Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/klZpNcpkOEquqUsO-jju5O69v1E.roa
File: klZpNcpkOEquqUsO-jju5O69v1E.roa (raw, json)
Hash identifier: jxFHJzSImYx8wBjjvdBncxitlUill6En9a34gPRYQtA=
Subject key identifier: 92:56:69:35:CA:64:38:4A:AE:A9:4B:0E:FA:38:EE:E4:EE:BD:BF:51
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 019CBE5162D572871B856641E197123880C9
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/klZpNcpkOEquqUsO-jju5O69v1E.roa
Signing time: Thu 05 Mar 2026 14:05:30 +0000
ROA not before: Thu 05 Mar 2026 14:05:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203090
IP address blocks: 2a12:4041:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:51:62:d5:72:87:1b:85:66:41:e1:97:12:38:80:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Mar 5 14:05:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92566935ca64384aaea94b0efa38eee4eebdbf51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bb:84:f0:09:74:d9:c2:1f:c2:a4:54:e0:a1:
b1:c4:9a:b8:48:5c:0d:3e:a3:99:71:b1:5c:ae:94:
b2:8d:27:4f:4b:23:61:c5:67:f0:87:fb:c4:c6:74:
fe:07:00:b8:00:0c:58:6c:a9:8a:1a:82:73:c0:88:
f3:fd:45:f9:03:99:b2:4e:d3:c8:b0:12:28:24:88:
b9:c4:89:32:19:9a:66:39:8b:6c:6f:76:ad:b9:c5:
5c:dc:fe:10:37:9e:95:60:12:4e:14:d9:07:ab:57:
87:ee:e2:87:b7:e1:b0:c5:54:d5:a7:50:c5:a9:3b:
fd:4e:c1:78:3c:af:27:1b:a3:b3:29:78:f0:45:17:
d8:17:e2:9b:48:5d:00:ba:4e:a1:d6:ba:d0:71:06:
d8:a2:2d:a4:65:dd:ef:7d:4e:7d:e5:8e:bc:63:70:
58:90:5a:63:e9:c5:e6:c1:da:af:e8:81:ea:43:9e:
71:81:76:56:2c:e9:28:fc:b8:a3:30:54:50:6a:31:
d0:03:96:8e:a7:8f:d2:91:d9:34:b8:ea:b2:1f:99:
1d:55:e8:e2:02:d0:f6:f3:21:0d:c1:29:44:f9:ae:
aa:c1:db:c6:f9:03:09:51:37:16:ff:09:2f:90:d4:
0c:2d:1f:be:2b:12:18:6e:09:26:55:dd:e6:c8:46:
ee:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:56:69:35:CA:64:38:4A:AE:A9:4B:0E:FA:38:EE:E4:EE:BD:BF:51
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/klZpNcpkOEquqUsO-jju5O69v1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4041:7::/48
Signature Algorithm: sha256WithRSAEncryption
4f:38:77:b7:de:c1:f3:6e:36:ee:bb:df:14:c7:35:98:5e:32:
50:09:1d:fc:33:ab:42:e3:82:16:c7:8e:cc:c2:38:68:b4:6d:
ad:b5:c0:a5:83:15:ad:4a:35:86:e6:47:68:de:ca:20:90:eb:
7e:fb:d6:4f:f7:d4:7a:96:ba:f3:b4:55:7b:72:d8:c6:99:a3:
fc:82:cf:59:52:12:5e:7d:cb:8f:42:4f:9a:23:7d:55:e4:60:
45:e3:f3:04:b8:d1:ce:56:0f:84:34:8f:66:0d:93:4f:b9:40:
e6:ad:fc:78:e6:45:3e:ca:93:d1:36:43:2f:e6:2c:86:bf:48:
cc:8b:41:27:46:c7:5e:7e:83:aa:2a:44:03:d4:a5:20:da:69:
04:d0:87:bc:7f:ae:2b:d2:05:af:f2:55:ef:95:50:da:5b:35:
d8:94:ac:c7:24:38:52:39:bc:34:af:74:02:99:5e:19:aa:f3:
3b:32:ee:6b:dd:39:8d:57:25:b7:70:c9:63:4d:93:3b:10:21:
6b:48:d4:75:62:9c:40:ea:37:77:39:77:ca:e2:aa:2c:c6:f5:
c1:9d:dc:1b:57:2a:e8:8b:50:18:47:c7:86:db:81:66:13:89:
9a:01:17:86:10:f0:1d:73:dc:99:37:67:4e:aa:31:fb:ea:e7:
07:10:75:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:09:43 2026 by rpki-client