Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/KsjvwRtdC7ElA6WAWYk0fsDa_00.roa
File: KsjvwRtdC7ElA6WAWYk0fsDa_00.roa (raw, json)
Hash identifier: ygwPQfipezTsIcrC5hzYSZFNHgwNil2m9OuOezohF0I=
Subject key identifier: 2A:C8:EF:C1:1B:5D:0B:B1:25:03:A5:80:59:89:34:7E:C0:DA:FF:4D
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 01A0C980A8676549D4F3973DE45F59210427
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/KsjvwRtdC7ElA6WAWYk0fsDa_00.roa
Signing time: Tue 22 Sep 2026 14:24:07 +0000
ROA not before: Tue 22 Sep 2026 14:24:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402604
IP address blocks: 2a11:69c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:80:a8:67:65:49:d4:f3:97:3d:e4:5f:59:21:04:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Sep 22 14:24:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ac8efc11b5d0bb12503a5805989347ec0daff4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:98:3f:3f:e7:c1:2f:c3:8c:84:32:82:d7:ae:
79:03:b3:06:6f:f7:46:49:b2:8d:b1:d5:35:2c:69:
92:27:b9:e7:e5:41:d4:05:8b:61:c7:0a:d7:58:4d:
ab:e6:91:71:5f:d0:40:fd:2d:d7:dd:e9:ab:36:68:
02:25:97:4c:70:34:00:c8:eb:e4:4f:65:0e:93:56:
0f:f9:92:7c:25:33:38:6a:4b:9f:c0:79:05:78:4e:
de:f2:ad:b7:97:9e:a0:a6:58:5c:25:98:8f:67:bf:
ca:d3:06:d4:7b:88:1f:75:df:ed:d2:b9:4b:81:cd:
1b:ed:a5:33:1f:e2:48:e3:1b:d1:d9:8f:52:32:48:
ba:66:e2:69:3f:7b:a4:8c:db:8c:39:8e:aa:ce:a2:
f4:0c:9e:f6:ed:2a:d9:f3:a2:6c:e9:34:1f:ed:a6:
c5:76:b5:92:7f:da:fe:7e:cb:23:d4:1f:e9:73:5b:
72:ce:59:83:33:b9:a3:5c:8c:60:09:c8:1d:d4:2a:
ca:a9:fe:f2:b2:ed:47:82:22:fc:73:a0:e0:cf:e6:
60:7e:0a:3f:4d:71:9f:a7:c4:29:7c:e8:e5:1b:a5:
e3:85:d9:cb:2c:bc:bd:bf:0b:f2:03:62:ab:80:18:
ba:78:f1:7c:2c:42:23:cf:ec:ce:31:05:c7:4d:b8:
b3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C8:EF:C1:1B:5D:0B:B1:25:03:A5:80:59:89:34:7E:C0:DA:FF:4D
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/KsjvwRtdC7ElA6WAWYk0fsDa_00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:69c0::/29
Signature Algorithm: sha256WithRSAEncryption
36:b7:1c:91:f0:48:d7:c8:59:fd:04:5c:6c:2f:70:89:d9:1d:
97:cc:32:1f:18:e8:51:d4:8d:8f:e8:16:79:90:12:72:3a:f8:
df:e7:7d:a4:33:f0:03:b7:0c:e2:69:ad:11:77:60:8c:70:40:
f3:97:b4:b3:d7:af:88:48:69:cb:df:b8:9f:eb:31:fb:60:4e:
9f:94:aa:2c:7f:51:b4:2a:2c:69:bc:c6:c9:a9:d0:64:73:0e:
a6:66:3d:c1:65:bd:72:ac:c9:85:6c:fb:10:f0:e1:83:3e:cc:
9d:de:b7:2d:ee:2c:d2:65:ca:b8:08:87:eb:fa:15:9e:99:fb:
cb:06:0c:8a:b2:63:6c:e2:67:dc:c1:88:c5:71:8f:5d:a9:ae:
f2:87:53:4e:5c:6a:72:9f:29:4b:18:3f:dc:2b:af:e3:8f:c6:
44:ca:dd:4a:35:3e:2e:f4:cc:94:2f:8a:99:7a:59:07:39:ad:
a2:d5:c8:bb:a7:89:9c:3b:4d:d7:1b:1a:eb:9b:cd:b1:76:89:
19:87:96:fb:fe:c9:a6:82:1d:25:b9:bc:aa:85:e2:7d:2d:f0:
94:c1:69:15:68:7e:63:cf:ef:1a:59:e9:b5:84:1a:f9:b5:9c:
27:69:17:ac:30:8e:39:63:6f:f5:a1:3f:cf:dd:4d:ba:21:cf:
ea:8e:ab:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:31 2026 by rpki-client