Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/KQP5UFzlwh34mQhk2uGuD-kC2tM.roa
File: KQP5UFzlwh34mQhk2uGuD-kC2tM.roa (raw, json)
Hash identifier: aZJt9+sSUYrWvyxQEYZgSZv+R3XEe1+eoGHJYCXBrBo=
Subject key identifier: 29:03:F9:50:5C:E5:C2:1D:F8:99:08:64:DA:E1:AE:0F:E9:02:DA:D3
Certificate issuer: /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Certificate serial: 019F41AD4CEA12FEA0345F51AB9C16F52BEB
Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/KQP5UFzlwh34mQhk2uGuD-kC2tM.roa
Signing time: Wed 08 Jul 2026 12:21:44 +0000
ROA not before: Wed 08 Jul 2026 12:21:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a13:5941::/32 maxlen: 48
2a13:5941:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:ad:4c:ea:12:fe:a0:34:5f:51:ab:9c:16:f5:2b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Validity
Not Before: Jul 8 12:21:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2903f9505ce5c21df8990864dae1ae0fe902dad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:fe:45:57:3c:43:b3:84:fa:ee:c3:af:35:
37:fe:70:4f:84:31:e2:f5:f1:53:11:b0:44:d5:53:
92:2a:b8:b9:9c:e2:4b:76:2e:13:20:58:0d:a8:6b:
d7:cc:0d:c4:3d:49:de:c2:a1:b4:44:a4:a1:14:47:
24:a1:47:41:57:fe:ff:92:ce:76:d5:84:51:b8:f3:
98:21:d3:4c:86:bd:3a:ad:19:19:74:f9:d3:b2:d7:
11:5b:e2:e0:e6:41:5a:92:20:09:1b:20:96:32:87:
a5:d5:c9:01:fd:ac:19:d0:37:3b:18:54:1e:73:93:
75:35:8e:d1:89:bd:09:2f:dd:d3:7f:83:8b:39:be:
45:73:ed:bb:73:95:bc:20:bc:07:b1:b5:34:84:dd:
6c:59:aa:c0:87:29:50:6f:e2:fe:b9:c1:cb:1d:f0:
00:bc:f1:e4:40:78:41:83:3f:6d:2a:4f:ba:36:42:
8e:5c:29:5e:ac:93:0c:b5:ed:7a:db:d5:36:fa:cd:
01:ee:53:20:94:80:60:a0:ad:8b:f4:cf:ee:0d:d6:
29:28:f2:4d:e2:e0:83:e1:cd:be:bc:fb:1e:8b:f9:
40:5d:16:f6:b6:ec:c9:47:8f:f3:1e:10:12:63:74:
d9:86:75:6e:a9:ea:be:aa:ad:11:a8:e8:c6:7c:37:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:03:F9:50:5C:E5:C2:1D:F8:99:08:64:DA:E1:AE:0F:E9:02:DA:D3
X509v3 Authority Key Identifier:
keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/KQP5UFzlwh34mQhk2uGuD-kC2tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5941::/32
Signature Algorithm: sha256WithRSAEncryption
46:05:e7:d6:1a:e5:23:bd:6a:ad:f1:65:b8:a3:bf:ee:d0:ff:
d5:84:d5:2e:e3:09:4b:e0:04:33:df:78:34:c3:37:a2:72:b5:
77:b1:b3:9b:4c:57:38:7d:9a:f7:d9:fd:ac:cc:f0:1c:81:08:
70:55:07:bd:cc:21:e7:fc:d3:35:3a:20:8e:a3:fc:02:d5:8b:
f4:8e:92:15:dc:82:fb:ea:48:b2:c8:6e:29:68:5e:eb:c8:d4:
a3:ca:e4:73:03:c9:6c:da:87:84:cc:b2:f1:4b:e7:f2:44:14:
0d:d2:6f:c0:2a:75:58:85:d2:d3:82:5c:0e:72:68:f7:d6:47:
2b:9a:ae:1a:b1:79:c9:02:4a:f9:25:7f:45:b9:8c:7f:2a:d1:
2b:44:ff:ff:86:1a:4e:9f:08:26:2d:50:5e:c3:96:53:81:84:
31:f0:e3:27:ce:11:3a:e6:4f:9d:c2:15:99:cc:1c:f1:18:72:
21:88:7a:a6:09:80:b7:2e:c8:be:e8:7a:29:cf:37:35:65:b8:
9d:7a:8a:0a:2f:13:f3:99:cc:cb:1f:da:cc:54:db:ab:1b:6a:
10:7a:5d:78:25:9c:c5:a2:2f:77:12:c6:dc:9d:58:19:6b:94:
eb:b2:ad:52:68:3e:de:b8:aa:fb:56:92:cf:a4:1e:4b:a3:fe:
ea:51:33:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:22 2026 by rpki-client