Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/klEpgcDgV3MNJLywxR3-VstKMaE.roa
File: klEpgcDgV3MNJLywxR3-VstKMaE.roa (raw, json)
Hash identifier: 76nMpG3WoKqOfhqvdWfqDmfgIocWXvBNiYDORl3wdTo=
Subject key identifier: 92:51:29:81:C0:E0:57:73:0D:24:BC:B0:C5:1D:FE:56:CB:4A:31:A1
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 019C4F89BF2CF39F7FAE0F4A4CB1B1376BB0
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/klEpgcDgV3MNJLywxR3-VstKMaE.roa
Signing time: Thu 12 Feb 2026 01:49:13 +0000
ROA not before: Thu 12 Feb 2026 01:49:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63150
IP address blocks: 77.93.89.0/24 maxlen: 24
77.93.90.0/24 maxlen: 24
85.149.208.0/22 maxlen: 24
2a14:7dc0:200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4f:89:bf:2c:f3:9f:7f:ae:0f:4a:4c:b1:b1:37:6b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Feb 12 01:49:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92512981c0e057730d24bcb0c51dfe56cb4a31a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:6a:d4:88:5d:bc:64:a0:fd:1a:59:c7:84:
fc:1c:cc:53:29:60:27:20:34:8f:cb:45:2f:41:e2:
54:f8:76:e5:73:35:7b:f0:f9:11:b1:cc:b8:b3:65:
06:a6:7f:3a:1c:30:e6:06:7b:95:1b:52:87:1b:23:
98:fa:8e:bc:5a:4c:87:83:93:9e:73:40:26:92:8f:
02:13:06:ad:5b:9d:eb:14:49:e0:3a:88:da:83:1b:
7d:5f:a4:bc:bd:ee:2c:14:a2:b2:c5:21:4b:d5:86:
2d:40:20:b8:2c:db:b3:86:cc:f8:97:1a:54:f0:3c:
94:6e:4e:ab:24:97:7b:23:13:b0:f4:9e:0e:28:fd:
a3:a4:8d:a4:80:a1:e3:a1:0e:3e:07:ef:91:e1:b4:
c4:f4:78:85:c0:97:9d:a3:04:e3:a8:b8:54:db:dc:
e5:50:cf:d8:99:4e:dc:ed:8a:90:a9:fd:59:6d:6f:
a2:da:c1:36:b0:98:9b:2e:0e:f2:47:8c:a4:10:76:
ab:a1:85:96:b9:3a:c0:c1:a0:5e:dc:27:f0:59:b8:
ab:ad:c9:28:b7:ab:26:5f:2b:60:71:a3:4c:82:d8:
25:ae:4b:f3:5f:5a:98:6e:e2:f9:3b:52:5f:e4:51:
cc:fb:51:0e:de:fa:52:73:f7:a2:78:22:a8:1d:f1:
c8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:51:29:81:C0:E0:57:73:0D:24:BC:B0:C5:1D:FE:56:CB:4A:31:A1
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/klEpgcDgV3MNJLywxR3-VstKMaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.89.0-77.93.90.255
85.149.208.0/22
IPv6:
2a14:7dc0:200::/40
Signature Algorithm: sha256WithRSAEncryption
3f:a1:bd:46:53:ec:31:05:3c:86:3e:80:ab:e3:d5:9b:83:ba:
6d:7d:f3:ac:6c:25:b4:e5:6f:07:10:4f:16:3c:6e:cf:96:af:
94:e9:8b:96:18:3e:03:a6:2f:d3:1e:26:a6:df:4b:fd:d1:d2:
cf:22:d9:7e:5d:d9:fe:55:35:11:00:68:ee:88:5c:57:ac:d8:
5e:be:7b:1f:4e:b5:9d:eb:ee:b8:84:36:6d:e5:a9:4e:3a:c2:
3b:cf:4c:4c:ee:6a:5e:de:30:aa:db:d4:93:c5:1a:e3:25:d4:
20:13:bb:48:34:a9:9a:d5:7e:c3:3b:ac:0b:78:a6:0b:88:f2:
5d:1a:06:e9:58:15:7d:c9:a9:b0:9b:70:10:68:06:74:8f:c6:
7a:0a:27:b8:34:5d:ba:41:f9:1f:4f:36:dc:d0:69:b6:6e:50:
22:1d:e0:50:af:b0:1a:d7:af:25:59:ad:ca:ca:15:29:41:de:
ed:5e:80:ae:7b:6d:1c:4c:00:94:ac:05:9c:34:82:f7:cd:9f:
71:76:67:64:05:8a:69:ef:d5:4c:3e:34:83:b8:4c:4f:06:1c:
8a:92:36:f0:70:37:fa:f0:4c:67:09:b7:97:74:c9:d0:7d:55:
ff:a1:47:67:70:9e:4c:e8:87:84:1d:dd:91:7d:b0:87:27:56:
d7:26:36:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:02 2026 by rpki-client