Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/kRh4YKN-2UMQeIMeZGuK3R2evUs.roa
File: kRh4YKN-2UMQeIMeZGuK3R2evUs.roa (raw, json)
Hash identifier: UkRaCCylEfsJ6jBe0uhUuuVBq/zhdht9NklSO2ub3VQ=
Subject key identifier: 91:18:78:60:A3:7E:D9:43:10:78:83:1E:64:6B:8A:DD:1D:9E:BD:4B
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019CFB727E7C44E3E150102B6C9D4E0CD207
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/kRh4YKN-2UMQeIMeZGuK3R2evUs.roa
Signing time: Tue 17 Mar 2026 10:58:30 +0000
ROA not before: Tue 17 Mar 2026 10:58:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49077
IP address blocks: 193.231.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:72:7e:7c:44:e3:e1:50:10:2b:6c:9d:4e:0c:d2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 17 10:58:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91187860a37ed9431078831e646b8add1d9ebd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:e7:9f:2f:a9:5b:07:82:d2:da:75:ee:f6:
4d:16:e7:f1:28:45:71:1f:4e:ea:7b:33:cb:a2:ab:
a9:1b:a1:8d:a3:5b:69:c5:8e:d0:83:12:2b:70:ae:
5f:f8:fa:09:0d:61:83:7c:a4:38:b0:c8:c5:9c:50:
00:dc:76:ad:b5:53:9b:b0:d0:26:aa:cd:e9:17:60:
7f:a4:68:5f:52:fb:52:b6:e0:38:7f:0d:38:83:0a:
ff:6d:4c:49:f1:34:eb:4f:a5:dd:be:23:74:12:f1:
14:9c:6d:3e:27:7f:f7:00:55:92:bd:a2:66:e5:04:
4e:17:b6:24:10:ae:a5:1e:a8:81:b3:d4:4c:b2:41:
2d:c4:2f:8e:1e:19:94:3f:5b:5f:c8:ca:0e:71:fb:
b8:cf:77:d2:65:8c:8d:77:cd:0d:b1:05:e8:8d:3b:
d2:77:74:63:67:f7:92:4c:2a:9f:42:10:b5:f5:4b:
b2:e9:0f:b3:1f:fb:b1:c9:ae:ca:f3:c9:3e:93:0d:
cc:81:93:c9:3c:e2:a4:1e:b7:37:ac:55:63:11:04:
f9:e9:15:88:7c:24:ee:b9:03:9e:51:82:a2:7f:1e:
ed:1b:57:c3:b8:22:1d:cf:76:36:36:f1:cd:80:69:
89:ac:25:9f:2b:6e:1b:1b:ed:bc:06:2a:64:3c:94:
ee:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:18:78:60:A3:7E:D9:43:10:78:83:1E:64:6B:8A:DD:1D:9E:BD:4B
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/kRh4YKN-2UMQeIMeZGuK3R2evUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.231.151.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:79:f3:56:cd:1d:3d:81:b0:46:2d:f6:72:1c:73:ba:5f:f7:
80:21:b7:f0:b5:a0:bd:3c:16:e1:10:ea:82:ca:37:e4:5a:9f:
44:e0:a5:32:cb:38:91:10:40:ae:97:e6:ce:71:f3:3f:01:6a:
82:b4:e2:f9:a4:73:4b:d8:cd:cc:37:57:02:2c:9d:d9:ae:3e:
61:9d:11:c7:5c:b3:51:f8:c5:74:91:dc:5e:d3:c6:0f:93:d2:
72:5d:ea:57:25:5f:55:44:98:05:c5:71:b9:79:6e:49:06:76:
5c:1f:a2:00:b6:2e:ab:c2:40:b1:6f:3b:5d:82:62:75:5f:cc:
5b:24:06:08:07:ed:7e:71:74:89:05:72:b4:ea:65:a6:32:51:
7a:ca:4f:d0:f9:34:40:22:77:df:60:14:02:4d:45:58:72:95:
65:a5:ac:33:90:b9:d1:41:b1:1f:3c:b4:97:90:cc:65:6c:52:
e2:d5:2b:83:62:62:f6:89:82:1c:01:7b:69:85:96:ec:cd:6a:
c3:a1:63:e6:79:53:dc:25:ce:bc:71:d8:68:66:78:02:51:c7:
58:a9:37:91:1c:ae:9d:7a:51:b3:b3:4d:d5:ec:b6:89:19:1e:
39:5f:21:47:5d:a0:78:a7:1f:e1:62:3b:b0:19:7e:15:75:72:
9a:52:0d:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZz7cn58ROPhUBArbJ1ODNIHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYwMzE3MTA1ODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTE4Nzg2MGEzN2VkOTQzMTA3ODgzMWU2NDZiOGFkZDFkOWViZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0y7nny+pWweC0tp17vZNFufxKEVx
H07qezPLoqupG6GNo1tpxY7QgxIrcK5f+PoJDWGDfKQ4sMjFnFAA3HattVObsNAm
qs3pF2B/pGhfUvtStuA4fw04gwr/bUxJ8TTrT6XdviN0EvEUnG0+J3/3AFWSvaJm
5QROF7YkEK6lHqiBs9RMskEtxC+OHhmUP1tfyMoOcfu4z3fSZYyNd80NsQXojTvS
d3RjZ/eSTCqfQhC19Uuy6Q+zH/uxya7K88k+kw3MgZPJPOKkHrc3rFVjEQT56RWI
fCTuuQOeUYKifx7tG1fDuCIdz3Y2NvHNgGmJrCWfK24bG+28BipkPJTuTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJEYeGCjftlDEHiDHmRrit0dnr1LMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEva1JoNFlLTi0yVU1RZUlNZVpHdUszUjJldlVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweeXMA0G
CSqGSIb3DQEBCwUAA4IBAQBaefNWzR09gbBGLfZyHHO6X/eAIbfwtaC9PBbhEOqC
yjfkWp9E4KUyyziREECul+bOcfM/AWqCtOL5pHNL2M3MN1cCLJ3Zrj5hnRHHXLNR
+MV0kdxe08YPk9JyXepXJV9VRJgFxXG5eW5JBnZcH6IAti6rwkCxbztdgmJ1X8xb
JAYIB+1+cXSJBXK06mWmMlF6yk/Q+TRAInffYBQCTUVYcpVlpawzkLnRQbEfPLSX
kMxlbFLi1SuDYmL2iYIcAXtphZbszWrDoWPmeVPcJc68cdhoZngCUcdYqTeRHK6d
elGzs03V7LaJGR45XyFHXaB4px/hYjuwGX4VdXKaUg1Z
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:44:58 2026 by rpki-client