Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/6a39a8-10a3-44ea-bf8d-b91e6ea906d9/1/KpfVdOYi_L5CTxoNsCMeHYlQiAE.roa
File: KpfVdOYi_L5CTxoNsCMeHYlQiAE.roa (raw, json)
Hash identifier: nOmWfQGfgslhciwVx27VS/SUVn0NOil8sEBYm9ZxdgE=
Subject key identifier: 2A:97:D5:74:E6:22:FC:BE:42:4F:1A:0D:B0:23:1E:1D:89:50:88:01
Certificate issuer: /CN=9198740ded2ed0b301b1d5889e0639d64f9197e5
Certificate serial: 01A14A32533198D742C9A633C3F7C858E2CB
Authority key identifier: 91:98:74:0D:ED:2E:D0:B3:01:B1:D5:88:9E:06:39:D6:4F:91:97:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZh0De0u0LMBsdWIngY51k-Rl-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/6a39a8-10a3-44ea-bf8d-b91e6ea906d9/1/KpfVdOYi_L5CTxoNsCMeHYlQiAE.roa
Signing time: Sat 17 Oct 2026 14:09:34 +0000
ROA not before: Sat 17 Oct 2026 14:09:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59623
IP address blocks: 91.231.222.0/24 maxlen: 24
195.254.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/6a39a8-10a3-44ea-bf8d-b91e6ea906d9/1/kZh0De0u0LMBsdWIngY51k-Rl-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/6a39a8-10a3-44ea-bf8d-b91e6ea906d9/1/kZh0De0u0LMBsdWIngY51k-Rl-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kZh0De0u0LMBsdWIngY51k-Rl-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:32:53:31:98:d7:42:c9:a6:33:c3:f7:c8:58:e2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9198740ded2ed0b301b1d5889e0639d64f9197e5
Validity
Not Before: Oct 17 14:09:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a97d574e622fcbe424f1a0db0231e1d89508801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:5b:f3:09:dc:ca:94:1c:a4:8c:a3:f7:3d:
f3:59:4a:99:34:f9:5a:99:a9:49:ff:0b:46:fe:a6:
6a:52:18:67:fe:77:a2:be:af:b5:d8:fe:ee:a7:85:
e4:bb:fa:b8:ca:b3:ea:a8:46:8a:5b:09:de:3d:75:
fc:cf:ff:18:2b:21:cb:6d:bc:fd:23:d4:0d:3f:e8:
fa:59:94:d8:7e:b8:60:51:75:d6:a9:4f:7f:94:2c:
21:97:35:bb:67:14:0c:8a:c9:9d:0e:34:2f:b2:51:
32:46:03:f9:d2:60:7b:e9:4b:6c:d5:31:dd:84:b2:
21:3b:6d:00:6c:75:c7:85:7b:c8:85:3b:ef:6b:3f:
f2:8d:93:af:86:c2:06:aa:c0:90:00:eb:04:69:fc:
71:62:67:52:5a:79:a5:d1:2f:97:b3:f0:f6:32:87:
ba:ce:d2:4c:4b:a4:34:11:8f:2f:75:9d:49:90:51:
ae:47:bc:d7:d2:d6:32:fb:49:36:c4:75:a6:eb:6b:
f6:6a:31:5d:47:e5:24:fe:f6:75:7e:68:d0:4f:96:
fa:dc:ba:90:dc:d9:39:e3:bb:86:b4:bb:7a:cb:dc:
45:a1:c5:ee:ed:92:11:3d:13:e2:d3:56:78:59:4b:
69:b2:f1:62:78:9a:da:2a:39:ac:11:fd:c1:f8:57:
be:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:97:D5:74:E6:22:FC:BE:42:4F:1A:0D:B0:23:1E:1D:89:50:88:01
X509v3 Authority Key Identifier:
keyid:91:98:74:0D:ED:2E:D0:B3:01:B1:D5:88:9E:06:39:D6:4F:91:97:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZh0De0u0LMBsdWIngY51k-Rl-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/6a39a8-10a3-44ea-bf8d-b91e6ea906d9/1/KpfVdOYi_L5CTxoNsCMeHYlQiAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/6a39a8-10a3-44ea-bf8d-b91e6ea906d9/1/kZh0De0u0LMBsdWIngY51k-Rl-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.222.0/24
195.254.165.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:23:81:39:e1:97:c6:c5:e9:75:b1:9a:cb:14:fa:be:0d:68:
4c:7c:23:1e:ad:8e:e7:c2:1f:c2:d6:7d:b2:c8:08:27:79:3a:
9c:6d:6a:71:b5:23:14:26:bd:c4:23:00:59:d4:5b:da:6c:33:
82:0a:82:ea:f1:60:10:13:31:f4:34:18:dd:41:69:8a:40:dd:
2f:8a:5f:da:13:99:9c:73:d6:53:cb:1a:20:75:6e:d7:37:8c:
04:43:2d:7f:a8:ec:0f:8a:0f:24:20:82:5a:00:bb:6c:51:87:
8a:63:86:8b:9b:f7:f1:fc:9f:1c:54:f2:c5:a3:06:bd:8d:93:
c3:ef:92:67:d5:d4:ea:8c:65:fa:ec:f1:8c:88:19:5a:c7:c3:
d3:8f:6a:3d:15:f8:bc:07:d0:9c:1d:fb:9c:fe:cb:1d:4e:4d:
2d:93:f3:af:80:43:33:ee:0b:72:f2:f5:ef:75:c4:46:21:66:
6f:d1:fc:f4:2b:2d:15:75:08:24:f8:59:ba:21:1d:b3:15:6b:
c4:d8:48:c4:e3:cc:ce:fc:40:67:e0:6e:d7:2d:d3:4a:30:7c:
56:62:99:66:5b:ca:57:d3:aa:04:f5:31:50:5a:5f:5b:95:da:
15:3f:88:33:dc:74:3e:a5:d1:b9:b3:e4:1b:9c:f6:5d:76:20:
dc:1a:ac:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:59:19 2026 by rpki-client