Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/kVAfxl6uvYyBoV4w-5-rO18bHWU.roa
File: kVAfxl6uvYyBoV4w-5-rO18bHWU.roa (raw, json)
Hash identifier: aoo8UNswT6KVrLuUJujKYinMkhnjHoNIus8FSV2dfzI=
Subject key identifier: 91:50:1F:C6:5E:AE:BD:8C:81:A1:5E:30:FB:9F:AB:3B:5F:1B:1D:65
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 019C78FBC9D658B38D28F9BF4B014D090CD2
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/kVAfxl6uvYyBoV4w-5-rO18bHWU.roa
Signing time: Fri 20 Feb 2026 02:58:12 +0000
ROA not before: Fri 20 Feb 2026 02:58:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 37.148.218.0/23 maxlen: 24
185.11.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:78:fb:c9:d6:58:b3:8d:28:f9:bf:4b:01:4d:09:0c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Feb 20 02:58:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91501fc65eaebd8c81a15e30fb9fab3b5f1b1d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b3:95:1a:fc:f6:cf:fc:12:16:ec:d4:7d:5e:
8e:b7:a2:e3:f4:c4:f1:3a:9f:d6:39:25:23:f6:4f:
c9:4d:53:dc:6c:32:74:c4:6a:c6:c7:bf:b1:1f:6c:
ab:8f:5c:b2:e3:be:64:05:8d:a7:70:d9:85:7f:41:
96:70:80:ea:c6:9a:fc:72:28:66:2d:18:4a:9b:19:
b0:b2:d1:84:23:cf:16:46:17:54:5f:b4:97:93:c6:
1a:04:b3:97:33:b9:d4:cd:5b:3f:e3:2a:a8:6e:a7:
b7:de:61:32:37:08:04:28:d8:19:91:9f:2b:04:7b:
b3:82:7c:b0:5f:e4:9d:92:e9:c9:1a:36:d3:16:b3:
90:22:e8:bd:be:7b:98:0d:f9:66:66:ec:7f:7f:4d:
09:fb:fe:bf:32:ef:d8:c4:59:44:39:f0:d9:17:f8:
00:8b:fa:f8:f3:9a:ae:35:0e:43:dc:b3:49:9d:ce:
89:5f:86:2c:e8:4d:65:2a:f6:e0:b6:6c:25:e1:a6:
b0:dd:5a:d9:f2:ac:28:05:2c:aa:16:63:dd:75:26:
52:44:51:fe:d4:25:1b:b2:6a:d5:52:37:95:0a:c1:
b0:e0:0f:7e:4b:f9:f9:92:76:0d:65:76:77:f3:c9:
a3:29:a9:88:05:d9:ed:47:b1:bb:b2:20:85:a6:b6:
0d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:50:1F:C6:5E:AE:BD:8C:81:A1:5E:30:FB:9F:AB:3B:5F:1B:1D:65
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/kVAfxl6uvYyBoV4w-5-rO18bHWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.218.0/23
185.11.142.0/23
Signature Algorithm: sha256WithRSAEncryption
91:50:a6:2d:00:24:99:47:a4:ca:f0:3f:1c:d9:16:69:ff:63:
94:17:7a:a7:aa:02:78:7f:d6:64:92:a0:2d:de:bf:96:ba:4a:
35:f2:24:32:5c:a9:28:54:a0:d7:aa:ed:ea:2f:4e:6b:7f:1f:
79:66:69:88:16:52:49:b1:c8:49:54:26:6e:2e:36:3f:51:3b:
66:cd:a7:d9:11:7a:7e:13:82:a3:b5:ff:47:97:3e:ff:a0:4f:
24:2b:b6:5e:06:a8:02:01:bd:17:b6:c9:a3:db:48:5b:ec:41:
76:11:86:43:07:5d:ee:e1:48:ed:be:60:ef:43:ff:31:43:3c:
32:2a:2d:6e:d9:e4:6e:10:f2:6a:90:63:b2:69:85:32:56:b5:
5d:26:ef:17:25:42:a1:93:bb:93:e2:17:1b:3a:e0:a4:0b:90:
3f:4b:be:fc:8e:c2:e4:f7:87:00:89:de:aa:f5:99:98:26:86:
8a:95:d1:12:39:b9:4b:44:30:fa:24:91:ab:82:ac:11:fc:ae:
ce:2a:da:41:88:3f:54:1f:48:e2:79:66:84:3d:d3:0d:b8:6b:
9f:b8:70:00:92:4a:4f:85:f6:7b:7c:9d:e1:de:44:50:8e:45:
65:81:ec:6b:1a:c7:be:20:dd:aa:82:e3:65:80:3a:69:03:e0:
eb:6d:3a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:51:08 2026 by rpki-client