Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/khBB3AW03WR7EkUzikehN79I_gs.roa
File: khBB3AW03WR7EkUzikehN79I_gs.roa (raw, json)
Hash identifier: 2zf7LHm+7vkzkHQ/0UdZmSp89/Z6CnUfifq1W+dUW+k=
Subject key identifier: 92:10:41:DC:05:B4:DD:64:7B:12:45:33:8A:47:A1:37:BF:48:FE:0B
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01A1CB82A97F45F6F014508ADE643EEC1F79
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/khBB3AW03WR7EkUzikehN79I_gs.roa
Signing time: Wed 11 Nov 2026 16:48:20 +0000
ROA not before: Wed 11 Nov 2026 16:48:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 91.108.213.0/24 maxlen: 24
91.108.225.0/24 maxlen: 24
91.108.247.0/24 maxlen: 24
91.108.248.0/24 maxlen: 24
91.108.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:82:a9:7f:45:f6:f0:14:50:8a:de:64:3e:ec:1f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Nov 11 16:48:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=921041dc05b4dd647b1245338a47a137bf48fe0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f4:20:66:a5:5a:9e:ac:21:44:4b:f0:db:ad:
bc:8a:7e:01:fc:b5:35:97:b1:84:02:79:06:c6:9e:
40:eb:0e:83:11:4e:a5:56:94:64:ee:a6:c7:73:93:
9c:aa:77:a7:84:83:7e:d8:23:99:ab:8f:3b:78:65:
fd:ec:6a:d2:17:86:e1:e4:33:81:b5:78:27:20:44:
1e:14:0e:83:ab:1a:be:f6:7b:10:8d:6d:70:87:fe:
b4:69:4e:3b:ff:a3:04:c8:2f:0a:be:c8:32:c1:7c:
56:7e:77:f8:7c:a9:bd:0b:d7:3b:02:59:9b:2c:94:
be:17:b4:fe:36:86:33:d1:da:e3:0b:5d:d8:07:5c:
74:e8:16:98:1e:f4:9f:4f:c7:71:75:39:8f:e2:1b:
72:29:8f:c1:ac:7a:26:f1:d1:0e:02:f9:62:da:08:
26:05:28:a9:50:4a:74:af:07:7f:b3:96:14:cf:e0:
f5:a5:00:1c:0c:e5:98:d1:d2:76:11:f6:61:98:e4:
22:9b:ab:ea:25:04:84:a3:24:c5:74:bd:28:41:0b:
94:7c:37:2f:3e:fe:a6:07:8b:c2:70:f6:92:bd:56:
1c:d0:0a:a9:d4:d0:75:20:38:a9:0b:1f:6f:fb:4a:
23:15:44:b0:a5:35:27:76:2c:80:cf:c4:2d:45:d4:
2a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:10:41:DC:05:B4:DD:64:7B:12:45:33:8A:47:A1:37:BF:48:FE:0B
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/khBB3AW03WR7EkUzikehN79I_gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.213.0/24
91.108.225.0/24
91.108.247.0-91.108.248.255
91.108.254.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:0c:ff:b9:eb:c4:a9:39:5b:18:e0:79:46:fd:02:85:70:b8:
fb:06:89:82:17:e8:1b:53:2d:5e:a9:70:d5:30:7b:1c:55:00:
0c:fa:ff:b4:4a:42:b2:57:61:9f:0a:cd:f1:af:27:f9:f3:fd:
f2:03:99:4a:ec:5d:49:db:02:af:b4:0a:0f:55:47:f5:3c:08:
8b:cb:53:8b:86:66:23:17:75:00:cd:1e:83:14:f2:1e:2b:d5:
70:df:96:37:b1:cb:80:57:b9:33:44:2a:4d:ef:57:cc:40:88:
d4:0f:5c:a4:68:29:c6:12:33:73:02:1f:d1:e7:a2:b6:50:52:
63:7c:50:d8:5c:fd:fe:f0:8b:d4:83:83:91:83:7e:b3:cd:35:
e9:b6:03:4f:80:32:15:ea:f1:f0:b0:89:8a:a6:4f:28:50:14:
1e:8e:17:2d:fb:22:a7:e8:b6:6c:57:92:79:27:30:ef:af:17:
64:2d:c1:89:56:f3:2d:cf:44:a2:2c:7f:4a:62:15:ce:0f:0b:
39:6d:5c:f0:e2:98:6d:dd:45:90:5c:4b:45:c9:55:e1:dd:7f:
ab:19:a8:0f:d1:df:90:77:90:4a:ad:4d:3d:b5:cf:c7:94:c9:
0b:f8:bf:25:99:5b:ff:bc:50:39:64:e3:b7:0e:72:88:08:2f:
0f:86:2d:4f
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAaHLgql/RfbwFFCK3mQ+7B95MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm
NzMzMzkwHhcNMjYxMTExMTY0ODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjEwNDFkYzA1YjRkZDY0N2IxMjQ1MzM4YTQ3YTEzN2JmNDhmZTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/QgZqVanqwhREvw2628in4B/LU1
l7GEAnkGxp5A6w6DEU6lVpRk7qbHc5OcqnenhIN+2COZq487eGX97GrSF4bh5DOB
tXgnIEQeFA6Dqxq+9nsQjW1wh/60aU47/6MEyC8KvsgywXxWfnf4fKm9C9c7Almb
LJS+F7T+NoYz0drjC13YB1x06BaYHvSfT8dxdTmP4htyKY/BrHom8dEOAvli2ggm
BSipUEp0rwd/s5YUz+D1pQAcDOWY0dJ2EfZhmOQim6vqJQSEoyTFdL0oQQuUfDcv
Pv6mB4vCcPaSvVYc0Aqp1NB1IDipCx9v+0ojFUSwpTUndiyAz8QtRdQqYwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFJIQQdwFtN1kexJFM4pHoTe/SP4LMB8GA1UdIwQY
MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt
ZGE3NTQzMGIxNmY2LzEva2hCQjNBVzAzV1I3RWtVemlrZWhONzlJX2dzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2
LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAW2zVAwQA
W2zhMAwDBABbbPcDBABbbPgDBABbbP4wDQYJKoZIhvcNAQELBQADggEBAGwM/7nr
xKk5WxjgeUb9AoVwuPsGiYIX6BtTLV6pcNUwexxVAAz6/7RKQrJXYZ8KzfGvJ/nz
/fIDmUrsXUnbAq+0Cg9VR/U8CIvLU4uGZiMXdQDNHoMU8h4r1XDfljexy4BXuTNE
Kk3vV8xAiNQPXKRoKcYSM3MCH9HnorZQUmN8UNhc/f7wi9SDg5GDfrPNNem2A0+A
MhXq8fCwiYqmTyhQFB6OFy37IqfotmxXknknMO+vF2QtwYlW8y3PRKIsf0piFc4P
CzltXPDimG3dRZBcS0XJVeHdf6sZqA/R35B3kEqtTT21z8eUyQv4vyWZW/+8UDlk
47cOcogILw+GLU8=
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:35:54 2026 by rpki-client