Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/KX-Fm4slBskiadGc0gae08CjHRg.roa
File: KX-Fm4slBskiadGc0gae08CjHRg.roa (raw, json)
Hash identifier: I5G3ybjJPmIY+60wSno72HJjtbgaDphJIX0mVnvNzM4=
Subject key identifier: 29:7F:85:9B:8B:25:06:C9:22:69:D1:9C:D2:06:9E:D3:C0:A3:1D:18
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019D2BE987257DC76C980BC3DC42FDD548C2
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/KX-Fm4slBskiadGc0gae08CjHRg.roa
Signing time: Thu 26 Mar 2026 20:50:17 +0000
ROA not before: Thu 26 Mar 2026 20:50:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206174
IP address blocks: 2a0d:d3c0::/29 maxlen: 29
2a0d:e240::/32 maxlen: 32
2a0d:f5c0::/29 maxlen: 29
2a0e:8c0::/29 maxlen: 29
2a11:b4c2::/32 maxlen: 32
2a12:2801::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:e9:87:25:7d:c7:6c:98:0b:c3:dc:42:fd:d5:48:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Mar 26 20:50:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=297f859b8b2506c92269d19cd2069ed3c0a31d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:ef:80:c0:8e:79:2d:66:f6:81:b2:8c:c3:
27:6b:9b:af:4f:f0:ba:fa:ab:5d:de:1f:cf:70:5f:
cd:c7:24:e7:4c:1a:2c:36:9a:7b:59:ab:93:68:0a:
09:5a:be:07:64:1f:37:cb:19:e6:fa:23:e1:c5:8d:
8f:b6:b2:4b:f4:91:e0:08:d2:2c:62:bb:32:b3:bd:
10:2a:01:19:d4:38:4f:07:28:61:15:be:ff:cc:26:
50:3d:d0:df:4b:63:4a:b2:97:31:7f:fe:31:8b:99:
76:cb:c1:f1:4c:b3:06:ff:6c:3f:f5:e4:ae:37:7f:
c7:69:84:61:99:41:84:89:5e:56:54:aa:bd:62:a1:
d7:3e:2d:a2:2f:5c:00:33:bd:e6:37:8f:66:ef:1e:
5f:4f:b4:5e:bb:7c:e0:9e:e7:10:83:00:0b:c9:03:
06:00:cf:30:a6:e2:53:a4:15:b0:2d:4b:c9:f1:d5:
47:97:60:7c:7d:fd:b4:73:9a:9b:cd:fd:3f:42:c6:
8e:9f:26:a8:2f:8d:53:6e:84:08:af:63:92:16:1f:
e4:7f:24:1d:b2:27:b2:fc:66:25:24:17:dc:31:62:
a1:53:05:96:bc:ab:33:e9:cd:5c:b5:61:73:f5:2a:
14:f4:4c:35:2c:5f:4a:36:b1:a4:52:b1:8b:55:2f:
f7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7F:85:9B:8B:25:06:C9:22:69:D1:9C:D2:06:9E:D3:C0:A3:1D:18
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/KX-Fm4slBskiadGc0gae08CjHRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d3c0::/29
2a0d:e240::/32
2a0d:f5c0::/29
2a0e:8c0::/29
2a11:b4c2::/32
2a12:2801::/32
Signature Algorithm: sha256WithRSAEncryption
2b:c2:3b:38:5a:a3:63:60:ee:b9:5f:50:9a:53:3c:c9:4f:23:
05:ae:c6:12:99:1f:6e:be:9c:69:b8:b9:c3:0d:81:9d:f0:aa:
5d:de:c9:f8:ea:0f:a6:5f:ae:c5:bb:5a:43:79:4d:e4:2d:89:
d0:22:aa:09:f7:45:97:a6:49:8e:f2:e9:68:53:d8:27:de:0b:
d7:39:04:0f:50:7e:7c:dc:70:11:82:aa:ef:6e:c8:85:11:8c:
4e:b5:fc:33:4e:1d:07:00:57:44:07:24:7c:cd:05:90:77:55:
b2:15:8f:19:20:ab:dc:e6:6e:a6:3f:74:82:5f:eb:2e:6b:9c:
06:c7:f7:a3:2f:55:9c:af:4b:5f:79:d8:9c:c2:57:30:ad:1d:
f7:89:ed:79:bc:a9:c7:89:f3:1f:6b:bf:47:b6:51:3c:e4:99:
85:29:06:27:d6:42:31:31:f9:de:e0:49:a8:bb:21:aa:1c:fe:
4f:98:22:78:16:2b:db:cb:ce:bb:7a:06:ee:29:69:c6:83:f4:
b1:08:f5:52:d6:66:6c:00:0f:ac:3d:40:49:81:1c:fd:5f:0c:
61:a8:0f:87:0a:1e:bb:4d:bb:bd:27:38:e4:a1:5d:d3:09:40:
e8:a1:8e:0e:b2:d3:cb:2d:4b:fe:ba:30:0b:30:ab:5f:74:1a:
60:f8:cf:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:30:04 2026 by rpki-client