Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/ktAcfwaispPfbZlu2PcWbivGiDc.roa
File: ktAcfwaispPfbZlu2PcWbivGiDc.roa (raw, json)
Hash identifier: ZS64/IqKl++bCkfIjOUrM7ABwkRqytdLrqhBUhYIiLo=
Subject key identifier: 92:D0:1C:7F:06:A2:B2:93:DF:6D:99:6E:D8:F7:16:6E:2B:C6:88:37
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019F2368F71DB3A95D06864ED9F27F42F037
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/ktAcfwaispPfbZlu2PcWbivGiDc.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49988
IP address blocks: 2a04:ac00:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f7:1d:b3:a9:5d:06:86:4e:d9:f2:7f:42:f0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92d01c7f06a2b293df6d996ed8f7166e2bc68837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:da:16:c3:ff:af:d3:f8:07:76:73:d1:00:df:
d3:14:f4:8c:79:69:87:d3:22:36:a9:00:12:a3:8e:
b6:12:d8:f2:12:c4:35:e5:7e:a5:15:a7:3e:2f:67:
00:94:54:84:56:80:85:2d:96:e7:f3:f3:0d:f4:ff:
b0:8a:7a:dc:3b:19:61:5f:4a:fa:07:62:a1:4f:11:
d1:bc:68:62:b6:a1:f6:04:19:79:b0:10:fa:5d:c4:
c5:3e:73:75:72:89:c7:72:97:f6:a4:36:7a:ec:d9:
43:63:41:bb:70:7f:76:b6:77:e0:68:4e:56:da:dd:
44:05:de:0c:45:11:7f:d0:74:9c:c1:3e:58:72:a9:
33:ed:39:02:67:ce:1b:ee:45:63:77:8d:ac:e3:52:
5c:03:ad:c0:7a:28:79:d0:df:10:c7:e1:24:5a:b7:
01:bf:e0:65:7c:66:c6:ff:9b:86:3e:1f:99:b9:e2:
b2:e2:14:bb:47:ce:53:08:dc:cd:0c:90:4f:18:2a:
79:d6:bc:bf:d2:5c:25:03:4f:d0:4f:a0:a0:b4:c0:
3b:db:d4:64:28:7e:e7:36:34:27:2b:55:bc:82:c7:
47:99:af:ff:b4:e5:9e:9c:43:30:85:3b:2a:17:c0:
f9:3c:73:3f:84:7a:87:09:31:a1:c6:04:dd:ac:21:
0e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D0:1C:7F:06:A2:B2:93:DF:6D:99:6E:D8:F7:16:6E:2B:C6:88:37
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/ktAcfwaispPfbZlu2PcWbivGiDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ac00:f::/48
Signature Algorithm: sha256WithRSAEncryption
10:d8:f6:ba:0d:64:07:13:51:80:0f:34:8b:f1:e4:fe:ae:31:
2d:11:00:7f:f4:18:de:68:77:02:91:31:ae:2f:cb:87:8f:95:
f2:9a:4e:2b:fe:4b:33:da:29:e4:d5:d0:a7:20:2d:af:44:51:
f0:bd:44:41:63:53:0a:72:62:81:b6:a7:15:81:45:f2:db:f6:
d0:be:e7:fd:7a:64:e5:e4:0f:cb:bf:b9:13:1a:b0:5f:17:38:
f5:47:4a:f8:74:ab:34:bf:3f:d3:c2:18:c0:96:3e:41:ae:54:
11:cf:db:a5:46:58:72:90:f8:fb:3e:ac:9f:96:53:e1:18:05:
00:8b:4a:d4:85:e3:bd:d7:c7:81:fd:df:d7:4a:eb:28:c5:40:
8a:3e:e8:13:db:ae:16:ac:5c:bb:c3:8c:b6:f2:1f:83:a1:c8:
ca:a3:47:d3:37:95:37:90:af:17:2f:63:af:4b:d0:46:21:c2:
87:28:3a:e1:b2:af:36:1a:6e:da:80:64:74:f9:e6:e7:52:3b:
d4:20:a8:a2:c1:30:6c:91:20:2c:90:40:d6:d3:13:33:7c:50:
02:ec:8d:c0:3e:19:16:8a:e7:42:1e:de:88:23:80:63:c7:41:
73:bf:92:f5:1e:4f:e2:89:a1:16:30:c6:63:2c:e2:49:b1:c3:
55:51:3d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:47 2026 by rpki-client