Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/kOQCx-Wt3RfUtND4HBeOaf-__Ao.roa
File: kOQCx-Wt3RfUtND4HBeOaf-__Ao.roa (raw, json)
Hash identifier: 6wtyOlYKb3vdJIPgCwFvXGUrxNL2Wzr22WnpzvrLq54=
Subject key identifier: 90:E4:02:C7:E5:AD:DD:17:D4:B4:D0:F8:1C:17:8E:69:FF:BF:FC:0A
Certificate issuer: /CN=41b888cec06f8aa59becccc7b3a97018abb73d0b
Certificate serial: 019F2368BD1A5A77C6304417C1E7A09E95A4
Authority key identifier: 41:B8:88:CE:C0:6F:8A:A5:9B:EC:CC:C7:B3:A9:70:18:AB:B7:3D:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbiIzsBviqWb7MzHs6lwGKu3PQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/kOQCx-Wt3RfUtND4HBeOaf-__Ao.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59880
IP address blocks: 2a0f:fdc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbiIzsBviqWb7MzHs6lwGKu3PQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bd:1a:5a:77:c6:30:44:17:c1:e7:a0:9e:95:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b888cec06f8aa59becccc7b3a97018abb73d0b
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90e402c7e5addd17d4b4d0f81c178e69ffbffc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:71:1a:08:b1:41:70:1e:ca:ff:38:0c:8c:04:
b0:7e:3a:18:99:d5:95:68:42:57:b7:6d:05:ee:f2:
64:90:5d:54:25:79:9f:3b:09:a4:14:c1:00:af:28:
0b:f9:56:cf:d7:7f:0c:d9:94:69:f9:fa:50:59:6c:
df:b8:3f:6f:ce:63:bb:f0:bf:1f:89:08:a9:c9:05:
f7:ca:85:8a:9d:b0:1d:3e:1b:ea:c5:c1:d8:12:de:
87:e1:95:24:c1:0c:8c:52:85:24:bd:64:04:18:0b:
28:62:46:3c:48:bc:b4:9e:92:6f:72:55:98:b4:5f:
b5:b4:59:3f:7d:1f:e8:af:cc:41:19:c9:0d:f1:d3:
66:2a:3a:eb:30:47:23:f1:6e:42:00:6c:fb:7e:c0:
db:c3:64:c0:92:b5:70:ca:bf:70:17:73:b0:a9:34:
49:a6:5a:d5:74:0a:87:65:e4:dd:56:f0:eb:9c:fe:
f4:12:37:0a:73:10:af:d4:15:6e:ca:ed:7c:2a:f8:
c8:7a:c4:89:a6:2a:01:13:0c:c9:6a:ce:0d:aa:a1:
dd:0e:8b:f4:e7:a0:e6:04:fa:8f:7f:ab:03:b0:80:
a7:cf:26:39:ae:b9:8d:17:77:6b:10:59:5f:a2:12:
70:36:09:dd:af:70:be:5b:dd:2e:64:5c:17:20:3b:
cd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E4:02:C7:E5:AD:DD:17:D4:B4:D0:F8:1C:17:8E:69:FF:BF:FC:0A
X509v3 Authority Key Identifier:
keyid:41:B8:88:CE:C0:6F:8A:A5:9B:EC:CC:C7:B3:A9:70:18:AB:B7:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbiIzsBviqWb7MzHs6lwGKu3PQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/kOQCx-Wt3RfUtND4HBeOaf-__Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:fdc0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:c1:92:98:0d:7d:37:ed:c3:69:e7:5e:46:8d:fc:cd:eb:59:
3a:a6:35:9f:3d:99:2c:24:1c:58:fb:cf:13:f9:2b:98:58:d2:
3f:c3:0d:29:72:d8:57:02:01:1e:ad:85:8a:20:d9:f5:bc:44:
c1:26:df:65:24:32:8e:59:4b:be:1e:1a:b9:75:80:47:8a:b2:
35:53:81:c4:9a:0b:e4:e5:32:00:fe:86:4c:3e:7f:e9:b6:e7:
bd:85:b9:d1:11:53:50:30:e5:08:ab:58:a9:48:c7:23:1e:5c:
87:32:c8:89:7b:ce:e7:91:29:ef:06:54:77:27:56:7c:b0:eb:
49:23:4e:ca:91:ef:cf:51:0d:8a:6e:70:48:5c:1e:3e:dd:e2:
69:78:d5:9c:07:1f:a4:27:25:98:ee:76:53:6b:1c:12:87:cc:
74:03:d1:6c:ff:8a:f6:53:3b:45:e2:07:14:d1:29:03:8f:89:
0b:ef:c4:87:68:bc:5a:a5:81:77:22:40:2a:03:8c:62:19:81:
bf:25:6a:3d:e5:64:77:38:7c:42:87:c7:4d:d8:43:1d:b7:f2:
e9:df:76:05:e7:4b:ff:9f:fc:dd:ee:07:cf:b7:76:cf:55:7b:
60:6e:0f:33:bd:20:e0:a4:e8:42:82:24:27:e9:f7:c5:33:cc:
7c:56:0e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:43:42 2026 by rpki-client