Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/kLqpWlHtupTjJarIToQlf05GAC8.roa
File: kLqpWlHtupTjJarIToQlf05GAC8.roa (raw, json)
Hash identifier: vLfJksupJB38aY7fKVMbwE6kN6VP1scLifciaU8Bh2s=
Subject key identifier: 90:BA:A9:5A:51:ED:BA:94:E3:25:AA:C8:4E:84:25:7F:4E:46:00:2F
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01A0DF009C7B4EEAC5CAA5CDC90ACE9130DF
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/kLqpWlHtupTjJarIToQlf05GAC8.roa
Signing time: Sat 26 Sep 2026 18:35:54 +0000
ROA not before: Sat 26 Sep 2026 18:35:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 91.108.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:00:9c:7b:4e:ea:c5:ca:a5:cd:c9:0a:ce:91:30:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Sep 26 18:35:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90baa95a51edba94e325aac84e84257f4e46002f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:61:2f:e6:a2:76:6e:8e:ab:29:57:fe:0a:ea:
e5:02:e1:d7:6c:89:67:e5:00:52:0f:25:8b:30:f4:
9b:51:f3:2e:c4:5a:0d:58:81:e1:00:d6:b6:fc:df:
7b:0f:a4:e5:a1:c1:87:47:e3:6d:6a:c2:2e:93:53:
00:4f:2e:c6:a7:4f:60:5c:bb:c1:77:bf:1a:51:e3:
e3:f9:c9:16:3c:73:5d:d1:e2:1c:72:89:5e:97:c9:
e4:5a:6d:ca:5f:85:7d:5a:6b:ef:cb:bb:9c:c9:37:
ef:d0:b4:37:34:93:8f:7e:cf:4a:74:ca:c5:2e:13:
d4:ec:30:3e:0b:c0:4e:93:dc:3a:e4:4b:83:43:25:
91:04:9f:87:e2:6a:a3:4b:88:c3:a1:07:d6:69:80:
1b:b5:e0:55:6a:27:c7:ab:fd:94:64:e7:b1:56:ef:
9b:e8:ce:1c:14:d6:2d:4e:be:f8:24:b7:bb:0e:b6:
5c:04:58:42:20:3b:c4:e6:15:56:50:be:7d:f8:1b:
3d:3f:cd:f0:01:3e:3d:45:1d:53:b3:cb:b5:93:6a:
e9:20:0e:c7:c2:10:de:ad:d2:0f:65:bd:c3:e6:ee:
50:9c:7b:27:23:c4:24:11:7c:95:c6:d0:ae:c2:f5:
cd:64:a6:7e:3f:b8:09:87:b7:04:b2:3a:42:e0:a2:
90:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BA:A9:5A:51:ED:BA:94:E3:25:AA:C8:4E:84:25:7F:4E:46:00:2F
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/kLqpWlHtupTjJarIToQlf05GAC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.242.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:2c:b0:8e:0c:2b:7b:c0:f9:f6:2a:1c:c7:74:80:79:4f:e5:
be:21:b5:50:81:c8:1d:bf:c5:13:b0:6b:60:2f:33:e4:b7:aa:
13:bd:92:68:07:fc:7d:18:3e:af:4e:68:9a:80:76:2b:2d:14:
f7:63:68:d5:c9:b0:a0:3b:ed:77:80:9f:76:e7:a5:d7:9a:a9:
fe:e1:15:c7:b1:5a:33:99:ea:da:51:06:0a:35:1a:c4:e3:aa:
f4:5b:71:76:16:7c:06:1d:76:f8:9c:47:e5:93:9d:ca:df:77:
17:b9:2c:55:97:be:60:e2:8b:ea:aa:e0:6b:10:34:12:9e:d7:
cf:e2:cf:5e:19:6c:56:1d:e4:11:7b:72:0f:ee:49:45:8c:12:
c8:a4:2d:30:7f:c4:f1:c0:ef:8c:45:05:3f:9d:61:4c:9a:af:
a6:a0:c6:5d:03:a2:8d:b2:fc:53:d2:0d:d8:79:e3:0e:d7:b6:
43:78:f3:d0:21:48:67:14:83:e8:41:9b:f1:e2:05:fb:3e:f7:
2b:83:ac:62:b4:af:a4:4f:0b:8f:48:be:4d:8a:94:ae:27:a2:
0d:00:3b:3b:63:d3:1a:8e:02:2d:6f:5f:7b:5c:d8:a4:29:51:
27:5e:20:83:89:55:45:dd:b8:6f:14:3b:b0:d5:73:a7:89:bd:
58:11:ff:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:59:09 2026 by rpki-client