Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/kOPeECJgf7afkCCLiHssxt-4orA.roa
File: kOPeECJgf7afkCCLiHssxt-4orA.roa (raw, json)
Hash identifier: GjGFT1vjy/jU6Jp6/gNpJX6Uz0711cTvYrio7hse2nU=
Subject key identifier: 90:E3:DE:10:22:60:7F:B6:9F:90:20:8B:88:7B:2C:C6:DF:B8:A2:B0
Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial: 01A0C46548E6E02B0C90687241C2B86F4E1F
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/kOPeECJgf7afkCCLiHssxt-4orA.roa
Signing time: Mon 21 Sep 2026 14:36:07 +0000
ROA not before: Mon 21 Sep 2026 14:36:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2906
IP address blocks: 9.187.0.0/16 maxlen: 24
9.188.0.0/16 maxlen: 24
37.77.184.0/21 maxlen: 24
185.2.220.0/22 maxlen: 24
2a00:86c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:65:48:e6:e0:2b:0c:90:68:72:41:c2:b8:6f:4e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Validity
Not Before: Sep 21 14:36:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90e3de1022607fb69f90208b887b2cc6dfb8a2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fe:82:bd:a8:7e:90:19:33:d9:d3:7c:e6:49:
15:54:7d:52:1b:cb:7b:6a:51:34:16:6a:fb:72:a3:
e5:4b:39:8f:c7:20:9f:39:a6:53:8f:60:fd:ba:ce:
97:78:b9:76:13:aa:50:7c:8e:46:3c:3c:4b:0e:1e:
ca:f5:cf:98:37:dd:5f:18:41:26:02:81:23:50:4b:
5e:e4:d9:c4:9b:86:19:27:40:d4:b2:ca:17:13:e9:
00:63:0d:fd:71:e1:a1:3e:57:a5:fc:c9:ac:1f:5d:
b5:08:2a:69:e5:f6:b0:4a:de:37:7e:eb:64:2d:6a:
3c:d9:cd:d4:44:29:dd:10:02:df:9f:dd:49:0e:17:
75:54:29:48:5b:47:ae:1c:47:26:98:bf:b2:95:43:
d1:bd:e2:1e:0c:c7:8c:12:23:b9:df:f4:69:e7:b1:
bd:54:41:b1:28:61:80:22:d9:65:27:c0:21:46:68:
98:62:2d:e4:9a:1e:b8:ea:e1:73:b4:02:a5:21:47:
87:84:db:8f:84:12:e1:a2:88:ab:b8:93:e2:03:0b:
b2:3b:a8:2b:21:f0:50:88:18:0d:63:e0:34:9b:1a:
38:7e:83:3d:f9:e0:22:50:0e:14:e2:86:70:96:ec:
c2:94:c2:a7:d8:a6:b9:8e:f6:9e:79:05:8e:0a:69:
d6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E3:DE:10:22:60:7F:B6:9F:90:20:8B:88:7B:2C:C6:DF:B8:A2:B0
X509v3 Authority Key Identifier:
keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/kOPeECJgf7afkCCLiHssxt-4orA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.187.0.0-9.188.255.255
37.77.184.0/21
185.2.220.0/22
IPv6:
2a00:86c0::/32
Signature Algorithm: sha256WithRSAEncryption
9b:da:d6:81:3e:23:6d:bf:bd:1c:28:7f:ee:4b:a9:16:f3:b4:
53:06:09:ff:8b:25:26:2a:56:7a:18:6d:f0:65:03:0c:73:f3:
14:66:63:d0:d9:b2:02:e9:f8:02:78:5d:75:0a:19:4a:45:a4:
6a:f0:f1:f3:3a:39:02:48:17:35:1e:90:62:0a:55:8b:f5:47:
80:e9:5e:c0:48:55:11:81:88:49:72:8c:a8:a5:5f:4b:04:51:
07:d9:c6:43:c7:20:da:ef:b3:d0:e5:22:f0:13:d4:22:93:93:
71:27:8c:5f:78:60:de:cd:4e:0d:99:25:45:f0:2f:30:52:b5:
e7:e7:33:53:c4:24:8f:6a:1d:7e:a2:e3:fb:89:8b:73:92:49:
4d:75:55:0a:2e:3d:3b:b9:cb:61:20:43:6d:ad:d1:d0:5b:85:
b8:d7:2a:4d:4c:a5:0c:68:fb:fb:f0:44:d4:59:c2:aa:34:de:
5a:a1:c6:33:df:08:86:f7:ca:40:21:54:e9:2f:ac:bc:d3:c8:
2a:bf:28:3b:81:2b:07:54:14:f7:6d:77:73:36:31:9b:80:76:
0d:13:ae:10:bc:98:25:c3:78:a5:17:01:05:06:af:ea:64:4b:
45:2c:e7:3b:ef:00:26:c2:4c:c9:33:73:e9:d1:9b:a4:db:9b:
ed:5b:34:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:46:03 2026 by rpki-client