Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/KAT9XboBjOIosBDc8IEkGBKYxhA.roa
File: KAT9XboBjOIosBDc8IEkGBKYxhA.roa (raw, json)
Hash identifier: trF48Qb8lGuUFnJuNmmeLE1Ndrt32R4VrGQ7BmCom+w=
Subject key identifier: 28:04:FD:5D:BA:01:8C:E2:28:B0:10:DC:F0:81:24:18:12:98:C6:10
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A03D54E0DC7BCEFB89FCCC4AA2C8D3A7AD
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/KAT9XboBjOIosBDc8IEkGBKYxhA.roa
Signing time: Wed 26 Aug 2026 09:09:27 +0000
ROA not before: Wed 26 Aug 2026 09:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218876
IP address blocks: 2a10:fa81:1600::/40 maxlen: 40
2a10:fa81:1700::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:54:e0:dc:7b:ce:fb:89:fc:cc:4a:a2:c8:d3:a7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Aug 26 09:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2804fd5dba018ce228b010dcf08124181298c610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:7a:c2:94:01:ac:f2:49:81:cc:4f:18:5b:
49:fb:bb:e5:73:d6:13:c9:44:2a:e1:fd:8f:38:c0:
a4:34:1c:f2:52:53:01:01:6c:a4:fd:9f:77:c1:9e:
77:a9:ba:1c:cd:18:eb:f6:e5:4a:73:6b:ad:76:b9:
55:8b:0b:e6:ef:23:f6:e2:60:85:64:56:11:ec:82:
52:8c:ff:22:08:a8:5a:18:b6:0a:72:77:de:69:cd:
0a:0c:b3:89:69:07:4f:08:2b:64:44:56:12:d8:3a:
b0:50:c8:24:f6:bc:7c:48:70:08:6a:ea:03:82:18:
4e:e8:69:2f:b2:a6:34:a3:a2:35:13:dd:46:b4:14:
6f:0d:87:a5:62:55:2e:c0:d3:3f:47:8e:e8:88:37:
8d:d3:bb:fc:bd:d9:93:d0:f4:40:be:34:16:10:be:
da:b1:28:cb:4d:4b:86:05:3b:e3:5c:95:b7:7a:1f:
1b:92:47:10:f7:9e:7b:f2:fa:ae:50:ce:42:cf:23:
07:70:20:a3:99:b2:90:de:a7:06:c3:fe:9b:e9:e9:
a9:9b:99:64:a8:78:2f:f9:63:88:a4:b0:26:9c:87:
34:2b:47:cf:84:ad:0c:1f:c8:a5:7e:bd:e1:6a:bb:
2a:fa:7e:7a:dd:04:79:c3:4e:77:49:58:a6:60:c7:
6f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:04:FD:5D:BA:01:8C:E2:28:B0:10:DC:F0:81:24:18:12:98:C6:10
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/KAT9XboBjOIosBDc8IEkGBKYxhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:1600::/39
Signature Algorithm: sha256WithRSAEncryption
01:44:52:02:8c:88:1f:9f:73:b7:07:17:78:0a:fa:32:f7:79:
8d:fb:d8:1b:9e:b7:c5:9c:59:fa:9f:ab:cd:cc:03:c9:a9:a9:
92:22:19:12:0f:5a:14:66:54:7a:35:1d:21:86:c3:f0:3f:23:
d9:69:64:43:01:e8:e3:ee:04:a7:4c:84:0c:be:01:a8:e0:38:
47:1b:60:1a:12:26:ee:7d:92:ae:10:7d:b4:b6:77:68:0f:de:
b8:b3:67:d2:d4:c0:ad:e7:cf:85:be:fc:f2:a3:2c:46:d8:22:
8a:6c:28:6f:c0:6c:60:be:21:63:8b:81:f1:18:8e:c6:99:74:
80:da:77:a3:b2:12:c4:4e:4b:ab:9b:e6:07:da:aa:9f:75:58:
70:81:cd:d7:da:7d:92:98:7c:06:2b:47:92:16:24:29:66:be:
57:32:a6:52:22:65:48:81:30:88:2b:84:54:b1:0c:40:f6:2f:
86:84:51:f0:ab:d1:2b:3f:6b:8e:b8:04:bc:47:47:ff:a6:53:
34:29:32:7e:3b:cc:f2:0e:9b:1b:d2:57:8a:14:24:78:a9:d6:
4e:b2:de:30:f0:ef:e0:f5:40:2e:08:ca:10:b7:59:35:e1:f1:
e4:b7:db:75:b1:8d:c8:ba:5c:2b:fb:14:d7:95:da:5f:59:af:
cc:e9:e9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:32:00 2026 by rpki-client