Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/kHJhYp0Gk7MkSEHSoaUuycqiMho.roa
File: kHJhYp0Gk7MkSEHSoaUuycqiMho.roa (raw, json)
Hash identifier: dk4fLBFBDEZvwQ4ggVX6kdtLMl/ei4cWle9/Kx/kB68=
Subject key identifier: 90:72:61:62:9D:06:93:B3:24:48:41:D2:A1:A5:2E:C9:CA:A2:32:1A
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A0EBBDB9B3357947A16626DB1C56C9A785
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/kHJhYp0Gk7MkSEHSoaUuycqiMho.roa
Signing time: Tue 29 Sep 2026 05:57:54 +0000
ROA not before: Tue 29 Sep 2026 05:57:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 91.227.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:bd:b9:b3:35:79:47:a1:66:26:db:1c:56:c9:a7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 29 05:57:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=907261629d0693b3244841d2a1a52ec9caa2321a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b0:03:19:ce:9c:0b:3f:75:b1:d2:80:ea:74:
d7:80:38:46:92:43:e0:5e:7e:37:d8:da:46:b1:fb:
59:12:c8:54:8b:e8:e7:16:7f:04:fb:0d:2c:1e:18:
b2:92:73:ae:29:0a:90:8f:e9:75:f0:79:2b:34:28:
00:4b:c7:01:3d:0d:11:84:57:cf:cb:ca:d9:86:96:
34:b5:ec:4e:1b:5e:92:c7:d4:a0:27:48:82:6b:46:
c6:80:b7:d0:1b:71:9e:b2:3b:98:2b:da:02:02:55:
85:fc:04:e2:b8:ea:db:d9:b5:73:f6:46:bb:30:3f:
96:d8:29:d1:f7:db:27:83:97:42:b1:4d:61:21:ae:
8d:0d:c8:7a:fc:af:03:41:84:f7:29:f6:44:1f:ad:
6e:8d:eb:7a:fa:cb:3a:76:09:77:49:69:29:83:aa:
80:4a:07:2a:32:3d:09:98:bd:5b:ad:08:63:fd:75:
76:9a:77:06:bd:94:79:c2:d5:98:60:2c:ba:a8:0f:
14:eb:84:aa:54:97:f2:63:13:03:2e:72:de:39:42:
05:83:fb:5b:6d:6e:0b:f2:2c:50:9d:bb:2c:bb:6b:
95:5a:7a:4c:fb:0c:05:4c:59:0f:20:d9:81:18:93:
09:7b:2a:af:ec:f4:74:13:66:8d:23:9b:8f:89:82:
43:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:72:61:62:9D:06:93:B3:24:48:41:D2:A1:A5:2E:C9:CA:A2:32:1A
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/kHJhYp0Gk7MkSEHSoaUuycqiMho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.114.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:f8:d5:57:8d:67:0e:40:3b:c9:dd:e5:c6:af:22:44:9b:a8:
13:28:4a:5d:e6:aa:51:a9:9f:55:59:bd:5e:d0:83:63:04:d3:
7f:07:ea:f5:6f:ef:fe:af:ca:ae:23:cb:f6:91:52:5b:7d:ed:
05:56:ed:4f:a8:c6:4b:f1:61:aa:56:7e:29:e7:8e:d5:aa:35:
d4:e3:4c:ea:b2:67:1c:57:9f:58:b0:76:7a:73:b9:45:ef:85:
ea:00:a9:dc:9a:06:b7:59:ca:2a:e4:13:e1:06:32:f1:1d:79:
d5:de:65:a5:70:68:77:a2:56:09:b5:29:a0:e2:df:42:3d:aa:
de:ac:59:4a:ca:3b:47:1b:fe:50:c3:06:a6:04:72:95:33:30:
11:e5:f9:d1:16:61:2d:52:a0:63:f4:23:a1:8a:85:93:69:5c:
67:43:ab:89:4e:b8:fd:04:44:09:a5:c7:e4:52:61:69:33:9c:
03:52:a6:51:b5:ee:94:39:33:29:fa:82:4e:33:c5:a1:78:3b:
df:8a:f3:34:10:88:40:ea:c6:e9:55:62:a4:23:18:fd:ad:26:
12:59:1b:8f:eb:1c:4c:ac:be:ee:f6:c9:85:27:dd:42:fc:1a:
80:6c:0b:3d:04:42:92:d2:e2:1b:9c:4a:04:93:da:64:0c:10:
7f:01:8b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 03:15:09 2026 by rpki-client