Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/KhKzsQlUZqVsUIR9l8gYByZ11Dw.roa
File: KhKzsQlUZqVsUIR9l8gYByZ11Dw.roa (raw, json)
Hash identifier: XpV/kSL+6PiCI2IHyZZ2LEqex3eBbRUoUh6rf99pmgY=
Subject key identifier: 2A:12:B3:B1:09:54:66:A5:6C:50:84:7D:97:C8:18:07:26:75:D4:3C
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01A066C32E64FBA225E51B0EB6039D6EA74E
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/KhKzsQlUZqVsUIR9l8gYByZ11Dw.roa
Signing time: Thu 03 Sep 2026 10:14:22 +0000
ROA not before: Thu 03 Sep 2026 10:14:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218767
IP address blocks: 2a03:5840:163::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:c3:2e:64:fb:a2:25:e5:1b:0e:b6:03:9d:6e:a7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Sep 3 10:14:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a12b3b1095466a56c50847d97c818072675d43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:32:3a:d7:e5:c2:d3:c8:fe:0b:d9:70:2f:e0:
a8:53:8e:e8:5c:2f:f4:c3:da:ae:c1:9e:79:9d:8a:
e6:98:98:90:ce:0f:bd:a5:3f:68:d2:51:1f:78:db:
ed:ab:83:cb:b4:75:15:8c:7d:f5:68:2c:58:01:7d:
f2:b6:b2:92:bc:e1:fc:76:46:1a:d6:a4:df:63:e6:
6e:07:86:17:37:7f:ad:d4:ca:9d:e0:ff:a2:48:15:
c9:f0:ba:12:ad:95:f1:8d:7b:3c:71:d4:0a:24:cd:
1a:e8:bd:c4:6c:0d:45:6f:1f:f3:b8:75:7d:06:70:
a6:fa:f8:95:23:aa:02:01:dc:44:0e:7f:3a:c9:e9:
a2:ec:f9:b4:eb:68:8a:af:60:56:3a:d0:dc:2b:20:
21:bb:dd:38:a4:96:07:02:f5:45:72:aa:0a:5e:71:
e2:12:fb:da:ad:50:d2:00:90:1f:ea:b2:c1:7e:21:
82:2d:b5:39:9d:71:03:78:23:20:fb:dd:44:37:23:
21:0d:9f:9e:0f:72:8b:02:14:63:e1:69:40:1c:ad:
a4:f8:f9:73:cf:34:d2:96:14:36:03:45:d2:f8:3c:
ca:8f:24:f2:15:df:4c:a8:11:9f:13:07:b1:c0:57:
f1:2a:9b:ec:7c:14:0e:d2:fe:23:df:a9:ab:6e:77:
e6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:12:B3:B1:09:54:66:A5:6C:50:84:7D:97:C8:18:07:26:75:D4:3C
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/KhKzsQlUZqVsUIR9l8gYByZ11Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:163::/48
Signature Algorithm: sha256WithRSAEncryption
24:8f:7d:0e:ca:0e:38:5f:3c:f1:b9:88:62:48:b4:a5:f4:b5:
ac:5f:2c:bf:eb:48:68:d2:d7:db:19:08:cd:83:69:0a:51:15:
54:b3:17:0a:d2:e9:8d:51:55:ed:ca:3c:2a:7c:9e:27:9f:e8:
08:f3:ae:4a:0b:62:43:e0:88:49:ec:97:a2:a5:fb:29:5c:7c:
44:79:0a:23:46:33:17:bb:7b:1a:5f:33:ce:a6:7b:32:c3:cf:
4a:b0:8f:5a:ff:95:62:90:fd:e7:40:e9:33:19:68:4d:dd:d1:
d9:cd:c3:c8:63:7b:ac:d8:cd:64:2f:bb:27:10:73:1f:6a:5d:
6f:2a:04:01:78:e9:16:a2:b0:5f:ea:69:ef:e0:2d:04:a1:4b:
b0:fa:32:38:a5:d4:cb:ef:e2:b5:c7:d8:bc:9e:b0:7d:05:99:
d3:14:c4:02:17:26:be:72:af:cc:70:83:46:13:dc:16:64:33:
c6:13:20:e3:76:ef:19:ed:5a:bb:7b:e3:03:5b:b4:5d:2f:aa:
86:2f:a7:aa:d6:1b:ff:9d:42:b8:fd:c3:24:4c:ac:55:97:12:
a1:5c:f3:89:dc:fc:55:59:cb:1c:a0:aa:94:e9:0b:ff:e5:aa:
f9:3a:3e:a0:1b:e3:10:2e:f1:b8:70:8e:fa:4f:99:c7:76:2c:
ee:ef:c8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:57:08 2026 by rpki-client