Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/k_p0G99T-kOb8IDRnsd82pe43DM.roa
File: k_p0G99T-kOb8IDRnsd82pe43DM.roa (raw, json)
Hash identifier: fAHyhB6wFFezzUaln2OnR6OxOwi0d6bOr/s4KfY2WbI=
Subject key identifier: 93:FA:74:1B:DF:53:FA:43:9B:F0:80:D1:9E:C7:7C:DA:97:B8:DC:33
Certificate issuer: /CN=918fa640f83c482ac95ac905174b5237d768379b
Certificate serial: 019F23690140CA32A1375A5F3E9902FB4EBD
Authority key identifier: 91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/k_p0G99T-kOb8IDRnsd82pe43DM.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197075
IP address blocks: 5.183.111.0/24 maxlen: 24
185.25.233.0/24 maxlen: 24
185.198.210.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:01:40:ca:32:a1:37:5a:5f:3e:99:02:fb:4e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918fa640f83c482ac95ac905174b5237d768379b
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93fa741bdf53fa439bf080d19ec77cda97b8dc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:fe:4a:18:d1:07:2e:b6:86:c8:09:5e:15:
a1:65:30:98:32:f3:4d:56:af:01:7d:15:ef:fa:66:
3b:7c:44:9b:6c:83:4d:f1:33:6f:1e:96:9d:78:78:
64:1a:f2:fa:35:10:3d:9c:ae:86:8e:07:35:ac:50:
17:f5:79:b1:d1:ea:ee:c2:09:b2:28:6f:a7:7f:4e:
3d:f2:6b:b3:fc:2e:7e:97:8d:6a:b9:db:3c:c6:bd:
6c:d2:74:91:94:82:cb:7a:af:d6:bf:05:cd:4e:ba:
28:a3:41:81:52:72:be:05:cc:28:5c:73:0e:4f:1e:
db:94:5c:73:e5:30:2e:67:8e:a1:1a:8c:34:2c:04:
78:af:f8:d7:10:dc:26:3f:06:c9:07:e0:33:24:35:
7d:a5:c3:fc:a1:ed:2e:75:9e:4f:8d:8e:dc:e0:09:
c9:e1:5e:3c:7c:af:f2:eb:6c:05:15:a8:19:55:57:
27:af:3e:03:f7:45:b6:62:04:2e:21:be:16:2b:00:
6d:23:9e:b2:55:9f:ee:01:94:1b:57:0a:10:fa:a6:
cd:33:d8:cf:43:a8:fc:dd:6c:da:35:6b:95:14:96:
92:d0:07:cc:70:44:61:9f:35:e5:a6:76:3f:77:de:
f7:99:d2:67:1f:e4:ff:33:93:3f:3b:3f:80:80:5b:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FA:74:1B:DF:53:FA:43:9B:F0:80:D1:9E:C7:7C:DA:97:B8:DC:33
X509v3 Authority Key Identifier:
keyid:91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/k_p0G99T-kOb8IDRnsd82pe43DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.111.0/24
185.25.233.0/24
185.198.210.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:82:04:83:70:79:19:b7:22:ea:4e:9f:d9:b9:79:b3:b8:ea:
b7:d6:20:d9:d4:e1:02:8f:4c:3e:dc:e8:aa:f3:fc:aa:ad:d6:
65:3c:7b:e0:8b:cd:7b:bd:0a:4a:b4:56:7d:8f:c9:63:c5:2d:
55:41:0b:d5:02:ea:39:fc:f9:05:5f:4f:44:e9:9f:8e:57:46:
1c:92:fa:6e:fe:ea:31:50:dd:d3:d8:a2:b3:95:23:e6:c8:d0:
43:2d:fb:cf:ac:5a:71:9f:ab:d8:10:7d:b9:d3:8b:2f:9d:11:
92:0f:09:d7:26:18:19:d2:8f:4b:63:2e:46:4b:7b:d0:36:f0:
fd:1d:c4:89:2a:63:bf:79:f4:75:6f:5b:d6:ea:51:20:f2:73:
44:2c:de:77:50:7b:15:5a:2c:c5:84:3d:e2:1f:06:ad:7b:6f:
93:70:8e:e0:d6:e4:fb:16:83:15:f6:3c:6a:98:3f:5e:4e:ee:
01:2e:7a:f6:3f:aa:49:8d:4f:b6:57:e2:2a:3f:61:db:6c:56:
a8:88:9b:a3:ed:b8:3a:9b:5f:d9:de:fc:f2:fa:cc:f3:6f:c8:
a9:02:da:62:2a:07:c5:31:26:89:b1:ae:36:eb:8b:95:66:27:
b6:4e:57:05:14:4a:29:24:70:32:32:67:0a:8e:a4:dd:b6:c4:
15:c3:53:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:13:01 2026 by rpki-client