Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/kWkbSMudBMXkqn-PlUsiKr1TxOU.roa
File: kWkbSMudBMXkqn-PlUsiKr1TxOU.roa (raw, json)
Hash identifier: VoGTMzFkwC8KiX4fzsDBzfZ7TcO6xFGqDZS9yvCPD5U=
Subject key identifier: 91:69:1B:48:CB:9D:04:C5:E4:AA:7F:8F:95:4B:22:2A:BD:53:C4:E5
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0715969F6320AAE8D6B9B609644D26C65
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/kWkbSMudBMXkqn-PlUsiKr1TxOU.roa
Signing time: Sat 05 Sep 2026 11:34:40 +0000
ROA not before: Sat 05 Sep 2026 11:34:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 2a10:fa80:2::/48 maxlen: 48
2a10:fa81:500::/40 maxlen: 40
2a10:fa81:1800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:71:59:69:f6:32:0a:ae:8d:6b:9b:60:96:44:d2:6c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 5 11:34:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91691b48cb9d04c5e4aa7f8f954b222abd53c4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ba:d1:93:e1:19:b5:50:f0:6b:d4:1f:c9:17:
96:4c:30:44:62:85:f3:42:9f:55:1c:b0:46:4d:f3:
ad:d6:36:0d:1b:2e:4e:02:18:bd:af:20:54:f4:2e:
8a:78:bc:e2:a8:99:49:8d:9a:57:02:22:b2:22:48:
43:2c:90:6b:f0:6d:04:79:e0:bb:21:fb:1a:4b:54:
a2:f2:15:95:21:c1:63:ee:4e:b6:52:f2:a3:1c:5f:
9e:2f:86:b7:86:e0:46:4c:d6:8e:b3:52:58:90:7e:
23:e0:65:97:c0:73:89:df:22:ce:af:e4:7d:af:02:
c2:1b:ff:70:b1:05:fc:a8:9c:b1:25:4d:31:dc:ac:
ff:14:8b:d7:d5:f0:f7:5e:40:7c:4f:fb:69:a0:a6:
dd:a7:3c:62:eb:13:f4:84:d3:87:80:f1:c6:74:41:
f3:e5:f2:7a:b8:69:11:e0:7b:92:54:07:fe:bf:86:
0f:0a:da:08:d3:c6:b6:60:42:7f:73:f2:bf:65:56:
ad:5f:88:76:55:e6:e4:1d:44:b0:f9:7a:71:6a:be:
8b:c9:40:a8:fa:ec:6a:26:7f:d5:cc:9b:f3:82:8b:
16:dc:99:be:8a:58:2b:75:e8:e6:5f:a7:92:b4:09:
29:44:45:88:74:13:16:68:16:e8:2e:e7:74:50:00:
6d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:69:1B:48:CB:9D:04:C5:E4:AA:7F:8F:95:4B:22:2A:BD:53:C4:E5
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/kWkbSMudBMXkqn-PlUsiKr1TxOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:2::/48
2a10:fa81:500::/40
2a10:fa81:1800::/40
Signature Algorithm: sha256WithRSAEncryption
8c:d6:74:40:de:dd:77:77:68:12:03:13:73:22:db:68:c3:1e:
e0:5a:93:45:ce:b7:80:81:49:bb:ef:50:d6:30:72:ec:3f:cb:
5a:68:14:33:24:32:5c:f1:d4:e8:34:9b:6d:e1:b2:e9:b3:ea:
05:b8:c4:64:2b:bd:17:ee:0f:7c:61:d0:c7:cf:fb:bf:6c:d0:
fc:bf:7d:2f:0a:b9:ea:65:6f:f3:f3:67:1f:db:62:a1:2e:e0:
61:a3:6c:b8:04:88:10:ff:29:7a:ec:2c:57:be:58:2e:07:07:
b2:95:92:3d:db:dc:53:69:23:7d:90:00:ed:dd:15:f9:ee:74:
21:1b:37:1a:4c:65:91:40:2e:e8:84:b0:28:42:6c:61:99:39:
86:fe:67:fd:cd:ad:58:5c:52:42:3b:de:d4:b0:5c:c1:2c:c5:
ba:9b:08:af:c2:0c:f5:47:44:80:8e:37:cc:7c:5f:4e:3d:ef:
00:12:0e:f2:16:9e:4c:62:13:12:f9:92:ed:03:69:72:ab:14:
78:74:a1:23:12:c5:ae:f6:a1:e3:ce:7c:e8:50:56:88:49:69:
e3:4b:26:ff:09:e2:c2:e8:16:c8:f9:0d:2a:5b:50:bf:72:ca:
72:a1:d3:91:65:60:bf:6f:4c:35:c7:71:39:85:e3:dc:f3:dc:
72:c8:c3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:06:25 2026 by rpki-client