Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/kJBGk5-GhB4a1moWN-Nb8HzFpAo.roa
File: kJBGk5-GhB4a1moWN-Nb8HzFpAo.roa (raw, json)
Hash identifier: 6m7P2TxWpJieVpLMXXVCsKxcqw2u2ZTPI2S9tg50SPA=
Subject key identifier: 90:90:46:93:9F:86:84:1E:1A:D6:6A:16:37:E3:5B:F0:7C:C5:A4:0A
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019DBA89CF8DCD2BCAF542D8BCF2741E7688
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/kJBGk5-GhB4a1moWN-Nb8HzFpAo.roa
Signing time: Thu 23 Apr 2026 13:31:26 +0000
ROA not before: Thu 23 Apr 2026 13:31:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 266842
IP address blocks: 91.197.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ba:89:cf:8d:cd:2b:ca:f5:42:d8:bc:f2:74:1e:76:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Apr 23 13:31:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=909046939f86841e1ad66a1637e35bf07cc5a40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:25:f1:6a:32:0f:00:12:8f:c7:38:d7:41:01:
ea:65:0b:0a:d5:3e:75:7a:e1:72:1e:4e:ec:19:97:
d7:9f:2e:40:e6:51:da:12:f9:83:f0:5a:5c:03:bb:
1b:28:3e:65:d9:5c:c8:6f:bb:11:12:5b:05:de:63:
8c:e6:3a:dd:42:2d:e0:de:2d:60:fa:75:62:7c:9e:
be:c6:a8:ce:3a:08:e2:b0:bc:5e:55:f6:36:d0:47:
4b:54:f6:d9:a9:43:d6:ad:65:6c:e8:6b:3c:13:33:
b8:e2:49:13:5c:29:ca:c6:62:9a:b9:a3:8d:dd:d0:
53:22:32:f3:8c:b2:8a:11:48:53:12:21:a4:8b:ee:
dd:60:49:a9:c1:a6:e1:70:5a:23:fb:7b:ac:db:91:
b9:7c:a6:83:6d:f1:51:18:b4:13:f5:a0:68:8d:bf:
99:9b:d9:91:59:f8:4a:e3:bc:c1:1d:43:af:a8:19:
99:b1:1a:e2:70:73:80:65:e4:5d:dd:c7:9f:9b:c5:
d5:63:c1:2f:ea:ab:bb:d5:9f:ba:0c:66:79:a4:40:
0a:9c:05:0c:18:78:d1:af:82:00:a1:88:eb:bd:36:
7a:b7:1d:4a:67:4d:8c:6d:26:37:02:d4:d9:38:5d:
00:aa:79:5b:5e:ac:f5:e8:8e:89:9e:96:37:9c:98:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:90:46:93:9F:86:84:1E:1A:D6:6A:16:37:E3:5B:F0:7C:C5:A4:0A
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/kJBGk5-GhB4a1moWN-Nb8HzFpAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.71.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:f1:df:22:83:14:17:8d:ed:5b:64:73:69:25:e2:21:c5:27:
63:25:ca:ad:0e:42:1b:51:eb:9e:d5:fb:d8:42:0f:e2:44:5a:
44:58:b5:01:76:ae:89:51:51:07:f6:b7:8c:ca:8c:5e:ee:7f:
54:89:56:3b:0c:db:70:42:11:13:37:a0:53:e5:4d:36:a4:24:
08:67:49:ea:d4:62:49:bb:b3:7b:48:96:7a:8c:6e:10:9b:ac:
8a:8c:60:c3:81:d8:ad:ad:6d:fa:74:b2:35:82:19:11:74:11:
41:24:3b:e2:43:d2:2d:51:36:e1:f2:43:27:cb:8b:10:3d:5a:
6e:af:86:16:69:a1:fb:ea:cd:17:40:d7:c8:20:2f:e0:02:f9:
d9:bc:c6:55:42:33:b6:d7:be:90:28:b3:86:e9:af:4f:ac:f0:
7a:9b:9f:5d:f4:11:cd:1d:8d:35:12:a5:b9:ce:7c:09:99:4b:
51:79:6d:22:95:8a:3a:f2:0c:e4:2b:4b:81:d7:f3:1e:4b:ab:
88:2e:d6:02:66:56:73:08:26:50:41:b3:26:5c:ab:ee:3d:8f:
21:91:53:ef:67:c1:b9:33:7a:4c:55:3c:62:65:a6:ec:bd:86:
4b:5a:fa:4a:eb:11:75:69:cd:f7:f8:0f:38:45:70:d7:8d:54:
ed:41:81:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ26ic+NzSvK9ULYvPJ0HnaIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4
ODE3ZmMwHhcNMjYwNDIzMTMzMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDkwNDY5MzlmODY4NDFlMWFkNjZhMTYzN2UzNWJmMDdjYzVhNDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCXxajIPABKPxzjXQQHqZQsK1T51
euFyHk7sGZfXny5A5lHaEvmD8FpcA7sbKD5l2VzIb7sRElsF3mOM5jrdQi3g3i1g
+nVifJ6+xqjOOgjisLxeVfY20EdLVPbZqUPWrWVs6Gs8EzO44kkTXCnKxmKauaON
3dBTIjLzjLKKEUhTEiGki+7dYEmpwabhcFoj+3us25G5fKaDbfFRGLQT9aBojb+Z
m9mRWfhK47zBHUOvqBmZsRricHOAZeRd3cefm8XVY8Ev6qu71Z+6DGZ5pEAKnAUM
GHjRr4IAoYjrvTZ6tx1KZ02MbSY3AtTZOF0AqnlbXqz16I6JnpY3nJjylQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJCQRpOfhoQeGtZqFjfjW/B8xaQKMB8GA1UdIwQY
MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt
NDZiOTQ5MDkyY2JlLzEva0pCR2s1LUdoQjRhMW1vV04tTmI4SHpGcEFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl
LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8VHMA0G
CSqGSIb3DQEBCwUAA4IBAQA88d8igxQXje1bZHNpJeIhxSdjJcqtDkIbUeue1fvY
Qg/iRFpEWLUBdq6JUVEH9reMyoxe7n9UiVY7DNtwQhETN6BT5U02pCQIZ0nq1GJJ
u7N7SJZ6jG4Qm6yKjGDDgditrW36dLI1ghkRdBFBJDviQ9ItUTbh8kMny4sQPVpu
r4YWaaH76s0XQNfIIC/gAvnZvMZVQjO2176QKLOG6a9PrPB6m59d9BHNHY01EqW5
znwJmUtReW0ilYo68gzkK0uB1/MeS6uILtYCZlZzCCZQQbMmXKvuPY8hkVPvZ8G5
M3pMVTxiZabsvYZLWvpK6xF1ac33+A84RXDXjVTtQYGT
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:48:02 2026 by rpki-client