Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/kxVaEM_ahIi-CuS_Cu_luJkuGJA.roa
File: kxVaEM_ahIi-CuS_Cu_luJkuGJA.roa (raw, json)
Hash identifier: o7lX99+57a7A2fFvf3mYlJql65akn3ASYMdyC0ZxFGs=
Subject key identifier: 93:15:5A:10:CF:DA:84:88:BE:0A:E4:BF:0A:EF:E5:B8:99:2E:18:90
Certificate issuer: /CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Certificate serial: 019CC90CD312943EB8A9D2FA9574A060570E
Authority key identifier: E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/kxVaEM_ahIi-CuS_Cu_luJkuGJA.roa
Signing time: Sat 07 Mar 2026 16:06:26 +0000
ROA not before: Sat 07 Mar 2026 16:06:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399486
IP address blocks: 2a01:f240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:0c:d3:12:94:3e:b8:a9:d2:fa:95:74:a0:60:57:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Validity
Not Before: Mar 7 16:06:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93155a10cfda8488be0ae4bf0aefe5b8992e1890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f7:b5:9c:5c:8f:41:99:4d:6e:9b:c5:3d:b8:
68:d6:2d:05:ac:40:5a:14:e6:bb:85:69:3a:3f:57:
54:ba:73:29:c0:2b:75:5b:00:16:c8:e4:45:54:15:
ec:4e:d3:ca:11:9f:ff:ed:56:8a:4b:a6:1e:86:7c:
48:db:90:a8:6a:7e:7b:ab:73:6b:0e:74:be:db:bf:
91:94:a4:68:54:33:06:de:af:40:a4:36:e2:09:05:
7c:6e:19:ba:cd:a3:cd:6a:1a:2d:02:b4:51:90:6b:
c5:ae:5c:43:ff:f0:5f:59:d3:8a:46:83:36:74:3f:
a1:51:b7:6e:13:1e:59:4f:6b:f1:08:b4:fa:ed:a7:
93:5c:e5:b8:11:86:05:8b:04:6f:39:f9:46:39:79:
50:bc:b7:f2:0b:67:5e:79:38:06:2c:b6:9b:78:14:
cc:93:31:96:85:83:d5:32:eb:22:78:04:58:f1:3d:
fe:19:71:d6:36:f2:bc:37:0a:25:6d:ad:df:0c:e0:
dc:07:85:32:fe:42:2d:e6:7f:e2:6a:64:a3:1f:13:
fa:a9:60:98:3c:40:f3:1b:ad:c4:b7:a3:5c:93:2c:
0e:48:ad:54:7e:48:30:64:da:49:70:58:9b:0b:f0:
aa:5c:87:43:af:01:65:4b:2e:63:31:f0:0e:c3:0b:
a8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:15:5A:10:CF:DA:84:88:BE:0A:E4:BF:0A:EF:E5:B8:99:2E:18:90
X509v3 Authority Key Identifier:
keyid:E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/kxVaEM_ahIi-CuS_Cu_luJkuGJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f240::/29
Signature Algorithm: sha256WithRSAEncryption
68:c3:6b:f4:24:04:3c:57:9b:2a:3d:ef:a1:03:61:06:38:36:
1d:1f:86:cd:8c:34:16:72:13:42:bd:b5:29:31:de:49:15:b5:
ee:16:04:ec:f1:87:1d:aa:3a:37:08:23:61:4d:66:b3:c6:95:
17:63:fc:f6:47:a3:5d:a8:2e:22:3f:50:e2:4d:92:34:5b:3b:
e0:90:bb:e8:de:3a:d0:c4:71:4e:1e:a5:77:30:6e:5d:a7:62:
5b:7e:bf:92:61:af:09:09:5c:26:fc:23:9c:af:aa:aa:1e:b8:
f1:ee:45:53:ca:a6:7a:cc:a3:aa:0d:ae:02:42:64:49:d8:a9:
c2:06:7c:97:5e:24:3e:b7:d6:b4:f9:c6:07:0a:b9:db:ae:e8:
15:c6:dc:27:2e:4a:d1:c9:44:2c:d5:95:65:42:73:06:d9:1a:
40:0d:e0:96:e4:bb:80:49:a4:39:62:79:7e:d6:74:7c:a4:ef:
1d:94:79:54:37:a9:f9:8f:3d:64:88:a3:41:3c:a8:19:42:05:
f3:21:a9:68:dc:c6:cf:45:33:a0:68:06:39:34:fb:41:b6:a9:
a8:fd:31:76:10:36:a7:fe:62:84:b6:36:68:93:b8:db:7c:8f:
9f:b5:fb:d3:f8:ac:f3:b0:19:a3:18:30:af:79:67:81:6f:c6:
a9:35:df:b1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZzJDNMSlD64qdL6lXSgYFcOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZDdhYWEzZDI1YzJmOWViYmVjNzRjODMwY2MwY2RlOTMx
OGM4ZjgwHhcNMjYwMzA3MTYwNjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzE1NWExMGNmZGE4NDg4YmUwYWU0YmYwYWVmZTViODk5MmUxODkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfe1nFyPQZlNbpvFPbho1i0FrEBa
FOa7hWk6P1dUunMpwCt1WwAWyORFVBXsTtPKEZ//7VaKS6YehnxI25Coan57q3Nr
DnS+27+RlKRoVDMG3q9ApDbiCQV8bhm6zaPNahotArRRkGvFrlxD//BfWdOKRoM2
dD+hUbduEx5ZT2vxCLT67aeTXOW4EYYFiwRvOflGOXlQvLfyC2deeTgGLLabeBTM
kzGWhYPVMusieARY8T3+GXHWNvK8Nwolba3fDODcB4Uy/kIt5n/iamSjHxP6qWCY
PEDzG63Et6NckywOSK1UfkgwZNpJcFibC/CqXIdDrwFlSy5jMfAOwwuohQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJMVWhDP2oSIvgrkvwrv5biZLhiQMB8GA1UdIwQY
MBaAFOTXqqPSXC+eu+x0yDDMDN6TGMj4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5lcW85SmNMNTY3N0hUSU1Nd00zcE1ZeVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84YjQxNDctZTZlMC00ZDgwLWE5M2Yt
ZWY2M2I4MTZkZDM1LzEva3hWYUVNX2FoSWktQ3VTX0N1X2x1Smt1R0pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84YjQxNDctZTZlMC00ZDgwLWE5M2YtZWY2M2I4MTZkZDM1
LzEvNU5lcW85SmNMNTY3N0hUSU1Nd00zcE1ZeVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgHyQDAN
BgkqhkiG9w0BAQsFAAOCAQEAaMNr9CQEPFebKj3voQNhBjg2HR+GzYw0FnITQr21
KTHeSRW17hYE7PGHHao6NwgjYU1ms8aVF2P89kejXaguIj9Q4k2SNFs74JC76N46
0MRxTh6ldzBuXadiW36/kmGvCQlcJvwjnK+qqh648e5FU8qmesyjqg2uAkJkSdip
wgZ8l14kPrfWtPnGBwq5267oFcbcJy5K0clELNWVZUJzBtkaQA3gluS7gEmkOWJ5
ftZ0fKTvHZR5VDep+Y89ZIijQTyoGUIF8yGpaNzGz0UzoGgGOTT7QbapqP0xdhA2
p/5ihLY2aJO423yPn7X70/is87AZoxgwr3lngW/GqTXfsQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:52:25 2026 by rpki-client