Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/kPfgHSfk4FFttCCtHtRYkRCQXbk.roa
File: kPfgHSfk4FFttCCtHtRYkRCQXbk.roa (raw, json)
Hash identifier: 79gKRmZ1YiBm+4TSS/3DQ+xjB2kQxDrxYWPGlqWrvCQ=
Subject key identifier: 90:F7:E0:1D:27:E4:E0:51:6D:B4:20:AD:1E:D4:58:91:10:90:5D:B9
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019F1D3C134997971FB4022E66ADB52666B0
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/kPfgHSfk4FFttCCtHtRYkRCQXbk.roa
Signing time: Wed 01 Jul 2026 10:31:43 +0000
ROA not before: Wed 01 Jul 2026 10:31:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198486
IP address blocks: 89.167.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:3c:13:49:97:97:1f:b4:02:2e:66:ad:b5:26:66:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jul 1 10:31:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90f7e01d27e4e0516db420ad1ed4589110905db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5a:a3:b8:c3:e6:e2:92:e1:e4:dd:c3:ce:d8:
36:4c:54:29:c0:2c:c9:db:2d:0e:44:11:59:e3:e2:
29:63:d3:2d:ec:01:2c:ec:af:02:8e:af:9f:4b:7e:
16:bb:e8:44:23:07:35:a0:f0:18:d3:2a:8c:c1:da:
7c:27:6d:e0:f6:75:8e:be:f1:d0:e0:95:0e:de:ea:
d2:03:7d:81:78:e8:e8:37:2b:97:18:91:0f:5e:23:
07:6c:82:f2:b1:58:c8:d5:1a:19:2d:df:01:65:41:
c1:b0:2c:e1:90:9a:7f:c3:16:08:92:a0:b6:8f:88:
8b:9a:30:b0:a3:60:b5:cb:8f:a4:4f:37:cf:03:5f:
5b:46:95:bc:5e:0c:61:48:cb:3f:f0:ab:5a:df:e0:
58:a6:5e:fb:06:a2:ee:88:06:dc:4f:41:74:cf:e9:
ba:5a:2c:f5:bb:08:11:08:54:43:16:83:b2:70:f1:
a7:d0:56:1e:6e:a8:0d:5b:fe:cd:ca:be:6a:95:fa:
ce:cf:d2:94:0b:d1:54:89:76:d9:65:03:5a:4e:e0:
da:5f:43:e8:8b:f8:7f:cb:c6:e0:69:92:18:d3:e7:
3c:5e:83:54:c8:74:42:d8:c6:dd:d0:b3:9e:52:87:
25:9f:65:e8:1e:f5:a8:3a:0a:17:26:b8:e3:07:19:
5e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F7:E0:1D:27:E4:E0:51:6D:B4:20:AD:1E:D4:58:91:10:90:5D:B9
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/kPfgHSfk4FFttCCtHtRYkRCQXbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.240.0/21
Signature Algorithm: sha256WithRSAEncryption
12:ca:3c:10:26:62:16:ba:af:79:ac:fc:24:21:75:32:76:aa:
21:07:03:fe:c8:4d:56:86:2a:30:9c:43:c1:98:63:00:7d:61:
3e:df:8a:91:91:cd:d5:2d:a0:d8:d8:ea:6e:d3:f8:93:d5:7d:
ee:97:4b:09:7d:45:1d:13:31:a0:6d:bd:e4:06:21:35:3a:50:
d6:3e:98:f4:ff:f9:03:ef:81:ff:90:61:35:2b:50:58:7a:fe:
98:ca:2f:50:ea:6c:6b:75:4e:02:3f:ac:10:33:93:eb:f4:c0:
6e:39:f7:72:ec:e9:2f:86:a0:a6:39:7d:08:9b:8c:ca:a4:de:
92:d9:b8:ea:7d:c3:f2:bc:ac:31:8c:46:77:53:5c:4b:a0:02:
3f:51:32:dd:5b:83:94:be:c5:ee:97:ef:57:cb:0f:70:e8:1c:
f0:91:70:4e:bc:48:27:62:35:a4:92:76:0b:b9:f5:6a:7d:f0:
12:6f:1a:a8:ae:9c:9b:bb:33:12:8a:49:02:a3:fe:de:2d:20:
7e:7b:ae:88:fc:72:4f:e8:0b:cf:f2:1f:da:cc:9a:c1:64:80:
7f:28:e9:13:da:bb:ae:b5:68:8f:ba:59:35:53:96:7e:3c:0e:
e6:19:38:9a:2f:a3:63:75:7d:d8:73:15:04:f9:9f:92:10:ef:
96:16:ff:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8dPBNJl5cftAIuZq21JmawMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0
MDdhODAwHhcNMjYwNzAxMTAzMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGY3ZTAxZDI3ZTRlMDUxNmRiNDIwYWQxZWQ0NTg5MTEwOTA1ZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVqjuMPm4pLh5N3Dztg2TFQpwCzJ
2y0ORBFZ4+IpY9Mt7AEs7K8Cjq+fS34Wu+hEIwc1oPAY0yqMwdp8J23g9nWOvvHQ
4JUO3urSA32BeOjoNyuXGJEPXiMHbILysVjI1RoZLd8BZUHBsCzhkJp/wxYIkqC2
j4iLmjCwo2C1y4+kTzfPA19bRpW8XgxhSMs/8Kta3+BYpl77BqLuiAbcT0F0z+m6
Wiz1uwgRCFRDFoOycPGn0FYebqgNW/7Nyr5qlfrOz9KUC9FUiXbZZQNaTuDaX0Po
i/h/y8bgaZIY0+c8XoNUyHRC2Mbd0LOeUocln2XoHvWoOgoXJrjjBxlezwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJD34B0n5OBRbbQgrR7UWJEQkF25MB8GA1UdIwQY
MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt
NWQ1NjA5ODljZjdiLzEva1BmZ0hTZms0RkZ0dENDdEh0UllrUkNRWGJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi
LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDWafwMA0G
CSqGSIb3DQEBCwUAA4IBAQASyjwQJmIWuq95rPwkIXUydqohBwP+yE1WhiownEPB
mGMAfWE+34qRkc3VLaDY2Opu0/iT1X3ul0sJfUUdEzGgbb3kBiE1OlDWPpj0//kD
74H/kGE1K1BYev6Yyi9Q6mxrdU4CP6wQM5Pr9MBuOfdy7OkvhqCmOX0Im4zKpN6S
2bjqfcPyvKwxjEZ3U1xLoAI/UTLdW4OUvsXul+9Xyw9w6BzwkXBOvEgnYjWkknYL
ufVqffASbxqorpybuzMSikkCo/7eLSB+e66I/HJP6AvP8h/azJrBZIB/KOkT2ruu
tWiPulk1U5Z+PA7mGTiaL6NjdX3YcxUE+Z+SEO+WFv83
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:12 2026 by rpki-client