Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/K5nTI3TLRfGi_oGQbxYTxF2eB7Y.roa
File: K5nTI3TLRfGi_oGQbxYTxF2eB7Y.roa (raw, json)
Hash identifier: 5nCS/Mov0JNCgcR42UHn2L1io6GH6DMm8igK0e3XvY4=
Subject key identifier: 2B:99:D3:23:74:CB:45:F1:A2:FE:81:90:6F:16:13:C4:5D:9E:07:B6
Certificate issuer: /CN=bd0413c6e4482527651431211138838e133854de
Certificate serial: 019F8142EB00A828518C1A00A17DE199E7F7
Authority key identifier: BD:04:13:C6:E4:48:25:27:65:14:31:21:11:38:83:8E:13:38:54:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/K5nTI3TLRfGi_oGQbxYTxF2eB7Y.roa
Signing time: Mon 20 Jul 2026 20:41:14 +0000
ROA not before: Mon 20 Jul 2026 20:41:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200841
IP address blocks: 2a13:7cc0:aa0::/48 maxlen: 48
2a13:7cc0:1600::/40 maxlen: 40
2a13:7cc0:1aa1::/48 maxlen: 48
2a13:7cc0:1ab0::/48 maxlen: 48
2a13:7cc0:1bb0::/48 maxlen: 48
2a13:7cc0:1ca1::/48 maxlen: 48
2a13:7cc0:1ca2::/48 maxlen: 48
2a13:7cc0:1ca3::/48 maxlen: 48
2a13:7cc0:1ca4::/48 maxlen: 48
2a13:7cc0:1cb0::/48 maxlen: 48
2a13:7cc0:1da1::/48 maxlen: 48
2a13:7cc0:1da2::/48 maxlen: 48
2a13:7cc0:1db0::/48 maxlen: 48
2a13:7cc0:2aa1::/48 maxlen: 48
2a13:7cc0:2aa2::/48 maxlen: 48
2a13:7cc0:2aa3::/48 maxlen: 48
2a13:7cc0:2aa5::/48 maxlen: 48
2a13:7cc0:2ab0::/48 maxlen: 48
2a13:7cc0:2ba1::/48 maxlen: 48
2a13:7cc0:2ba2::/48 maxlen: 48
2a13:7cc0:2bb0::/48 maxlen: 48
2a13:7cc0:2ca1::/48 maxlen: 48
2a13:7cc0:2ca3::/48 maxlen: 48
2a13:7cc0:2cb0::/48 maxlen: 48
2a13:7cc0:2da1::/48 maxlen: 48
2a13:7cc0:2da2::/48 maxlen: 48
2a13:7cc0:2db0::/48 maxlen: 48
2a13:7cc0:2ea1::/48 maxlen: 48
2a13:7cc0:2eb0::/48 maxlen: 48
2a13:7cc0:2fa1::/48 maxlen: 48
2a13:7cc0:2fb0::/48 maxlen: 48
2a13:7cc0:3aa1::/48 maxlen: 48
2a13:7cc0:3ab0::/48 maxlen: 48
2a13:7cc2:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:42:eb:00:a8:28:51:8c:1a:00:a1:7d:e1:99:e7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd0413c6e4482527651431211138838e133854de
Validity
Not Before: Jul 20 20:41:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b99d32374cb45f1a2fe81906f1613c45d9e07b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:b5:8f:f9:fc:4e:56:91:f8:d8:34:1d:38:
da:94:d1:30:99:a7:17:14:a1:34:05:6d:a9:9b:b0:
9f:dd:f9:6c:1a:cd:b8:8f:f2:07:80:c3:8b:65:08:
53:cd:42:17:e8:0a:fa:16:aa:4b:aa:52:26:93:68:
66:74:a9:1f:e7:df:9b:0b:c2:1d:89:09:4d:f3:e4:
b4:cb:79:e8:00:ed:ff:80:0b:1c:71:4b:e7:ab:68:
