Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/KCRx07iX6eTr2-bul7e3qBDim24.roa
File: KCRx07iX6eTr2-bul7e3qBDim24.roa (raw, json)
Hash identifier: /351fzq4bc527mYAAfj4ikJDxsaK1z/hJWX8xeg/xTc=
Subject key identifier: 28:24:71:D3:B8:97:E9:E4:EB:DB:E6:EE:97:B7:B7:A8:10:E2:9B:6E
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A1D5E89C8322407939FD1DDFFAEB423637
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/KCRx07iX6eTr2-bul7e3qBDim24.roa
Signing time: Fri 13 Nov 2026 17:15:53 +0000
ROA not before: Fri 13 Nov 2026 17:15:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203728
IP address blocks: 2a06:9801:15e5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d5:e8:9c:83:22:40:79:39:fd:1d:df:fa:eb:42:36:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Nov 13 17:15:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=282471d3b897e9e4ebdbe6ee97b7b7a810e29b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:df:3a:de:bc:06:a4:98:f7:e4:6a:9c:e4:2b:
bf:12:c0:f8:5b:20:f7:33:0b:59:68:ae:07:d4:74:
83:77:1d:8c:9d:78:56:62:ee:f7:e1:c6:ba:ab:bc:
d0:b4:7a:01:86:9d:2e:23:77:c3:de:13:bd:15:f3:
1d:c1:f8:63:39:39:32:66:d2:c3:37:ab:44:7c:b8:
90:46:35:8d:c2:21:00:d2:90:e9:2a:89:18:f7:e2:
40:31:af:09:b9:bd:4c:e3:8e:42:57:ca:ef:b1:53:
15:12:4e:5e:45:b6:70:0b:e2:3a:35:00:d7:82:d1:
23:32:b0:d5:d6:7b:fb:af:4b:44:9c:f6:3d:d8:aa:
34:66:2c:05:15:3c:41:cd:07:13:5b:97:70:09:47:
93:eb:1a:4f:74:92:19:47:f9:63:bd:0f:38:f8:b5:
95:fd:a7:ff:be:d2:71:cd:f6:f4:3b:b3:c2:b4:35:
54:ee:aa:1c:58:e6:23:00:39:62:68:e9:c7:f6:65:
9c:68:7c:7c:57:09:a5:1d:aa:23:70:3a:a6:a9:3b:
cd:2d:1d:d9:52:54:2c:e4:26:12:25:e6:f0:36:ea:
fd:58:f1:7e:39:4c:4c:76:a7:ea:9f:56:df:b7:40:
f5:38:a3:a2:dd:0f:fc:cc:82:47:4c:9e:bc:16:d8:
4b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:24:71:D3:B8:97:E9:E4:EB:DB:E6:EE:97:B7:B7:A8:10:E2:9B:6E
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/KCRx07iX6eTr2-bul7e3qBDim24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:15e5::/48
Signature Algorithm: sha256WithRSAEncryption
3e:22:bf:0c:9e:5d:c3:34:f9:fa:d3:71:7e:fb:00:05:c3:c2:
32:90:53:b1:0a:f6:f4:25:ef:ee:83:d9:d1:b2:94:70:c6:e3:
e4:28:37:d4:b5:cd:c2:7d:0a:c9:a8:4c:ea:2a:ad:e0:8c:c8:
31:8c:ae:f5:57:00:d3:b3:94:c0:a1:2c:06:95:97:dd:ce:ee:
02:7d:47:bf:cb:6c:ca:f0:98:f8:c9:97:27:06:a0:1a:7e:da:
a8:9c:d1:36:94:79:0a:92:82:02:75:c5:c0:a3:57:50:4f:83:
08:89:11:00:10:f9:92:7b:e1:59:cb:db:73:e9:f5:99:4b:5c:
81:be:5f:9c:f2:4e:94:b3:7c:58:8a:0b:21:4b:8a:d7:14:96:
e8:3f:57:19:3f:b6:8f:bd:42:a5:ac:0e:2e:36:ec:d1:02:77:
af:44:6e:a1:6d:2b:37:d6:cd:7d:7b:21:99:9e:59:73:31:f9:
90:b5:8f:95:ec:58:f1:53:cc:ea:64:c3:28:ae:cf:54:88:82:
4f:40:cb:08:fe:b1:70:15:18:c1:3f:68:f8:e3:ec:08:32:5d:
32:e9:82:20:a6:83:9b:e6:71:6c:6a:4d:a9:dd:ef:6e:2f:39:
16:42:04:bd:03:2b:55:a3:8c:da:47:d2:08:78:ef:6a:7c:19:
3d:b1:4f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:11:11 2026 by rpki-client