Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/kc-jaUVimyh7h7ZPoNuGNT6F-Uw.roa
File: kc-jaUVimyh7h7ZPoNuGNT6F-Uw.roa (raw, json)
Hash identifier: ntudmzWpvPZIJiKJAFzm/9dUZxLPcjchhqmnjmjWXog=
Subject key identifier: 91:CF:A3:69:45:62:9B:28:7B:87:B6:4F:A0:DB:86:35:3E:85:F9:4C
Certificate issuer: /CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Certificate serial: 019B7F83C4F20B0BF8F16F16590E9F6C5421
Authority key identifier: 25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/kc-jaUVimyh7h7ZPoNuGNT6F-Uw.roa
Signing time: Fri 02 Jan 2026 16:21:40 +0000
ROA not before: Fri 02 Jan 2026 16:21:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12985
IP address blocks: 91.206.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:c4:f2:0b:0b:f8:f1:6f:16:59:0e:9f:6c:54:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Validity
Not Before: Jan 2 16:21:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91cfa36945629b287b87b64fa0db86353e85f94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:67:cc:60:0b:cc:ed:ea:c0:2f:7d:f4:b6:
66:3c:85:f4:5d:4e:c5:89:a3:b7:e4:da:73:e3:b9:
db:d9:26:5e:b1:d9:a6:40:57:4b:b3:3c:67:7d:d1:
e5:ef:d1:e1:a9:a1:20:cd:52:ea:9f:31:99:29:af:
88:6c:5e:4f:62:e3:ab:0a:67:d1:36:35:1a:42:71:
ee:e4:7f:a6:21:dd:3a:0c:a5:f0:66:fa:f1:48:b8:
52:6f:f7:70:75:e0:42:e9:80:f3:0d:f7:a1:b2:96:
be:74:c0:bf:a9:43:44:56:87:c2:a8:68:19:0d:6b:
c6:66:57:61:ee:d0:40:5e:89:25:d7:ea:aa:c7:c0:
55:a7:0d:8d:32:15:d2:7b:28:36:e5:59:1c:18:29:
99:29:1b:a8:da:df:cd:27:e6:7c:3a:3f:82:f8:f1:
3e:c1:59:12:d8:9a:d8:29:d3:42:97:ad:a7:cb:3e:
73:a8:fd:d3:56:7c:1b:d3:ad:84:ed:25:d7:c2:3f:
44:73:d4:24:af:53:0d:e4:d1:39:29:b1:a8:cb:b7:
50:eb:f3:58:83:3d:23:36:43:05:0a:a4:01:e8:19:
fe:24:8c:e5:3a:d1:57:c3:13:e9:ce:05:82:59:e4:
5d:30:cc:68:e8:a6:9d:d5:be:7b:c1:e3:2c:71:74:
51:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CF:A3:69:45:62:9B:28:7B:87:B6:4F:A0:DB:86:35:3E:85:F9:4C
X509v3 Authority Key Identifier:
keyid:25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/kc-jaUVimyh7h7ZPoNuGNT6F-Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.180.0/24
Signature Algorithm: sha256WithRSAEncryption
23:e4:b1:f7:96:f5:58:60:5e:13:c0:5a:ea:fd:ae:35:77:29:
54:43:14:6e:d2:3c:a8:8c:38:e7:80:82:44:e2:68:32:6b:ab:
0b:0b:b6:aa:cb:ed:79:6b:28:40:e7:c0:d3:b7:8b:29:12:bf:
a5:21:19:3d:93:16:d8:e4:83:24:4b:da:0e:be:82:94:90:d6:
ac:64:c4:64:60:57:df:0c:db:27:36:a4:67:f5:89:85:a6:4c:
7d:50:90:26:2e:04:aa:20:8d:f3:09:9f:2e:df:c7:a2:0b:7b:
5e:42:03:58:34:62:c4:a4:94:53:b8:c7:54:6c:67:ea:04:70:
09:31:1a:f9:6a:28:e5:a7:21:9a:af:49:af:4b:7b:71:9b:81:
28:e6:7b:c3:5f:0f:14:c5:25:cd:17:8e:0d:dc:fa:ef:35:40:
3b:bd:23:03:24:de:c0:80:5f:74:61:01:48:be:60:b5:c4:cb:
d5:bd:33:97:de:14:86:33:d4:23:fc:10:f3:9c:ea:d3:fc:1e:
0f:50:80:fd:7b:4d:83:2b:0b:f8:bf:5d:e3:8e:c5:e5:72:a0:
26:c6:55:ef:61:36:60:5c:97:a9:32:f5:da:b2:d3:2e:b2:f7:
3c:e9:02:66:d7:aa:80:88:8d:31:cf:0d:68:1b:48:dd:29:b2:
79:58:86:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/g8TyCwv48W8WWQ6fbFQhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YzUyNjg3YTVmZjE2MWQyZWRhYmM5ZjhlM2E0ODc2YzRh
ZDhkYTIwHhcNMjYwMTAyMTYyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWNmYTM2OTQ1NjI5YjI4N2I4N2I2NGZhMGRiODYzNTNlODVmOTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnutnzGALzO3qwC999LZmPIX0XU7F
iaO35Npz47nb2SZesdmmQFdLszxnfdHl79HhqaEgzVLqnzGZKa+IbF5PYuOrCmfR
NjUaQnHu5H+mId06DKXwZvrxSLhSb/dwdeBC6YDzDfehspa+dMC/qUNEVofCqGgZ
DWvGZldh7tBAXokl1+qqx8BVpw2NMhXSeyg25VkcGCmZKRuo2t/NJ+Z8Oj+C+PE+
wVkS2JrYKdNCl62nyz5zqP3TVnwb062E7SXXwj9Ec9Qkr1MN5NE5KbGoy7dQ6/NY
gz0jNkMFCqQB6Bn+JIzlOtFXwxPpzgWCWeRdMMxo6Kad1b57weMscXRR9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJHPo2lFYpsoe4e2T6DbhjU+hflMMB8GA1UdIwQY
MBaAFCXFJoel/xYdLtq8n446SHbErY2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmNVbWg2WF9GaDB1MnJ5ZmpqcElkc1N0amFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81OTY1MDYtNWFjNi00OWIzLWJkNzAt
NzVkYWU1ZGRmZWQzLzEva2MtamFVVmlteWg3aDdaUG9OdUdOVDZGLVV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81OTY1MDYtNWFjNi00OWIzLWJkNzAtNzVkYWU1ZGRmZWQz
LzEvSmNVbWg2WF9GaDB1MnJ5ZmpqcElkc1N0amFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW860MA0G
CSqGSIb3DQEBCwUAA4IBAQAj5LH3lvVYYF4TwFrq/a41dylUQxRu0jyojDjngIJE
4mgya6sLC7aqy+15ayhA58DTt4spEr+lIRk9kxbY5IMkS9oOvoKUkNasZMRkYFff
DNsnNqRn9YmFpkx9UJAmLgSqII3zCZ8u38eiC3teQgNYNGLEpJRTuMdUbGfqBHAJ
MRr5aijlpyGar0mvS3txm4Eo5nvDXw8UxSXNF44N3PrvNUA7vSMDJN7AgF90YQFI
vmC1xMvVvTOX3hSGM9Qj/BDznOrT/B4PUID9e02DKwv4v13jjsXlcqAmxlXvYTZg
XJepMvXastMusvc86QJm16qAiI0xzw1oG0jdKbJ5WIY3
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:22:31 2026 by rpki-client