Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/k_OUkafslPYRH9TzFtk5lWrl6kw.roa
File: k_OUkafslPYRH9TzFtk5lWrl6kw.roa (raw, json)
Hash identifier: RMagEztScGIUzGeN/MT7J6l5nYpZXZkld+YT7UEt+cY=
Subject key identifier: 93:F3:94:91:A7:EC:94:F6:11:1F:D4:F3:16:D9:39:95:6A:E5:EA:4C
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 01A0C8B0D536D37B8EB25756BC817D18338F
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/k_OUkafslPYRH9TzFtk5lWrl6kw.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7289
IP address blocks: 2a11:1ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d5:36:d3:7b:8e:b2:57:56:bc:81:7d:18:33:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93f39491a7ec94f6111fd4f316d939956ae5ea4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:8a:d8:c8:b7:dd:9c:d4:54:ac:6c:99:e7:
75:13:e1:1b:d0:f3:a6:0b:13:58:92:8d:61:a3:ec:
08:a2:6b:33:10:24:cf:77:af:29:9b:bf:55:3c:94:
3d:13:19:a7:9a:53:bc:18:1a:74:72:27:fb:86:67:
22:1c:50:93:5e:16:c5:6d:d3:cc:d9:ac:0f:35:bc:
58:59:44:71:ad:df:7f:4b:43:2f:fe:72:eb:e0:02:
d8:cd:7a:33:d5:6c:f5:a1:29:33:c1:71:6f:97:7b:
95:d9:c2:5f:eb:e8:5d:f7:9e:9e:11:d3:85:ca:a3:
8a:10:7e:f5:c4:9a:73:14:29:37:8a:7b:c0:73:a2:
10:03:8b:2a:f6:dc:b1:9d:74:ae:c8:3e:c0:fb:f5:
e0:c3:57:98:c9:d3:03:62:d0:8d:40:37:75:a6:19:
b7:91:cf:b0:e2:d7:fa:ff:2f:32:a4:4c:5c:be:1c:
b4:3b:f7:50:22:a2:3a:f0:e3:d5:6e:3f:fa:26:5c:
56:1c:96:9a:c4:7b:12:d6:bb:c2:88:18:87:36:59:
50:6c:08:c0:49:e0:e4:09:52:34:99:23:99:46:d7:
fa:62:c1:e5:ac:01:83:4e:62:92:55:ad:c7:3a:f4:
79:16:ea:40:8d:c1:be:b3:26:a9:5b:0e:99:9a:f4:
49:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F3:94:91:A7:EC:94:F6:11:1F:D4:F3:16:D9:39:95:6A:E5:EA:4C
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/k_OUkafslPYRH9TzFtk5lWrl6kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1ac0::/29
Signature Algorithm: sha256WithRSAEncryption
98:58:a0:dd:91:59:d0:1e:15:25:d0:5b:b1:16:eb:e7:a5:26:
5d:af:c6:a9:b0:03:88:a1:a6:46:02:82:23:3c:1c:60:9e:0a:
3a:85:07:1b:c7:b9:16:9f:a2:8e:8f:a3:4b:00:52:e9:04:3c:
66:3f:d4:46:45:25:4d:62:fc:1c:08:bc:a2:ed:71:6c:c5:b6:
1a:9d:8e:89:c5:a9:d5:65:99:21:5b:a8:88:fd:5c:5f:35:ab:
55:d9:10:3b:fe:1c:65:cb:08:cc:c4:34:21:ec:6c:1f:cc:d9:
8f:10:14:af:ed:53:b1:d8:d5:6b:ca:ef:56:8c:45:5a:9a:75:
80:e9:7f:93:48:17:a1:eb:80:88:07:b6:05:ed:0a:af:8f:77:
d6:63:23:19:1d:29:b5:75:e1:ae:33:fa:b8:88:88:71:a5:49:
84:9c:8e:b4:c7:ca:bb:ce:d8:4a:cd:d7:b4:45:5c:0a:d7:3c:
e1:d4:ca:89:d3:cb:12:6d:e5:1e:93:7d:ab:45:9e:ef:7b:24:
e0:31:e9:f3:c3:c4:2f:f4:f1:fe:ac:79:5b:e0:73:81:8b:be:
65:2f:c3:0c:be:cb:43:12:f7:ac:c9:2f:dc:3f:e3:22:34:80:
c1:dd:fd:43:11:d3:93:72:1c:62:56:8a:e5:13:1a:64:dc:6b:
2f:88:0e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:49:39 2026 by rpki-client