Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/K9S1a8pb9Ku2gurXootjdoLxqNk.roa
File: K9S1a8pb9Ku2gurXootjdoLxqNk.roa (raw, json)
Hash identifier: Vj20bIk9YxCcwY9U+ElYXLduppjaUw153U6C7JRQWew=
Subject key identifier: 2B:D4:B5:6B:CA:5B:F4:AB:B6:82:EA:D7:A2:8B:63:76:82:F1:A8:D9
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A0B9DEE2E20F086AE1FEA22677E4ECA90F
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/K9S1a8pb9Ku2gurXootjdoLxqNk.roa
Signing time: Sat 19 Sep 2026 13:33:07 +0000
ROA not before: Sat 19 Sep 2026 13:33:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 91.217.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 11:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:de:e2:e2:0f:08:6a:e1:fe:a2:26:77:e4:ec:a9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Sep 19 13:33:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bd4b56bca5bf4abb682ead7a28b637682f1a8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:7c:bd:ed:3f:49:1e:e0:2f:3c:47:23:8d:
4f:55:23:b6:24:e6:aa:83:85:0b:63:de:9b:7a:4b:
ce:a6:d4:22:69:5c:8b:08:cb:ed:97:3e:8a:d8:26:
a2:10:7f:4e:ee:64:18:e8:a0:d7:ad:07:43:22:9e:
21:34:f2:8d:d3:82:d7:19:c4:06:e9:8b:15:56:45:
2b:d1:3a:2e:b0:98:dd:b8:e4:26:39:ae:35:6b:46:
45:05:15:f7:72:a9:9d:ce:dc:b1:42:27:93:ec:a9:
1d:68:2c:16:05:c2:1f:d4:5f:15:69:a2:56:6b:24:
aa:b1:08:06:d5:55:b6:40:d9:b1:19:19:05:50:c9:
a1:9d:ba:50:79:c4:35:39:cc:26:f7:6f:96:cc:5e:
f3:0c:2e:b2:bb:a3:cf:14:5b:02:92:ea:e2:97:90:
d7:de:56:73:f9:af:52:56:8f:80:b0:51:aa:92:25:
43:cb:02:32:a6:f2:7e:ed:24:ee:90:1e:cb:f3:ef:
4a:ba:27:83:19:99:6d:00:0d:20:3c:31:4b:7a:d5:
c1:a1:c7:0f:4d:d2:85:71:ea:8f:8e:1d:9e:99:70:
ed:12:13:0a:9d:90:fd:8b:7b:4d:78:49:03:c7:7e:
ce:03:94:af:19:d2:d6:4e:5e:06:32:84:1d:9a:d0:
83:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D4:B5:6B:CA:5B:F4:AB:B6:82:EA:D7:A2:8B:63:76:82:F1:A8:D9
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/K9S1a8pb9Ku2gurXootjdoLxqNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.166.0/24
Signature Algorithm: sha256WithRSAEncryption
43:9d:09:c2:b9:94:4e:20:f4:fc:1d:ce:4a:e1:99:ad:5d:74:
ce:a1:e9:5b:ef:3e:15:7a:df:17:f0:ad:72:ae:75:bf:b3:1c:
c0:88:7c:e5:64:55:ff:36:03:0f:a0:ec:01:88:55:18:a0:7a:
fe:9e:8e:51:23:e1:e7:5f:68:fb:6c:b7:33:f8:cc:26:86:78:
d5:38:a6:cc:e0:3d:d0:b7:d7:fd:bc:da:a5:87:d7:d2:9f:c9:
9b:c1:67:bf:77:39:96:fd:92:27:94:5d:2e:30:76:10:16:c7:
d8:20:9a:bc:b0:23:65:17:c7:4a:ae:34:96:ce:3c:3d:4e:20:
1e:1c:7a:3d:e1:8f:7d:1c:f3:1b:85:29:4e:38:b3:fd:6c:c3:
51:67:c5:c4:6f:2e:df:16:93:7a:8d:b6:48:f0:34:fc:11:c6:
c7:a2:a0:f5:52:62:93:a9:45:ef:78:48:6b:ca:f9:70:35:56:
73:12:6c:10:2a:68:20:7e:5b:1d:0d:fc:43:c4:15:68:a3:25:
c9:00:b7:35:35:b6:a7:e9:a3:34:13:d2:c2:5c:a0:f2:32:18:
cf:6f:e7:94:9e:59:2e:61:83:64:bd:e0:66:ed:95:b6:48:a9:
e6:46:28:92:29:7b:04:58:30:ac:5f:7e:36:96:86:8c:3b:74:
91:79:67:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC53uLiDwhq4f6iJnfk7KkPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjYwOTE5MTMzMzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmQ0YjU2YmNhNWJmNGFiYjY4MmVhZDdhMjhiNjM3NjgyZjFhOGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAt8ve0/SR7gLzxHI41PVSO2JOaq
g4ULY96bekvOptQiaVyLCMvtlz6K2CaiEH9O7mQY6KDXrQdDIp4hNPKN04LXGcQG
6YsVVkUr0TousJjduOQmOa41a0ZFBRX3cqmdztyxQieT7KkdaCwWBcIf1F8VaaJW
aySqsQgG1VW2QNmxGRkFUMmhnbpQecQ1Ocwm92+WzF7zDC6yu6PPFFsCkuril5DX
3lZz+a9SVo+AsFGqkiVDywIypvJ+7STukB7L8+9KuieDGZltAA0gPDFLetXBoccP
TdKFceqPjh2emXDtEhMKnZD9i3tNeEkDx37OA5SvGdLWTl4GMoQdmtCDSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCvUtWvKW/SrtoLq16KLY3aC8ajZMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvSzlTMWE4cGI5S3UyZ3VyWG9vdGpkb0x4cU5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9mmMA0G
CSqGSIb3DQEBCwUAA4IBAQBDnQnCuZROIPT8Hc5K4ZmtXXTOoelb7z4Vet8X8K1y
rnW/sxzAiHzlZFX/NgMPoOwBiFUYoHr+no5RI+HnX2j7bLcz+MwmhnjVOKbM4D3Q
t9f9vNqlh9fSn8mbwWe/dzmW/ZInlF0uMHYQFsfYIJq8sCNlF8dKrjSWzjw9TiAe
HHo94Y99HPMbhSlOOLP9bMNRZ8XEby7fFpN6jbZI8DT8EcbHoqD1UmKTqUXveEhr
yvlwNVZzEmwQKmggflsdDfxDxBVooyXJALc1Nban6aM0E9LCXKDyMhjPb+eUnlku
YYNkveBm7ZW2SKnmRiiSKXsEWDCsX342loaMO3SReWcn
-----END CERTIFICATE-----
Generated at Sat Sep 19 19:54:54 2026 by rpki-client