Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/KZ9eOKIw4W5LW26KdHo3OovWYuw.roa
File: KZ9eOKIw4W5LW26KdHo3OovWYuw.roa (raw, json)
Hash identifier: Y2tbBI1UfKdGsIyb2y0U5Hi5QBIcE7c7eceJ/lWWnkM=
Subject key identifier: 29:9F:5E:38:A2:30:E1:6E:4B:5B:6E:8A:74:7A:37:3A:8B:D6:62:EC
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 01A150D00D39D946C6C0B611217FBDE963AB
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/KZ9eOKIw4W5LW26KdHo3OovWYuw.roa
Signing time: Sun 18 Oct 2026 20:59:34 +0000
ROA not before: Sun 18 Oct 2026 20:59:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57363
IP address blocks: 91.231.234.0/24 maxlen: 24
91.231.235.0/24 maxlen: 24
91.231.236.0/24 maxlen: 24
91.231.237.0/24 maxlen: 24
91.231.239.0/24 maxlen: 24
91.238.108.0/24 maxlen: 24
91.238.109.0/24 maxlen: 24
91.238.110.0/24 maxlen: 24
91.240.168.0/24 maxlen: 24
91.240.169.0/24 maxlen: 24
91.240.170.0/24 maxlen: 24
91.240.171.0/24 maxlen: 24
151.236.64.0/24 maxlen: 24
151.236.65.0/24 maxlen: 24
151.236.67.0/24 maxlen: 24
151.236.68.0/24 maxlen: 24
151.236.70.0/24 maxlen: 24
151.236.72.0/24 maxlen: 24
151.236.73.0/24 maxlen: 24
151.236.74.0/24 maxlen: 24
151.236.75.0/24 maxlen: 24
151.236.76.0/24 maxlen: 24
151.236.77.0/24 maxlen: 24
151.236.78.0/24 maxlen: 24
151.236.80.0/24 maxlen: 24
151.236.81.0/24 maxlen: 24
151.236.83.0/24 maxlen: 24
151.236.84.0/24 maxlen: 24
151.236.85.0/24 maxlen: 24
151.236.86.0/24 maxlen: 24
151.236.87.0/24 maxlen: 24
151.236.88.0/24 maxlen: 24
151.236.89.0/24 maxlen: 24
151.236.90.0/24 maxlen: 24
151.236.91.0/24 maxlen: 24
151.236.94.0/24 maxlen: 24
151.236.95.0/24 maxlen: 24
151.236.96.0/24 maxlen: 24
151.236.99.0/24 maxlen: 24
151.236.100.0/24 maxlen: 24
151.236.102.0/24 maxlen: 24
151.236.106.0/24 maxlen: 24
151.236.107.0/24 maxlen: 24
151.236.109.0/24 maxlen: 24
151.236.110.0/23 maxlen: 23
151.236.111.0/24 maxlen: 24
151.236.113.0/24 maxlen: 24
151.236.122.0/23 maxlen: 23
151.236.123.0/24 maxlen: 24
151.236.125.0/24 maxlen: 24
151.236.127.0/24 maxlen: 24
185.31.112.0/24 maxlen: 24
185.31.113.0/24 maxlen: 24
185.31.114.0/24 maxlen: 24
185.31.115.0/24 maxlen: 24
2a02:aec0:1::/48 maxlen: 48
2a02:aec0:2::/48 maxlen: 48
2a02:aec0:3::/48 maxlen: 48
2a02:aec0:5::/48 maxlen: 48
2a02:aec0:6::/48 maxlen: 48
2a02:aec0:7::/48 maxlen: 48
2a02:aec0:8::/48 maxlen: 48
2a02:aec0:9::/48 maxlen: 48
2a02:aec0:b::/48 maxlen: 48
2a02:aec0:c::/48 maxlen: 48
2a02:aec0:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:d0:0d:39:d9:46:c6:c0:b6:11:21:7f:bd:e9:63:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Oct 18 20:59:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=299f5e38a230e16e4b5b6e8a747a373a8bd662ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9c:56:4d:1e:17:5d:6c:29:24:7a:e5:0d:c9:
