Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/kG5r4M7vL0g0ERFaBEW96gIBEvc.roa
File: kG5r4M7vL0g0ERFaBEW96gIBEvc.roa (raw, json)
Hash identifier: kKKMoGzt2uOeJqgdnHsPG56fjNKaGYn/UtCz+xqiuPc=
Subject key identifier: 90:6E:6B:E0:CE:EF:2F:48:34:11:11:5A:04:45:BD:EA:02:01:12:F7
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019C8F0A0F27EF77E971C8259A56A92BEF4C
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/kG5r4M7vL0g0ERFaBEW96gIBEvc.roa
Signing time: Tue 24 Feb 2026 09:45:26 +0000
ROA not before: Tue 24 Feb 2026 09:45:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215152
IP address blocks: 31.42.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:0a:0f:27:ef:77:e9:71:c8:25:9a:56:a9:2b:ef:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Feb 24 09:45:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=906e6be0ceef2f483411115a0445bdea020112f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:f6:6a:03:e3:1e:4c:68:fe:12:e7:b9:4b:
6d:d5:71:f3:8d:7e:87:9c:c0:6d:50:ba:4f:c8:25:
93:9a:61:35:67:81:41:49:83:36:0e:c4:c6:23:ef:
1b:62:5f:11:88:30:81:fb:33:d3:66:ec:02:f2:0f:
a8:92:fc:d4:5e:dc:3c:8c:e0:40:e7:0b:4a:3a:52:
ed:b9:37:cd:c3:b5:7b:1c:8e:46:88:ad:e7:2a:94:
c2:4a:23:43:be:a8:42:49:36:f4:33:28:0c:1f:2d:
8b:cf:61:07:97:5f:ce:c4:05:e6:f7:6d:5b:71:eb:
4c:90:99:c6:26:d2:63:97:73:fd:14:20:14:25:72:
d6:b3:21:7b:b7:39:8b:3e:ab:00:df:98:a5:b8:fe:
7c:d0:68:32:59:f3:83:bd:8a:90:a1:bb:3a:b9:b0:
e2:67:71:6b:a7:69:b4:34:d3:ec:cb:a8:68:0e:cc:
fe:c5:69:ee:fc:49:35:cd:a6:13:ac:f2:c7:ba:89:
13:02:d7:d9:dc:40:1d:c5:7d:e5:13:ce:7c:3f:c5:
17:ab:73:21:22:a2:15:7b:36:40:16:86:fc:a1:87:
11:80:cb:8f:f8:c9:40:1a:9f:3a:c7:aa:fa:8f:a8:
fc:06:42:ae:e7:be:75:95:aa:25:20:39:48:8d:05:
45:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6E:6B:E0:CE:EF:2F:48:34:11:11:5A:04:45:BD:EA:02:01:12:F7
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/kG5r4M7vL0g0ERFaBEW96gIBEvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.123.0/24
Signature Algorithm: sha256WithRSAEncryption
05:7c:63:b8:cd:0c:4a:9a:66:97:f6:aa:9d:33:cf:1f:ee:cf:
ff:2d:a4:73:dc:31:d9:c4:9a:31:c7:93:46:0f:52:d1:ed:cb:
0e:d9:27:5b:b0:57:1a:d5:0f:e9:ff:63:ef:68:9f:84:d4:36:
28:1e:d7:8f:c3:69:6f:b1:d8:65:73:4f:97:24:9f:8c:df:a4:
39:d0:66:4a:89:8e:66:bd:11:40:7c:0a:27:28:bc:60:3b:12:
f6:8e:8d:98:9d:dd:75:a1:25:86:c0:02:1c:6d:d8:5b:c2:4f:
2b:7c:b6:cf:77:8e:4d:73:c9:2d:6d:25:52:46:89:ba:13:19:
a7:9d:ca:9d:98:54:8b:6a:52:57:b7:c1:5b:c3:1e:b1:dd:bd:
af:56:5d:ac:2a:73:a6:e0:88:31:7d:67:ca:93:15:bd:85:27:
86:db:e5:d5:e2:88:af:47:1f:ed:da:34:51:9f:ca:8f:7d:a4:
c5:7d:d6:88:43:8a:14:18:91:a3:64:94:3b:7f:0e:be:a4:8b:
eb:7b:e4:c8:ed:1f:6e:5b:4d:d4:8a:30:27:5b:21:96:7b:74:
7a:91:84:27:fe:26:74:fb:69:f6:ee:27:fd:04:6b:17:91:9b:
a9:dc:54:ca:41:fa:a0:c9:f7:91:74:3b:43:94:58:61:db:90:
35:7c:a1:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyPCg8n73fpccglmlapK+9MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1
ZTNmOTgwHhcNMjYwMjI0MDk0NTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDZlNmJlMGNlZWYyZjQ4MzQxMTExNWEwNDQ1YmRlYTAyMDExMmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJn2agPjHkxo/hLnuUtt1XHzjX6H
nMBtULpPyCWTmmE1Z4FBSYM2DsTGI+8bYl8RiDCB+zPTZuwC8g+okvzUXtw8jOBA
5wtKOlLtuTfNw7V7HI5GiK3nKpTCSiNDvqhCSTb0MygMHy2Lz2EHl1/OxAXm921b
cetMkJnGJtJjl3P9FCAUJXLWsyF7tzmLPqsA35iluP580GgyWfODvYqQobs6ubDi
Z3Frp2m0NNPsy6hoDsz+xWnu/Ek1zaYTrPLHuokTAtfZ3EAdxX3lE858P8UXq3Mh
IqIVezZAFob8oYcRgMuP+MlAGp86x6r6j6j8BkKu5751laolIDlIjQVFbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJBua+DO7y9INBERWgRFveoCARL3MB8GA1UdIwQY
MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt
OWNkNjYyYmM4MzIwLzEva0c1cjRNN3ZMMGcwRVJGYUJFVzk2Z0lCRXZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw
LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyp7MA0G
CSqGSIb3DQEBCwUAA4IBAQAFfGO4zQxKmmaX9qqdM88f7s//LaRz3DHZxJoxx5NG
D1LR7csO2SdbsFca1Q/p/2PvaJ+E1DYoHtePw2lvsdhlc0+XJJ+M36Q50GZKiY5m
vRFAfAonKLxgOxL2jo2Ynd11oSWGwAIcbdhbwk8rfLbPd45Nc8ktbSVSRom6Exmn
ncqdmFSLalJXt8Fbwx6x3b2vVl2sKnOm4IgxfWfKkxW9hSeG2+XV4oivRx/t2jRR
n8qPfaTFfdaIQ4oUGJGjZJQ7fw6+pIvre+TI7R9uW03UijAnWyGWe3R6kYQn/iZ0
+2n27if9BGsXkZup3FTKQfqgyfeRdDtDlFhh25A1fKHE
-----END CERTIFICATE-----
Generated at Thu Feb 26 09:19:47 2026 by rpki-client