Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f9d515-e629-4d10-adf3-08bd2e6f2f2c/1/kfWSD5tVhW1XJa0Rw0pitcZgvIg.roa
File: kfWSD5tVhW1XJa0Rw0pitcZgvIg.roa (raw, json)
Hash identifier: 6vFBk5z4/iD79DEPt868wv+otcleLhuYUPcOmF1pykc=
Subject key identifier: 91:F5:92:0F:9B:55:85:6D:57:25:AD:11:C3:4A:62:B5:C6:60:BC:88
Certificate issuer: /CN=a3aa090efaadba03ac9943ab7ce23165786f981f
Certificate serial: 019C95FFAD3C62598E6D1EF80C488CE5FDE2
Authority key identifier: A3:AA:09:0E:FA:AD:BA:03:AC:99:43:AB:7C:E2:31:65:78:6F:98:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6oJDvqtugOsmUOrfOIxZXhvmB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9d515-e629-4d10-adf3-08bd2e6f2f2c/1/kfWSD5tVhW1XJa0Rw0pitcZgvIg.roa
Signing time: Wed 25 Feb 2026 18:11:27 +0000
ROA not before: Wed 25 Feb 2026 18:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48898
IP address blocks: 185.139.64.0/22 maxlen: 22
185.139.64.0/23 maxlen: 23
185.139.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9d515-e629-4d10-adf3-08bd2e6f2f2c/1/o6oJDvqtugOsmUOrfOIxZXhvmB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f9d515-e629-4d10-adf3-08bd2e6f2f2c/1/o6oJDvqtugOsmUOrfOIxZXhvmB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6oJDvqtugOsmUOrfOIxZXhvmB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:ff:ad:3c:62:59:8e:6d:1e:f8:0c:48:8c:e5:fd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3aa090efaadba03ac9943ab7ce23165786f981f
Validity
Not Before: Feb 25 18:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91f5920f9b55856d5725ad11c34a62b5c660bc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:da:c2:25:df:48:ac:7c:d3:36:a3:03:c3:49:
b0:81:8a:0c:eb:e4:c4:2f:b2:e3:62:50:b3:e4:f1:
9f:da:1f:01:74:aa:5c:ae:60:0c:9f:52:d5:40:4a:
50:27:b9:9f:6c:42:1b:ee:61:6e:91:e7:2f:db:e2:
db:90:e5:55:29:6e:81:f7:00:e7:c9:12:22:c6:2d:
68:ef:d3:d1:b0:b7:5e:3b:67:b5:6f:cf:fe:c9:f3:
d3:72:b7:54:ce:d2:3d:d2:d1:bc:4b:ab:a6:de:d8:
f6:1e:0d:ba:3b:6a:af:2f:8b:a9:6a:e2:39:2a:52:
7b:16:e6:5b:80:09:cf:96:6a:a7:c2:cc:38:a5:44:
49:4c:f4:7d:af:d6:bd:9f:3b:c7:62:05:fe:ef:6e:
12:b9:60:71:99:10:72:76:55:30:5d:e6:33:c7:c4:
1c:92:43:fa:aa:17:4a:72:02:bd:3b:d7:64:c4:0a:
87:f4:eb:87:e8:61:80:c9:a0:0c:af:a9:cd:c6:4c:
57:7f:cf:64:8d:67:aa:4f:03:87:50:7e:b5:6d:3f:
90:e5:af:e1:b5:e6:10:0c:67:71:a7:4b:e0:3a:90:
69:d0:76:3c:e9:be:af:60:e5:c7:04:27:63:b9:ed:
58:85:91:2c:e5:aa:72:43:ea:23:3f:56:02:ae:b1:
10:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F5:92:0F:9B:55:85:6D:57:25:AD:11:C3:4A:62:B5:C6:60:BC:88
X509v3 Authority Key Identifier:
keyid:A3:AA:09:0E:FA:AD:BA:03:AC:99:43:AB:7C:E2:31:65:78:6F:98:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6oJDvqtugOsmUOrfOIxZXhvmB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9d515-e629-4d10-adf3-08bd2e6f2f2c/1/kfWSD5tVhW1XJa0Rw0pitcZgvIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9d515-e629-4d10-adf3-08bd2e6f2f2c/1/o6oJDvqtugOsmUOrfOIxZXhvmB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.64.0/22
Signature Algorithm: sha256WithRSAEncryption
75:61:54:6d:ce:af:d8:95:cb:88:39:cf:b5:bd:eb:23:0b:d1:
ce:bd:3c:e2:00:49:32:9c:38:57:1e:37:a3:13:7e:a6:22:13:
40:41:de:c1:f8:38:75:c3:b0:60:17:19:b3:a4:4f:6d:1e:dc:
57:b3:c6:71:15:96:22:93:e7:78:12:75:89:18:94:e3:9d:cc:
5a:e7:67:1e:aa:ed:db:a5:08:8f:19:8a:e6:4f:01:ed:e7:25:
91:b1:28:fe:e9:08:4a:d9:0e:79:47:09:a2:bc:a9:fb:57:98:
a1:8e:7f:6b:a7:eb:38:19:ee:fa:bd:4a:5f:cc:14:5d:06:d8:
ec:64:9f:c3:43:74:a3:f0:7f:9e:a0:da:29:04:27:1a:f9:cf:
22:3e:5b:d7:b4:fc:e0:20:48:ef:1a:1f:c1:34:44:a6:b5:22:
ab:4e:38:5b:e1:5c:8c:68:9c:ae:06:e8:7e:4b:a2:75:f6:ff:
04:6d:ca:c2:e5:ee:d0:4b:d9:9d:5f:42:0e:c9:6e:32:9a:ae:
1b:2f:ed:1f:ec:79:3d:41:bc:0d:c4:4c:92:ec:60:51:61:fa:
2d:a4:3a:15:ca:cb:c0:13:8e:ef:d7:ac:89:12:b5:14:0f:86:
c6:ad:a8:86:a2:1b:e4:16:d4:32:fe:fc:55:e0:fc:9b:73:ad:
72:b2:9d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:22:42 2026 by rpki-client