70:71:20:a4:83:5d:f7:c9:f6:f2:0d:75:ae:de:35:
c9:de:de:4a:98:07:d4:30:3a:9d:94:60:85:04:8e:
51:b5:f0:74:4e:a3:dd:5a:69:69:b8:7d:f6:1e:06:
41:3d:cc:4d:2b:b5:2d:8e:29:90:2b:33:1a:3d:78:
d3:35:96:3d:d4:f3:0b:cf:3e:77:1f:b3:88:4c:f3:
aa:b0:3a:0b:bd:34:22:83:38:b0:87:d8:ea:d1:e7:
f5:16:ed:18:db:50:1f:b0:fd:d1:09:33:b6:34:af:
a0:97:44:0b:ab:e4:fd:4f:fd:9d:e5:17:2f:49:92:
eb:54:6a:02:05:34:a8:87:80:01:da:5a:9d:11:bf:
00:a6:ab:c7:2e:eb:68:b2:87:86:a2:1b:fb:91:db:
43:6c:8b:03:56:30:04:3d:8f:3d:c8:a7:b2:31:d7:
69:7d:c6:14:20:f5:6d:c4:68:28:e4:8a:ef:34:51:
89:13:6e:46:d4:54:66:ef:86:90:16:85:02:8e:65:
9a:31:c1:28:9b:19:9d:92:dd:4e:c3:8c:ec:c7:55:
3b:e4:d9:ca:e5:c6:e2:5b:13:59:c3:eb:c9:4f:09:
5b:38:3c:06:3b:86:17:4a:1a:fe:c7:f0:3d:58:0d:
5f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9F:5E:38:A2:30:E1:6E:4B:5B:6E:8A:74:7A:37:3A:8B:D6:62:EC
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/KZ9eOKIw4W5LW26KdHo3OovWYuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.234.0-91.231.237.255
91.231.239.0/24
91.238.108.0-91.238.110.255
91.240.168.0/22
151.236.64.0/23
151.236.67.0-151.236.68.255
151.236.70.0/24
151.236.72.0-151.236.78.255
151.236.80.0/23
151.236.83.0-151.236.91.255
151.236.94.0-151.236.96.255
151.236.99.0-151.236.100.255
151.236.102.0/24
151.236.106.0/23
151.236.109.0-151.236.111.255
151.236.113.0/24
151.236.122.0/23
151.236.125.0/24
151.236.127.0/24
185.31.112.0/22
IPv6:
2a02:aec0:1::-2a02:aec0:3:ffff:ffff:ffff:ffff:ffff
2a02:aec0:5::-2a02:aec0:9:ffff:ffff:ffff:ffff:ffff
2a02:aec0:b::-2a02:aec0:d:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7e:ec:fb:13:c2:a3:52:43:22:e5:22:0b:bb:74:6a:96:7f:9b:
59:f4:bf:1f:eb:cc:e1:b9:d6:a4:33:b3:49:f6:ad:0d:b5:83:
a0:32:a3:5f:85:b3:62:57:45:58:dc:e5:40:68:4e:65:b1:a9:
1e:1c:23:d8:7c:ce:1d:6a:6c:03:6f:49:48:0e:2f:52:0f:69:
85:62:a7:b9:0e:01:00:f7:f7:d1:88:be:46:ad:71:70:bf:7f:
ab:cf:a4:0b:87:5a:69:16:e8:96:a6:a6:f7:d2:50:5c:e8:a6:
61:fd:b8:fe:a5:37:16:38:92:82:d2:57:1d:ec:93:12:80:11:
b1:58:3b:b0:32:5d:40:20:43:ad:3f:f7:13:0c:9e:18:fe:13:
3a:72:b5:a4:09:52:8a:d9:5e:4f:34:c7:34:d6:90:25:19:05:
4b:a0:84:50:12:80:ac:fb:ac:98:d6:24:4b:10:ad:6f:d9:6c:
82:93:bc:bf:f8:d4:84:73:9c:82:48:c0:75:70:c3:f7:19:76:
32:9c:f0:3d:2d:3b:e0:2e:ba:fb:5e:a2:65:91:cb:45:e0:0e:
69:40:ee:42:9b:a8:b3:ae:c8:ed:f0:a5:51:c5:1b:86:94:42:
c6:e5:6a:ce:f7:93:fe:9f:f1:de:15:41:23:2f:ce:11:1f:16:
37:8a:5a:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:56:39 2026 by rpki-client