Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/kcePCKzvaynPMcOcncgWdRTciAw.roa
File: kcePCKzvaynPMcOcncgWdRTciAw.roa (raw, json)
Hash identifier: VoyMtWcSClIGZJ+3GqazzBfLJsmwXioFS3B12uTWD1k=
Subject key identifier: 91:C7:8F:08:AC:EF:6B:29:CF:31:C3:9C:9D:C8:16:75:14:DC:88:0C
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A042034DB3AAB935C827DB0F27DAA026A6
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/kcePCKzvaynPMcOcncgWdRTciAw.roa
Signing time: Thu 27 Aug 2026 06:58:27 +0000
ROA not before: Thu 27 Aug 2026 06:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 153.76.227.0/24 maxlen: 24
153.76.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:03:4d:b3:aa:b9:35:c8:27:db:0f:27:da:a0:26:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Aug 27 06:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91c78f08acef6b29cf31c39c9dc8167514dc880c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:94:ff:61:cc:fc:54:0a:ad:fb:df:65:f0:
d3:dc:a3:d0:00:9c:0a:e5:e5:0e:53:85:b2:83:09:
93:7f:fd:43:84:fa:aa:53:a3:21:12:b8:5a:60:17:
4f:e7:fe:b5:70:b1:cd:be:c1:14:2e:80:79:97:12:
38:b5:ba:e1:99:29:9a:8f:92:d1:6f:79:15:4c:bb:
af:28:b5:fa:41:72:d2:24:97:8c:8a:7c:aa:0c:00:
40:dd:14:e9:f1:38:4a:81:41:f1:f0:c0:8b:a5:97:
07:56:fc:64:ba:7e:de:bc:26:c1:ca:cf:16:8b:42:
88:d4:12:2f:1f:78:a0:d0:0a:49:b7:de:c9:9b:87:
c6:54:40:e2:6d:bb:b5:1e:e3:eb:a2:61:b6:34:d0:
15:ff:14:4e:a7:21:cf:22:15:76:1d:a3:bd:b1:0b:
d4:7c:c2:df:ea:3f:78:aa:2f:db:a2:dc:85:ba:37:
46:f0:6a:d5:ca:ee:b1:bb:c4:02:a1:18:e3:64:dc:
0e:6a:ee:33:d2:b8:ed:55:8a:0f:69:86:05:d3:fb:
49:f0:39:4c:1a:ad:fe:1a:75:bb:b7:e3:96:df:76:
3b:02:c8:87:9b:a2:94:f0:c8:f6:38:39:20:21:bf:
49:e5:36:18:94:e4:d8:bd:2d:87:13:76:13:1c:62:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C7:8F:08:AC:EF:6B:29:CF:31:C3:9C:9D:C8:16:75:14:DC:88:0C
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/kcePCKzvaynPMcOcncgWdRTciAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.227.0/24
153.76.231.0/24
Signature Algorithm: sha256WithRSAEncryption
65:60:1d:f6:65:ed:31:8b:a6:18:ae:4d:ca:57:25:c9:b4:d4:
a1:9e:bd:ca:06:9f:3a:0a:83:4b:26:4e:79:c7:72:1d:40:92:
30:78:d5:2b:d7:13:f4:56:f8:19:ac:4b:ab:d1:a5:8b:d7:04:
16:2c:88:13:fd:5e:ef:09:bb:4d:75:30:98:94:7d:4b:a6:e3:
d9:b8:e7:c9:c7:40:71:f5:ee:57:5b:2b:8e:1b:65:21:37:9f:
83:79:3b:1f:b0:ab:82:7b:35:02:9f:f4:55:78:35:68:21:dc:
3c:49:2e:79:12:e3:02:02:ae:43:20:02:e0:46:ce:4d:4b:3e:
cc:05:03:9f:e0:8d:56:17:a9:48:ee:5a:29:4f:1e:2a:9f:c0:
ad:2f:c7:96:d2:c7:69:2b:f0:c2:9a:82:82:63:81:0a:f8:fe:
24:fc:31:a3:c4:a0:ff:a9:cb:1c:24:b5:0f:ee:28:93:95:76:
8b:73:5e:2f:3f:a6:0e:8c:7b:bd:07:a8:f6:e6:25:69:f9:51:
f5:0d:2e:8c:0f:44:0b:71:34:19:1d:82:43:50:e2:58:cf:27:
a2:9d:b3:1f:8c:ba:4f:3b:2b:0f:a3:ff:1e:2b:34:31:8b:75:
06:2e:98:0d:27:c3:f2:43:70:9c:be:04:2c:c5:ec:13:05:9b:
94:8b:1b:6e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaBCA02zqrk1yCfbDyfaoCamMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjM5ZmI5YWYxMjg0MjhmODRmZWQ5ZjM1ODY4NjcxN2Vk
OTc2MDEwHhcNMjYwODI3MDY1ODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWM3OGYwOGFjZWY2YjI5Y2YzMWMzOWM5ZGM4MTY3NTE0ZGM4ODBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSaU/2HM/FQKrfvfZfDT3KPQAJwK
5eUOU4WygwmTf/1DhPqqU6MhErhaYBdP5/61cLHNvsEULoB5lxI4tbrhmSmaj5LR
b3kVTLuvKLX6QXLSJJeMinyqDABA3RTp8ThKgUHx8MCLpZcHVvxkun7evCbBys8W
i0KI1BIvH3ig0ApJt97Jm4fGVEDibbu1HuPromG2NNAV/xROpyHPIhV2HaO9sQvU
fMLf6j94qi/botyFujdG8GrVyu6xu8QCoRjjZNwOau4z0rjtVYoPaYYF0/tJ8DlM
Gq3+GnW7t+OW33Y7AsiHm6KU8Mj2ODkgIb9J5TYYlOTYvS2HE3YTHGKh/QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJHHjwis72spzzHDnJ3IFnUU3IgMMB8GA1UdIwQY
MBaAFEIjn7mvEoQo+E/tnzWGhnF+2XYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2Mt
YmM1NDAzYWMyYTk1LzEva2NlUENLenZheW5QTWNPY25jZ1dkUlRjaUF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2MtYmM1NDAzYWMyYTk1
LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmUzjAwQA
mUznMA0GCSqGSIb3DQEBCwUAA4IBAQBlYB32Ze0xi6YYrk3KVyXJtNShnr3KBp86
CoNLJk55x3IdQJIweNUr1xP0VvgZrEur0aWL1wQWLIgT/V7vCbtNdTCYlH1LpuPZ
uOfJx0Bx9e5XWyuOG2UhN5+DeTsfsKuCezUCn/RVeDVoIdw8SS55EuMCAq5DIALg
Rs5NSz7MBQOf4I1WF6lI7lopTx4qn8CtL8eW0sdpK/DCmoKCY4EK+P4k/DGjxKD/
qcscJLUP7iiTlXaLc14vP6YOjHu9B6j25iVp+VH1DS6MD0QLcTQZHYJDUOJYzyei
nbMfjLpPOysPo/8eKzQxi3UGLpgNJ8PyQ3CcvgQsxewTBZuUixtu
-----END CERTIFICATE-----
Generated at Fri Sep 11 00:00:25 2026 by rpki-client