Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/KtMopkBrVFdpycc3fX767BhX1qU.roa
File: KtMopkBrVFdpycc3fX767BhX1qU.roa (raw, json)
Hash identifier: h1G32kaGzjrDxQ1aq1Qj6w/YjisVW2UQX1zlg/NTWEQ=
Subject key identifier: 2A:D3:28:A6:40:6B:54:57:69:C9:C7:37:7D:7E:FA:EC:18:57:D6:A5
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019D0253F62B29E9A3FF3DF225617FFCBBEF
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/KtMopkBrVFdpycc3fX767BhX1qU.roa
Signing time: Wed 18 Mar 2026 19:02:30 +0000
ROA not before: Wed 18 Mar 2026 19:02:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205828
IP address blocks: 2a0d:5340::/29 maxlen: 29
2a0d:b2c0::/29 maxlen: 29
2a0d:e245::/32 maxlen: 32
2a0f:2200::/29 maxlen: 29
2a0f:cb80::/29 maxlen: 29
2a11:25c0::/29 maxlen: 29
2a12:2f80::/29 maxlen: 29
2a12:ce00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:02:53:f6:2b:29:e9:a3:ff:3d:f2:25:61:7f:fc:bb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Mar 18 19:02:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ad328a6406b545769c9c7377d7efaec1857d6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:ac:c9:db:15:42:6e:c4:43:f7:12:29:6c:
f4:d2:e3:84:76:12:54:b5:16:9e:5b:75:60:84:4f:
3c:ea:7c:3e:e0:9c:c7:3e:11:36:d2:a9:99:7d:6d:
30:83:0e:69:26:80:ca:b0:4c:6f:fb:9c:96:63:9e:
aa:fb:6d:63:7b:61:4d:ca:74:39:f7:1b:4c:72:3e:
d1:54:ae:89:b5:03:29:47:37:ff:04:94:82:a0:ad:
04:62:f0:b7:70:57:76:71:ea:0f:80:20:50:84:22:
bc:4c:d1:70:5f:de:4a:da:68:6e:9e:88:3a:a7:2c:
9f:58:2a:35:d3:6c:9f:4c:22:3a:a8:14:06:dc:84:
23:e4:32:5c:b6:8a:ff:d0:7d:32:b2:f1:c3:f8:9a:
3b:ac:61:4a:e1:01:a3:c7:11:ea:cb:8b:bf:19:c3:
2f:78:97:8c:05:5b:ec:b5:65:95:b2:85:e7:bf:c5:
df:70:16:47:0e:56:7d:78:3e:b4:78:ed:b9:1a:4f:
d9:39:00:14:33:e6:aa:22:37:b6:20:25:96:02:03:
e1:7f:38:f4:09:5d:0e:4e:3c:90:59:27:b7:2c:91:
08:40:8a:66:a7:18:6f:6e:29:10:d2:e7:c0:62:42:
fc:68:97:d8:87:53:8c:f5:8f:d1:43:a2:9e:08:de:
cc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D3:28:A6:40:6B:54:57:69:C9:C7:37:7D:7E:FA:EC:18:57:D6:A5
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/KtMopkBrVFdpycc3fX767BhX1qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:5340::/29
2a0d:b2c0::/29
2a0d:e245::/32
2a0f:2200::/29
2a0f:cb80::/29
2a11:25c0::/29
2a12:2f80::/29
2a12:ce00::/29
Signature Algorithm: sha256WithRSAEncryption
4a:ae:26:42:84:a5:ee:79:29:03:be:47:c4:76:e6:02:e6:ff:
af:7f:42:a1:51:24:23:1b:df:fc:03:9d:2d:22:2e:6e:a1:15:
35:db:95:4b:f0:57:99:8e:90:10:05:ee:5b:a3:10:a5:b9:de:
00:49:42:d0:9d:69:db:07:07:40:be:69:2f:05:b2:a2:ed:fc:
a5:17:5e:3b:2f:56:3b:42:26:5a:f6:9c:66:78:42:bd:d4:1f:
f5:53:e4:ca:26:44:e1:5b:32:7c:38:6c:50:7d:17:b5:01:0f:
9f:77:43:93:d5:f1:d5:e6:3b:08:41:d3:af:c3:0d:7b:34:b1:
c1:6e:2f:50:92:37:6e:e6:8e:40:75:32:64:b6:d6:49:0f:cc:
89:f5:fa:a3:ea:33:21:bb:fc:88:8b:3c:4e:a5:25:e3:47:d1:
e4:c8:fe:43:85:1c:01:1e:e3:d5:f5:3b:34:9c:40:8a:97:78:
52:49:d2:25:df:6f:2f:ff:76:82:bb:d2:cd:ab:38:0f:df:46:
86:28:e3:91:e4:6c:6d:39:24:71:d5:9f:e1:e9:36:c8:3a:89:
b4:49:f1:a5:be:a3:ca:c0:f0:b3:d6:cf:48:87:26:0f:8f:0a:
f2:84:12:87:3a:3b:bc:82:5e:9a:8c:fe:b5:cc:9a:5b:90:d9:
8e:0d:74:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:30:00 2026 by rpki-client