4c:10:22:5f:3a:8c:ed:
44:e1:5e:6f:df:df:dd:86:47:bf:8a:1b:b5:fb:37:
bb:12:5f:1e:f7:ad:f6:65:48:99:67:6d:0a:5a:ef:
61:2b:9c:99:7b:59:4b:03:61:05:c5:8f:cc:e9:43:
d7:31:99:d5:ce:97:8f:20:e2:f0:65:f4:88:b1:70:
95:53:f1:58:c7:91:8e:73:e9:1c:a1:b9:ac:6c:76:
27:4c:b5:d1:e0:78:00:3a:95:d6:e5:d6:ba:27:f2:
46:64:c2:f5:c7:bf:c6:22:fc:62:70:ab:1b:21:74:
4f:1e:d7:08:b4:d1:50:9b:3c:08:bc:03:e7:27:3d:
ac:95:6e:aa:b2:34:c9:32:b4:b1:f1:c5:a5:3d:33:
e7:b3:20:7a:60:bb:10:cd:c6:8d:e7:db:c8:1c:93:
8c:99:b0:16:f5:59:00:8b:05:a1:fc:21:ed:9c:db:
22:22:3d:38:43:2c:b9:99:20:97:82:3f:83:8d:ec:
77:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:94:2C:23:DF:22:55:AF:59:0F:BC:B1:A1:0A:69:0B:A1:4F:F9:76
X509v3 Authority Key Identifier:
keyid:00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/kJQsI98iVa9ZD7yxoQppC6FP-XY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.60.0/22
IPv6:
2a07:2a00::/29
Signature Algorithm: sha256WithRSAEncryption
3b:66:9a:3b:7f:84:3d:0b:be:b5:6e:d4:ae:f4:ae:af:6e:c1:
98:e3:5e:ad:c3:0c:8c:dc:aa:f4:77:cc:32:f9:1d:79:aa:e4:
62:18:13:3a:21:56:61:c2:6d:27:0b:ac:ff:e1:50:12:88:7a:
fe:da:59:43:95:0b:72:81:15:02:bf:0b:8c:83:a7:91:df:ac:
ad:46:0e:97:f6:de:d1:d4:80:10:b0:d8:67:a7:0b:90:85:d1:
8a:03:c1:5d:f4:d1:4c:31:cd:8c:75:9b:1d:10:f4:fb:83:49:
df:8c:2f:0a:c6:6e:d3:64:6e:3c:a7:6b:c3:0a:31:ef:8b:fc:
b7:34:16:67:41:1a:13:30:6e:1a:a4:de:03:ff:f5:e6:40:70:
11:7d:37:68:c8:ad:8e:cc:e0:49:da:70:07:da:b5:4a:91:b7:
f1:1d:65:34:d3:a1:56:0d:c4:b2:61:a7:03:55:e0:f9:5a:ae:
e6:1a:7f:12:74:88:ce:93:c3:56:cb:01:b1:f9:f5:bb:04:00:
ac:de:59:db:4a:3a:21:db:8c:8f:e6:23:98:b8:f7:a1:6c:6f:
59:32:6e:15:f9:6f:01:73:5b:7b:65:c1:b6:67:90:24:18:5f:
f3:8d:ac:39:2b:ee:fe:6e:99:dc:6a:19:a1:bf:29:5a:b8:c9:
51:ad:8c:a6
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZt8gHgwnxVa38/C8UYsP8nSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNWYwZDQ0YjIyMWY0YjExYzg5ZGI2ODk2OWY5N2MzYzcx
NTQ5MDYwHhcNMjYwMTAyMDIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDk0MmMyM2RmMjI1NWFmNTkwZmJjYjFhMTBhNjkwYmExNGZmOTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfx0UWiFh2D4idj0Quec15soWEcM
feNf+eJYO36Tf65wpXytmwdEaS0uAdhAE5i5t/pBbsyf02JP1jf3xAOjuBivT0wQ
Il86jO1E4V5v39/dhke/ihu1+ze7El8e9632ZUiZZ20KWu9hK5yZe1lLA2EFxY/M
6UPXMZnVzpePIOLwZfSIsXCVU/FYx5GOc+kcobmsbHYnTLXR4HgAOpXW5da6J/JG
ZML1x7/GIvxicKsbIXRPHtcItNFQmzwIvAPnJz2slW6qsjTJMrSx8cWlPTPnsyB6
YLsQzcaN59vIHJOMmbAW9VkAiwWh/CHtnNsiIj04Qyy5mSCXgj+Djex3hwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJCULCPfIlWvWQ+8saEKaQuhT/l2MB8GA1UdIwQY
MBaAFABfDUSyIfSxHInbaJafl8PHFUkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUY4TlJMSWg5TEVjaWR0b2xwLVh3OGNWU1FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82ODIzOWYtMDlhMy00MTA4LTg5YmEt
ZWVlNTBkZDkxOTNjLzEva0pRc0k5OGlWYTlaRDd5eG9RcHBDNkZQLVhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My82ODIzOWYtMDlhMy00MTA4LTg5YmEtZWVlNTBkZDkxOTNj
LzEvQUY4TlJMSWg5TEVjaWR0b2xwLVh3OGNWU1FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuY48MA0E
AgACMAcDBQMqByoAMA0GCSqGSIb3DQEBCwUAA4IBAQA7Zpo7f4Q9C761btSu9K6v
bsGY416twwyM3Kr0d8wy+R15quRiGBM6IVZhwm0nC6z/4VASiHr+2llDlQtygRUC
vwuMg6eR36ytRg6X9t7R1IAQsNhnpwuQhdGKA8Fd9NFMMc2MdZsdEPT7g0nfjC8K
xm7TZG48p2vDCjHvi/y3NBZnQRoTMG4apN4D//XmQHARfTdoyK2OzOBJ2nAH2rVK
kbfxHWU006FWDcSyYacDVeD5Wq7mGn8SdIjOk8NWywGx+fW7BACs3lnbSjoh24yP
5iOYuPehbG9ZMm4V+W8Bc1t7ZcG2Z5AkGF/zjaw5K+7+bpncahmhvylauMlRrYym
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:09:13 2026 by rpki-client