Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/kGE94C9BvEAQkbxYV-NajyFErRQ.roa
File: kGE94C9BvEAQkbxYV-NajyFErRQ.roa (raw, json)
Hash identifier: +pic/FN6redbOgSewE+hp04FbkYh24EDIPAZdmJ+99s=
Subject key identifier: 90:61:3D:E0:2F:41:BC:40:10:91:BC:58:57:E3:5A:8F:21:44:AD:14
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 019D8D9008C0748C797E10F4E6052AA1A806
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/kGE94C9BvEAQkbxYV-NajyFErRQ.roa
Signing time: Tue 14 Apr 2026 19:55:20 +0000
ROA not before: Tue 14 Apr 2026 19:55:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196670
IP address blocks: 91.213.26.0/24 maxlen: 24
150.175.44.0/24 maxlen: 24
150.175.45.0/24 maxlen: 24
194.36.92.0/24 maxlen: 24
195.200.254.0/23 maxlen: 23
195.200.254.0/24 maxlen: 24
195.200.255.0/24 maxlen: 24
2a04:9140:3001::/48 maxlen: 48
2a04:9140:3041::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8d:90:08:c0:74:8c:79:7e:10:f4:e6:05:2a:a1:a8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Apr 14 19:55:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90613de02f41bc401091bc5857e35a8f2144ad14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:cb:80:e6:8e:6c:ad:93:48:95:ee:7e:34:
81:64:f0:b8:58:19:73:01:7c:32:47:ec:6f:90:e2:
88:cf:fe:6b:b5:f6:f8:84:9f:f8:11:15:b6:0d:65:
e5:90:75:54:34:3b:7e:08:56:62:3c:8b:f0:96:98:
3c:8f:a5:9c:9d:56:11:5b:da:9e:4e:e5:6f:f5:18:
71:f8:68:2c:13:c1:df:34:b2:56:b8:4d:ff:0d:38:
67:c1:62:49:67:94:40:23:47:9c:a3:2f:45:64:c3:
15:41:dc:ab:a6:95:7c:3d:e9:59:b0:98:6c:57:9e:
df:05:4c:c2:00:00:1a:0c:ae:83:12:64:09:40:cb:
56:8f:43:83:2e:42:53:01:77:24:5e:de:24:f4:1f:
51:bf:50:c7:70:83:8d:b8:84:21:57:4d:a1:f4:35:
45:ba:1d:7e:d2:71:ef:83:a7:04:33:45:4c:90:a2:
d2:27:c7:62:20:4b:c5:9e:88:4e:3d:2c:8b:eb:32:
a0:bf:32:2f:3c:80:ef:cd:e6:f0:9a:0e:6a:c6:5f:
ca:8c:6e:15:e2:db:99:67:44:56:65:e0:12:0e:ae:
3c:52:68:3b:36:6d:ec:fc:97:3d:f9:7d:8f:e2:b4:
72:64:8b:8c:83:4c:98:f7:97:7f:cc:c7:33:2f:4d:
ef:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:61:3D:E0:2F:41:BC:40:10:91:BC:58:57:E3:5A:8F:21:44:AD:14
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/kGE94C9BvEAQkbxYV-NajyFErRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.26.0/24
150.175.44.0/23
194.36.92.0/24
195.200.254.0/23
IPv6:
2a04:9140:3001::/48
2a04:9140:3041::/48
Signature Algorithm: sha256WithRSAEncryption
70:6c:2a:d5:47:07:21:ff:ee:c5:ce:87:28:c5:83:b0:8b:55:
40:be:b4:ef:24:93:71:74:e7:3c:7d:17:4c:01:59:1f:8b:f2:
b8:ac:06:f2:36:1e:8d:de:ad:da:49:13:3e:35:d5:63:60:a1:
19:6c:50:53:10:dc:c7:bf:5a:30:02:ab:80:64:66:af:3a:9b:
50:90:bd:b9:b1:7a:3e:57:b4:4f:bd:fd:a9:1f:b6:c1:27:c3:
6e:b5:e2:01:2e:e7:2e:c3:b4:2d:b4:36:b8:42:c6:ac:98:e0:
d6:ec:1f:c4:38:36:85:4b:40:ab:6b:82:c8:03:ef:d1:35:51:
70:57:41:38:b2:06:a4:21:70:1b:e1:1e:ae:1a:c2:a4:78:82:
2a:0d:58:96:b6:a3:dd:02:7a:fb:37:47:61:4b:d5:0b:c6:9e:
78:90:88:33:94:2c:f8:01:ab:14:dd:7f:a5:f7:1d:ad:df:97:
0c:3c:e5:3e:d4:88:26:f2:c6:98:d9:b5:46:e3:48:a9:1b:f1:
1c:9b:53:46:e7:fd:e5:75:d9:4e:7a:55:e2:21:9c:06:3c:12:
64:3c:21:5a:89:50:26:ff:ff:5b:ec:7f:db:fb:44:b0:17:e1:
f3:41:ab:74:3f:7b:6a:b2:51:52:5c:d7:ab:f8:45:2d:45:70:
85:b2:a7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:05 2026 by rpki-client