Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/KIZz9DPTnXnVw9NdjWPUo-TLo-o.roa
File: KIZz9DPTnXnVw9NdjWPUo-TLo-o.roa (raw, json)
Hash identifier: PnaduGApsvPabzpzYKthmRcBCdXMG0jb8OHAbeuAnHM=
Subject key identifier: 28:86:73:F4:33:D3:9D:79:D5:C3:D3:5D:8D:63:D4:A3:E4:CB:A3:EA
Certificate issuer: /CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Certificate serial: 01A140B13BB8EC609233D19B3E7158E17191
Authority key identifier: F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/KIZz9DPTnXnVw9NdjWPUo-TLo-o.roa
Signing time: Thu 15 Oct 2026 17:51:59 +0000
ROA not before: Thu 15 Oct 2026 17:51:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218678
IP address blocks: 91.202.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:b1:3b:b8:ec:60:92:33:d1:9b:3e:71:58:e1:71:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Validity
Not Before: Oct 15 17:51:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=288673f433d39d79d5c3d35d8d63d4a3e4cba3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:03:ac:06:9e:c0:e8:a9:43:40:2f:73:96:
ca:f4:d3:b8:3d:40:c1:9b:71:0c:ad:ef:bb:1c:dd:
7e:84:e0:3e:22:70:2d:14:82:ec:27:a7:25:e1:c2:
5c:8d:a1:cb:68:55:47:7c:21:44:8b:d9:69:0d:fb:
f3:d9:be:49:3a:6c:56:f7:64:8e:15:ea:a0:19:fd:
7f:27:9e:25:c7:b5:ab:c9:b2:05:3b:a1:54:78:89:
9c:1f:d5:19:a4:9f:e7:85:d3:72:b6:39:ae:1d:48:
c6:68:4e:b7:2e:ca:e9:50:b9:38:e5:e6:f0:6c:c6:
7a:0e:da:82:00:56:0e:bb:8c:91:dd:c7:88:93:29:
27:be:75:3d:03:c3:07:68:ad:53:15:2e:93:1e:00:
a2:4f:b6:be:72:8c:85:f2:ac:b4:9e:30:01:50:1e:
e1:1c:55:42:60:03:2a:d3:63:77:9a:6c:a4:2b:09:
6a:91:46:25:d2:47:e7:92:5a:bb:56:05:f1:da:aa:
3f:ed:75:30:44:35:d7:d3:2e:90:49:2f:22:3c:66:
e9:c7:bb:22:8c:ae:f0:1f:a1:1a:66:5e:b5:55:f3:
c0:3e:e5:6f:d3:3d:11:01:0f:4b:31:30:34:ed:31:
17:c8:c4:a1:6b:ff:de:96:fa:8c:8c:40:2d:95:89:
5f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:86:73:F4:33:D3:9D:79:D5:C3:D3:5D:8D:63:D4:A3:E4:CB:A3:EA
X509v3 Authority Key Identifier:
keyid:F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/KIZz9DPTnXnVw9NdjWPUo-TLo-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.214.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:56:d1:74:8f:2d:30:84:1e:f2:cb:30:27:bb:f1:b1:0b:f4:
c3:b6:ab:f4:92:36:52:e8:47:18:5f:c0:13:46:59:3f:3b:52:
7a:ff:6c:ec:db:3e:1f:83:39:d2:a0:5b:f2:6b:bc:e1:2a:0c:
00:f7:f0:74:b4:00:45:b8:12:48:31:fb:c5:41:34:30:59:f7:
2c:1e:81:c6:29:0e:c2:b5:c3:c2:9b:16:b9:11:b0:d2:88:22:
f3:d4:a9:2c:15:bd:48:60:bb:1c:eb:c0:52:09:90:9c:32:03:
d8:ae:be:2e:91:f3:1c:e3:fc:a9:f9:80:21:fe:ff:55:32:41:
46:00:27:03:55:39:c5:51:13:ac:78:3d:3b:ae:db:c9:4e:e4:
a0:16:22:2c:82:1e:4b:d9:16:93:95:a4:bb:3b:13:f2:0e:8c:
f4:0e:2d:31:82:e5:58:52:b9:25:40:15:97:49:09:24:1c:3c:
58:c4:64:4b:45:e6:f2:fc:ee:a1:f6:8a:a8:44:5b:7d:24:a2:
24:92:ce:d5:d0:c4:17:bc:3e:7c:f0:73:e1:8b:22:0a:39:23:
19:a8:f8:38:86:21:b1:ed:ac:a1:71:e6:68:7d:06:82:b9:70:
7c:8d:6d:13:4e:cb:82:df:1f:56:2f:f1:25:26:8a:41:a2:d4:
ec:cc:b3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:48:32 2026 by rpki-client