Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/kRlFVNbb0EqlCfxbKbDmKPyFtb8.roa
File: kRlFVNbb0EqlCfxbKbDmKPyFtb8.roa (raw, json)
Hash identifier: Tu/nrtl4EiStLNGdg0NlVDGoxefqIu/6w4Wj2qJVFeQ=
Subject key identifier: 91:19:45:54:D6:DB:D0:4A:A5:09:FC:5B:29:B0:E6:28:FC:85:B5:BF
Certificate issuer: /CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Certificate serial: 01A0B4EBCD35F185354C14E33B9049239A81
Authority key identifier: F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/kRlFVNbb0EqlCfxbKbDmKPyFtb8.roa
Signing time: Fri 18 Sep 2026 14:29:07 +0000
ROA not before: Fri 18 Sep 2026 14:29:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218678
IP address blocks: 91.202.214.0/24 maxlen: 24
91.244.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:eb:cd:35:f1:85:35:4c:14:e3:3b:90:49:23:9a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Validity
Not Before: Sep 18 14:29:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91194554d6dbd04aa509fc5b29b0e628fc85b5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:8e:f7:88:d8:92:65:92:65:af:ff:86:13:
26:56:b4:25:fb:e3:03:7b:df:cd:56:c9:31:45:b2:
f1:74:73:38:e8:f6:93:56:45:3c:f3:c4:67:7b:95:
23:35:d6:73:c3:dc:f5:ec:08:41:93:10:fa:41:e0:
7d:39:49:3e:bd:79:5f:f9:e7:ce:c4:9c:df:69:c2:
ea:59:5e:f3:9f:22:ae:39:26:27:f8:68:09:93:be:
a1:19:5a:a6:ad:43:a3:ea:5a:2e:a0:cf:0a:07:53:
82:5f:61:70:35:dd:5e:bd:2f:0a:7b:e3:9d:a5:a0:
56:9b:33:ef:59:a3:c4:6a:90:f8:21:fe:d4:62:21:
b5:2a:d4:e9:c0:a8:1d:57:b7:0c:89:23:1a:42:b1:
2d:24:54:e5:6e:4e:84:94:1f:ed:8e:2f:a7:e7:75:
94:b7:cd:2c:ee:ef:13:fa:a9:aa:ec:c3:36:94:99:
66:47:5c:2f:fa:db:39:91:38:f0:c2:47:93:33:c6:
20:9e:77:27:da:16:6a:d8:ab:83:61:28:91:92:af:
3e:a9:c4:1f:fb:33:9d:5f:39:34:55:87:b2:a7:97:
82:b2:89:39:6f:19:3a:26:5a:4b:16:a0:2d:e1:8f:
98:3c:e8:a9:c6:41:72:a0:b6:91:04:65:09:60:d5:
42:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:19:45:54:D6:DB:D0:4A:A5:09:FC:5B:29:B0:E6:28:FC:85:B5:BF
X509v3 Authority Key Identifier:
keyid:F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/kRlFVNbb0EqlCfxbKbDmKPyFtb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.214.0/24
91.244.144.0/23
Signature Algorithm: sha256WithRSAEncryption
72:76:0f:38:82:aa:9a:69:e6:99:80:8e:99:4d:7e:3d:9f:12:
1e:f7:63:1e:d5:2e:c0:b5:8e:f3:1a:dd:71:10:65:e3:a1:db:
3c:2a:41:74:cf:7e:22:66:6c:3e:54:48:ff:9e:1a:0c:d5:f7:
7a:a0:f5:4a:5c:d4:6f:53:70:2d:33:d8:9c:4e:0e:f3:af:10:
38:50:3a:63:53:f3:af:47:49:03:81:96:c4:13:5b:2e:51:53:
db:51:a7:12:9e:4d:1b:b2:9c:ff:55:f7:4d:de:58:6c:0c:c2:
90:37:1e:e3:54:ee:0d:75:b2:c6:f0:37:02:37:ed:c3:68:fd:
28:19:e2:a7:3a:82:c0:17:7a:a1:ed:27:34:20:35:ab:56:18:
c1:34:c7:2b:9d:f0:93:9e:f5:57:72:8a:73:89:a3:75:27:eb:
7a:eb:39:47:f3:73:b1:ff:bd:68:2d:74:5d:a3:a0:34:7b:6c:
9b:89:75:0b:1b:0e:57:1b:b0:83:fb:21:1d:43:99:8f:dd:74:
44:73:a6:5d:9d:b8:82:30:b9:16:d3:d2:9d:5e:8a:98:2f:54:
f5:3e:ef:ef:d2:57:4f:c7:89:55:02:18:77:a2:e8:24:38:e3:
4e:95:44:38:71:72:ba:16:67:bf:9b:13:88:71:0b:5b:38:72:
86:1e:d4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:04:42 2026 by rpki-client