Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/KB0gDWm-1GDvqiKaE-1JAGpnndY.roa
File: KB0gDWm-1GDvqiKaE-1JAGpnndY.roa (raw, json)
Hash identifier: FQLZSoOlZnGUfLJgnoEa+mPBbZ8vmxYF7lpnmSUHlr8=
Subject key identifier: 28:1D:20:0D:69:BE:D4:60:EF:AA:22:9A:13:ED:49:00:6A:67:9D:D6
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019DBF500963D6ED1C01EE68D387FA2E9080
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/KB0gDWm-1GDvqiKaE-1JAGpnndY.roa
Signing time: Fri 24 Apr 2026 11:46:26 +0000
ROA not before: Fri 24 Apr 2026 11:46:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198377
IP address blocks: 2a03:5840:156::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bf:50:09:63:d6:ed:1c:01:ee:68:d3:87:fa:2e:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Apr 24 11:46:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=281d200d69bed460efaa229a13ed49006a679dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:ed:e9:59:7f:35:14:7f:40:d1:14:67:aa:
fd:6c:fb:15:f2:27:50:13:5c:fa:41:5e:ed:15:d3:
89:02:92:52:87:37:f2:ea:cb:4e:ca:fb:67:dd:e0:
ce:c6:aa:39:e3:68:a9:98:61:5d:92:37:05:e1:ff:
9c:54:43:6d:d0:8e:e2:96:aa:47:02:0d:e0:db:23:
78:70:00:11:80:97:5c:89:3a:f9:5f:5a:08:04:1f:
62:42:1f:83:93:ec:e5:b7:be:26:2d:a8:78:09:aa:
73:04:9c:a2:b4:a4:54:00:3b:3f:20:d0:ff:b0:d9:
4e:07:aa:9c:3f:28:cf:a9:55:45:08:f1:bd:7f:27:
28:80:00:ae:45:bb:78:8e:a4:aa:8a:c7:f5:0b:04:
d6:ad:79:90:7e:7f:1a:81:da:69:a6:7f:64:17:3e:
4e:96:01:3a:87:a0:5b:b6:1d:f1:50:c6:8a:ed:60:
aa:6d:2a:ac:e1:3c:28:b2:67:a8:19:10:2d:d0:ca:
bd:9b:a0:33:54:87:f3:71:ed:ad:72:91:d9:ab:f3:
2b:75:20:3a:e4:3e:29:3c:77:8d:75:18:5d:fc:bd:
d7:ef:1f:d2:2d:2b:35:11:4c:95:41:fe:e8:79:e8:
a3:ba:9e:b9:f9:c3:94:ef:83:4b:a7:33:3b:5f:da:
1f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1D:20:0D:69:BE:D4:60:EF:AA:22:9A:13:ED:49:00:6A:67:9D:D6
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/KB0gDWm-1GDvqiKaE-1JAGpnndY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:156::/48
Signature Algorithm: sha256WithRSAEncryption
0d:4a:dd:d2:2c:91:d2:83:d1:5c:12:0f:bc:a6:3e:39:38:bc:
14:3c:3f:50:bf:f2:bb:3f:a9:81:25:29:f0:fc:26:79:fc:e6:
8a:4c:16:ae:2d:44:58:81:a8:09:1b:ec:90:e9:65:7e:06:c3:
3e:0c:3e:46:c5:70:67:21:c9:af:3b:d2:b0:46:e8:88:be:61:
7f:fd:dc:88:d7:27:dd:ef:04:f0:63:1e:1f:b5:37:32:4d:33:
b2:82:58:80:da:57:6e:0e:0f:52:65:65:52:fa:21:04:fb:ea:
3b:c3:13:4d:c0:44:5e:cd:61:ee:a2:81:93:a2:2f:1b:d3:6e:
24:4e:a4:35:a8:26:e8:07:84:12:7f:33:39:ae:51:1b:af:13:
e1:6e:57:3d:fd:ee:a1:1a:70:bf:cc:de:96:f0:3f:88:79:34:
7c:46:6b:16:64:82:73:fe:7c:fa:ee:66:40:c6:05:18:41:ac:
2b:0e:d7:2d:9a:bf:6c:d7:43:c5:7f:17:e6:aa:f6:a8:80:7d:
4e:01:75:c6:fa:65:5e:8b:6d:cd:f6:4b:91:bc:ca:97:3c:e2:
1b:5e:1f:6b:da:bd:b2:f2:c9:2d:fe:97:3a:fb:a9:e1:9e:38:
36:16:03:a9:e1:3e:17:5b:d9:f8:58:aa:b7:9e:cc:6e:12:84:
ba:23:7a:03
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ2/UAlj1u0cAe5o04f6LpCAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1
ODYzNWEwHhcNMjYwNDI0MTE0NjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODFkMjAwZDY5YmVkNDYwZWZhYTIyOWExM2VkNDkwMDZhNjc5ZGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt3t6Vl/NRR/QNEUZ6r9bPsV8idQ
E1z6QV7tFdOJApJShzfy6stOyvtn3eDOxqo542ipmGFdkjcF4f+cVENt0I7ilqpH
Ag3g2yN4cAARgJdciTr5X1oIBB9iQh+Dk+zlt74mLah4CapzBJyitKRUADs/IND/
sNlOB6qcPyjPqVVFCPG9fycogACuRbt4jqSqisf1CwTWrXmQfn8agdpppn9kFz5O
lgE6h6Bbth3xUMaK7WCqbSqs4TwosmeoGRAt0Mq9m6AzVIfzce2tcpHZq/MrdSA6
5D4pPHeNdRhd/L3X7x/SLSs1EUyVQf7oeeijup65+cOU74NLpzM7X9ofhQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCgdIA1pvtRg76oimhPtSQBqZ53WMB8GA1UdIwQY
MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt
NmNiODk3OTFkN2ZkLzEvS0IwZ0RXbS0xR0R2cWlLYUUtMUpBR3BubmRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk
LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAFW
MA0GCSqGSIb3DQEBCwUAA4IBAQANSt3SLJHSg9FcEg+8pj45OLwUPD9Qv/K7P6mB
JSnw/CZ5/OaKTBauLURYgagJG+yQ6WV+BsM+DD5GxXBnIcmvO9KwRuiIvmF//dyI
1yfd7wTwYx4ftTcyTTOygliA2lduDg9SZWVS+iEE++o7wxNNwERezWHuooGToi8b
024kTqQ1qCboB4QSfzM5rlEbrxPhblc9/e6hGnC/zN6W8D+IeTR8RmsWZIJz/nz6
7mZAxgUYQawrDtctmr9s10PFfxfmqvaogH1OAXXG+mVei23N9kuRvMqXPOIbXh9r
2r2y8skt/pc6+6nhnjg2FgOp4T4XW9n4WKq3nsxuEoS6I3oD
-----END CERTIFICATE-----
Generated at Wed May 13 06:48:50 2026 by rpki-client