Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/kbTuvbXxVkPO81NqzM32erC0jO0.roa
File: kbTuvbXxVkPO81NqzM32erC0jO0.roa (raw, json)
Hash identifier: XU4tnqgPkj9eoEn9Mhfvf5FUGU2J15gaH0+xYWl35IU=
Subject key identifier: 91:B4:EE:BD:B5:F1:56:43:CE:F3:53:6A:CC:CD:F6:7A:B0:B4:8C:ED
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A17807469426F21677A6A825A62C617F51
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/kbTuvbXxVkPO81NqzM32erC0jO0.roa
Signing time: Mon 26 Oct 2026 11:45:05 +0000
ROA not before: Mon 26 Oct 2026 11:45:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 85.204.178.0/24 maxlen: 24
85.204.183.0/24 maxlen: 24
86.105.173.0/24 maxlen: 24
93.119.140.0/24 maxlen: 24
93.119.142.0/24 maxlen: 24
93.119.229.0/24 maxlen: 24
188.208.104.0/24 maxlen: 24
188.208.207.0/24 maxlen: 24
188.210.245.0/24 maxlen: 24
188.213.246.0/24 maxlen: 24
188.214.228.0/24 maxlen: 24
188.214.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:07:46:94:26:f2:16:77:a6:a8:25:a6:2c:61:7f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Oct 26 11:45:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91b4eebdb5f15643cef3536acccdf67ab0b48ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ee:69:e0:c6:f0:ae:a3:9c:a9:b4:8c:af:be:
83:14:fb:32:9a:04:5f:09:3f:26:7d:95:81:52:86:
d3:08:49:96:dc:e6:f9:ca:6f:ce:6a:59:78:87:6e:
d6:3b:b2:3c:c7:9f:27:de:7f:7e:3d:38:3a:43:5a:
3a:c8:2d:76:19:8a:17:ea:32:c3:55:60:29:5f:b7:
88:f3:b9:3d:30:77:45:12:74:9c:ac:fc:e6:b7:89:
37:aa:cd:56:6e:51:40:33:24:e3:c0:dc:58:c0:99:
ee:f5:5a:b2:a8:7f:63:29:01:25:ba:f3:07:53:6b:
82:d1:28:4a:e0:bc:ee:c4:4c:8f:79:ae:62:32:0b:
cf:9a:28:d8:24:08:ec:9d:f2:03:ea:d5:c5:fa:2e:
6d:b5:5a:ec:89:48:fa:cf:89:47:35:ea:57:25:dd:
08:97:74:0e:31:19:43:5e:07:ce:c8:b1:83:e0:45:
9b:b6:98:f7:f2:0c:e5:1c:5b:55:1d:00:4d:f7:41:
66:86:bc:fd:75:23:66:1c:ee:a0:f4:b6:f6:a9:f4:
01:b3:93:34:87:80:40:5b:c7:3b:f3:15:c0:ed:14:
c5:8c:ac:e4:7b:44:59:28:06:ae:bc:d2:6a:f3:d9:
da:46:69:4a:a4:4f:57:16:4d:b8:64:e4:c3:2c:bd:
29:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B4:EE:BD:B5:F1:56:43:CE:F3:53:6A:CC:CD:F6:7A:B0:B4:8C:ED
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/kbTuvbXxVkPO81NqzM32erC0jO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.178.0/24
85.204.183.0/24
86.105.173.0/24
93.119.140.0/24
93.119.142.0/24
93.119.229.0/24
188.208.104.0/24
188.208.207.0/24
188.210.245.0/24
188.213.246.0/24
188.214.228.0/23
Signature Algorithm: sha256WithRSAEncryption
48:7a:3e:b6:4a:bb:a8:09:a5:0c:04:38:bb:22:ee:b6:d7:f6:
2d:b2:ef:cb:f1:4e:26:dc:e6:6d:3a:92:80:5a:9c:23:fd:fb:
fa:6f:76:08:cb:59:6d:55:28:b4:91:7c:8e:d2:ff:01:7b:2f:
dc:27:0e:b9:ea:de:da:04:4d:52:6b:ee:7d:ad:c4:54:20:d8:
67:d8:37:59:2b:e1:7c:be:63:fd:35:6b:42:8d:1c:cc:a4:38:
dd:6b:08:53:96:25:85:5a:af:1f:41:0c:03:6f:0f:30:ca:f1:
c9:92:29:8f:21:5a:7a:3c:d2:c0:bd:29:74:91:1d:a7:a9:85:
02:79:11:41:e2:81:91:9a:bf:ee:5a:81:cb:10:31:5b:17:37:
07:38:3f:fa:6b:56:46:ea:d9:4a:05:6c:d9:d1:19:4c:4c:f9:
ca:09:4c:ce:59:9d:a2:4c:57:c6:df:72:5c:32:fd:e8:1c:e1:
d6:23:c8:2f:9f:29:61:3a:a7:4f:94:8b:bb:20:ac:cd:64:3d:
f1:08:78:3f:40:63:d4:87:9f:fd:3c:b9:e9:45:e2:a2:5b:f9:
64:b4:a4:c1:68:05:ba:6f:b0:0c:36:13:32:1d:30:ff:b0:55:
0e:f7:0e:6c:75:20:5b:da:ad:17:da:ac:4a:58:6f:19:c5:63:
26:6a:2c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:12 2026 by rpki-client