92:dd:18:bc:f6:cd:5c:8c:2e:70:6e:62:56:e4:2b:
72:ba:0d:c3:5c:ee:9f:45:ee:17:f5:26:8e:a8:a9:
f5:90:0f:90:74:8e:56:fb:3a:54:4d:e5:c0:d9:52:
0a:7e:e3:45:3a:e8:ec:fe:d5:aa:e6:3f:c0:bd:e4:
4e:a0:97:c8:ae:a1:77:69:0d:cf:04:b6:4b:95:63:
17:4e:1d:ac:f0:c7:d4:1e:7e:55:f1:5e:43:a6:3e:
6f:06:8b:8b:23:68:41:f3:f3:da:e3:81:de:dc:60:
6d:12:db:61:c4:f4:78:91:db:76:06:9e:0c:71:7f:
41:ff:20:35:10:3f:89:04:0e:59:dd:b1:96:af:a9:
fa:73:32:b4:d4:6c:cc:8a:fe:c6:d8:7c:fd:28:f2:
7f:2a:2f:73:b3:fd:18:0b:27:0d:63:64:86:6b:43:
ca:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:99:D3:23:74:CB:45:F1:A2:FE:81:90:6F:16:13:C4:5D:9E:07:B6
X509v3 Authority Key Identifier:
keyid:BD:04:13:C6:E4:48:25:27:65:14:31:21:11:38:83:8E:13:38:54:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/K5nTI3TLRfGi_oGQbxYTxF2eB7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7cc0:aa0::/48
2a13:7cc0:1600::/40
2a13:7cc0:1aa1::/48
2a13:7cc0:1ab0::/48
2a13:7cc0:1bb0::/48
2a13:7cc0:1ca1::-2a13:7cc0:1ca4:ffff:ffff:ffff:ffff:ffff
2a13:7cc0:1cb0::/48
2a13:7cc0:1da1::-2a13:7cc0:1da2:ffff:ffff:ffff:ffff:ffff
2a13:7cc0:1db0::/48
2a13:7cc0:2aa1::-2a13:7cc0:2aa3:ffff:ffff:ffff:ffff:ffff
2a13:7cc0:2aa5::/48
2a13:7cc0:2ab0::/48
2a13:7cc0:2ba1::-2a13:7cc0:2ba2:ffff:ffff:ffff:ffff:ffff
2a13:7cc0:2bb0::/48
2a13:7cc0:2ca1::/48
2a13:7cc0:2ca3::/48
2a13:7cc0:2cb0::/48
2a13:7cc0:2da1::-2a13:7cc0:2da2:ffff:ffff:ffff:ffff:ffff
2a13:7cc0:2db0::/48
2a13:7cc0:2ea1::/48
2a13:7cc0:2eb0::/48
2a13:7cc0:2fa1::/48
2a13:7cc0:2fb0::/48
2a13:7cc0:3aa1::/48
2a13:7cc0:3ab0::/48
2a13:7cc2:1::/48
Signature Algorithm: sha256WithRSAEncryption
7c:32:4f:3f:04:89:ae:c5:de:0e:bd:59:f9:16:51:38:07:7c:
06:2d:fc:b4:d5:bb:50:ae:55:e8:73:93:70:a3:ec:12:ca:fb:
70:4e:d6:5f:85:18:8b:6b:eb:ee:4e:f8:5b:3b:aa:a7:52:2a:
15:75:34:ad:f1:39:b1:67:ff:d2:f1:15:e1:81:64:fa:7c:aa:
c3:ed:33:8c:a7:9a:e6:d4:f2:31:14:6e:e5:45:e6:97:a4:fa:
70:6c:70:f0:97:9e:85:d1:39:52:4b:be:61:b0:ad:21:eb:56:
87:b8:84:7f:1c:81:0c:9e:89:17:5e:25:e1:85:e2:5a:30:86:
35:77:8a:ef:f3:3a:2f:23:af:8c:22:86:e2:12:64:7e:ee:d1:
ff:ac:c7:ca:09:95:0c:c7:d1:71:8b:c3:3f:36:46:62:3b:e1:
1f:de:67:aa:73:fc:a5:a7:d3:85:de:0f:d3:b4:04:20:12:73:
a4:34:2a:4c:49:50:56:36:9a:3f:fe:fb:7b:f9:10:f4:4d:35:
3b:cd:c2:00:3d:42:29:5a:5d:f8:ec:2d:a4:71:8a:ae:04:d4:
6d:1c:2d:ac:98:3a:2c:b3:0a:28:ba:54:ed:d9:d0:9b:54:1f:
ce:6f:bb:73:76:e5:78:58:64:78:33:f6:02:22:a7:25:ec:f9:
28:5b:be:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:00 2026 by rpki-client