Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/kM7jrOPFPT-6YGDlaG-RNUu4h_s.roa
File: kM7jrOPFPT-6YGDlaG-RNUu4h_s.roa (raw, json)
Hash identifier: DfZkufVjgHYkAHiZVDL7NP6ZhRWxaaW+cyM3nOVG8nY=
Subject key identifier: 90:CE:E3:AC:E3:C5:3D:3F:BA:60:60:E5:68:6F:91:35:4B:B8:87:FB
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 019F1E124E085E519D41F726C80DDFCD6AFC
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/kM7jrOPFPT-6YGDlaG-RNUu4h_s.roa
Signing time: Wed 01 Jul 2026 14:25:43 +0000
ROA not before: Wed 01 Jul 2026 14:25:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.149.94.0/24 maxlen: 24
80.246.229.0/24 maxlen: 24
80.246.230.0/24 maxlen: 24
80.246.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1e:12:4e:08:5e:51:9d:41:f7:26:c8:0d:df:cd:6a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jul 1 14:25:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90cee3ace3c53d3fba6060e5686f91354bb887fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:14:09:80:3d:6f:bb:c0:63:c2:e4:d1:cf:
b4:61:25:d4:f4:30:80:02:59:1a:02:97:02:b2:b0:
ea:52:98:72:2e:5d:a9:46:8b:67:55:f9:d0:5c:c8:
b8:74:91:fa:ea:50:68:3f:e3:15:8b:36:e9:97:70:
fd:b2:26:aa:0e:b4:02:40:a0:55:ce:6e:16:fe:b6:
77:49:2e:e9:a3:a1:9f:fb:92:68:4f:36:4c:b0:cd:
22:89:33:46:7a:65:08:4a:cc:ef:6e:4f:bc:c8:b7:
98:e6:ff:71:60:ae:1f:f0:c4:6a:68:ec:de:a8:8e:
d3:e6:0e:31:43:c2:a4:ce:c4:5f:b0:c2:98:c9:21:
b9:5d:42:31:dc:9b:96:0d:8b:ed:07:53:50:be:c5:
1f:a9:19:fa:93:2e:89:b2:95:71:9d:19:46:e2:b9:
98:1b:1c:f7:e2:ac:d6:d6:7b:81:e3:ad:60:a2:df:
09:94:10:5d:4e:0f:93:be:42:b3:50:93:db:17:d8:
6e:f1:0b:98:cc:8a:32:73:d7:e7:10:31:25:dd:c9:
50:3f:ff:71:08:eb:69:cf:70:77:d2:38:9e:7b:55:
35:3a:f0:93:e9:cf:41:27:e0:e3:51:5b:73:8e:00:
fc:f5:d0:23:6b:42:18:2f:ac:b6:ce:3a:a0:72:2d:
86:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CE:E3:AC:E3:C5:3D:3F:BA:60:60:E5:68:6F:91:35:4B:B8:87:FB
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/kM7jrOPFPT-6YGDlaG-RNUu4h_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.94.0/24
80.246.229.0-80.246.230.255
80.246.232.0/21
Signature Algorithm: sha256WithRSAEncryption
38:3c:da:64:4b:b8:4f:68:a2:bd:a6:2a:93:ac:bd:26:a1:f7:
dd:15:90:db:b8:01:a2:aa:d6:28:46:fa:af:dc:ce:53:ad:b8:
6c:de:83:fb:6b:8e:56:44:b9:c1:07:27:b0:e9:0a:54:6c:56:
a0:bc:99:52:05:f7:6d:28:95:8d:5c:48:00:42:5f:71:a7:dc:
6e:a6:c6:d2:5c:53:25:5e:6b:bc:f8:c3:ba:ef:70:b1:e7:98:
24:4f:a4:7d:c0:57:30:f6:ec:b0:f4:11:bc:e3:e0:f7:cb:45:
1e:20:98:86:20:4e:bd:fd:5a:7b:c5:00:7e:7e:82:82:15:99:
92:4b:93:9a:ce:7b:8d:9c:d6:2b:22:26:2c:5d:8b:e7:b3:0a:
3d:19:9d:a5:25:e4:68:33:47:39:04:f2:cb:8f:60:7e:30:34:
8f:f3:5a:88:b8:2a:44:dd:ae:4a:57:eb:73:d6:8c:74:b8:ad:
01:32:73:60:de:20:fb:14:45:39:dd:14:21:1b:0a:8e:2c:5d:
3d:92:ce:c8:39:d0:ec:e1:50:2a:c0:a6:a8:04:08:64:68:16:
90:30:8d:e7:49:c2:4e:cb:a5:68:38:da:fc:a9:c2:79:41:9b:
bc:d0:51:52:da:1a:9a:52:e4:f3:21:e7:e2:ca:5b:b4:ed:d8:
d3:1b:5f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:44 2026 by rpki-client