Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/KqoK91yGuY-2JxPeicjszywFvF8.roa
File: KqoK91yGuY-2JxPeicjszywFvF8.roa (raw, json)
Hash identifier: HMKR8L6Cvd/XsjM4WH7lB5hoYsp4gB00NoNY7QUAD3A=
Subject key identifier: 2A:AA:0A:F7:5C:86:B9:8F:B6:27:13:DE:89:C8:EC:CF:2C:05:BC:5F
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 019F40DA344ED83F7864A60CAEC27ACE1010
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/KqoK91yGuY-2JxPeicjszywFvF8.roa
Signing time: Wed 08 Jul 2026 08:31:09 +0000
ROA not before: Wed 08 Jul 2026 08:31:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1136
IP address blocks: 2a04:9a00:1200::/42 maxlen: 48
2a07:3500:1020::/48 maxlen: 48
2a07:3500:11a0::/48 maxlen: 48
2a07:3500:1ac0::/48 maxlen: 48
2a07:3500:1ad8::/48 maxlen: 48
2a07:3500:1b30::/48 maxlen: 48
2a07:3500:1b48::/48 maxlen: 48
2a07:3500:1bc0::/48 maxlen: 48
2a07:3500:1c00::/48 maxlen: 48
2a07:3500:1da8::/48 maxlen: 48
2a07:3501:1010::/48 maxlen: 48
2a07:3502:10e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:da:34:4e:d8:3f:78:64:a6:0c:ae:c2:7a:ce:10:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jul 8 08:31:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2aaa0af75c86b98fb62713de89c8eccf2c05bc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4f:d0:86:a3:77:8d:f0:94:42:be:b9:19:af:
7e:68:d5:4d:72:ec:28:f7:e3:9e:62:4e:58:84:6a:
7a:58:21:25:41:d7:c2:df:77:bc:e7:f8:46:8e:fe:
d1:43:8f:69:2e:93:75:a4:4b:4d:6a:0b:83:b2:5a:
4f:af:eb:c8:70:93:eb:d1:0f:a4:5d:9a:fe:1a:c3:
1b:25:ac:1e:98:b5:4a:af:51:a0:b6:03:dd:81:3d:
f5:aa:94:08:ea:34:93:fe:f1:3f:68:59:da:a7:ee:
e5:63:47:4b:20:8a:23:3a:9b:81:44:97:88:28:66:
f2:45:01:cc:a9:39:c6:30:dd:96:e2:d0:1b:08:bb:
d9:b0:f4:23:f0:49:74:f3:ad:58:5f:78:c8:ff:b5:
de:0b:a7:94:b3:ef:12:41:81:f4:af:b2:d8:c0:5f:
5c:ed:ff:53:5a:7b:7f:85:56:17:de:97:2c:6e:a7:
d2:ac:2e:af:b4:d1:23:f7:65:e3:4d:ef:e4:82:f1:
1d:8e:7c:4d:27:b9:68:b3:45:04:44:a0:e1:f9:57:
d6:e6:6a:9a:bc:9b:b1:6b:3f:5f:e5:87:8b:3b:4b:
0a:f5:d0:c0:0d:76:cd:9b:df:82:6f:b9:32:d5:6a:
52:9a:dc:a5:cf:42:ed:fa:fd:69:96:e0:db:51:66:
e9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AA:0A:F7:5C:86:B9:8F:B6:27:13:DE:89:C8:EC:CF:2C:05:BC:5F
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/KqoK91yGuY-2JxPeicjszywFvF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9a00:1200::/42
2a07:3500:1020::/48
2a07:3500:11a0::/48
2a07:3500:1ac0::/48
2a07:3500:1ad8::/48
2a07:3500:1b30::/48
2a07:3500:1b48::/48
2a07:3500:1bc0::/48
2a07:3500:1c00::/48
2a07:3500:1da8::/48
2a07:3501:1010::/48
2a07:3502:10e0::/48
Signature Algorithm: sha256WithRSAEncryption
96:ed:c0:a7:0e:ba:07:f1:6b:4e:ab:bf:82:d4:29:ee:82:4d:
3c:bd:c9:3e:6b:99:4f:fb:c9:4f:ae:4b:02:a5:a1:2b:1a:25:
6d:2a:85:5a:86:dc:c7:6e:a4:4a:dd:5f:5d:cf:79:3d:1d:7a:
03:f6:46:c9:12:db:0b:e9:ff:71:28:ad:62:a3:30:a8:13:f8:
e8:e3:97:64:88:d1:09:62:88:76:4b:26:a4:97:47:1e:65:a0:
6d:84:94:40:e1:13:e1:76:2a:fd:72:c7:a9:e7:e5:18:fa:cb:
3f:e3:9c:94:64:42:7c:04:46:ae:49:b5:97:b0:ba:0b:9c:26:
3b:7f:07:c2:90:45:45:3d:0d:69:a1:d8:d2:ce:d5:ec:b4:4a:
42:55:a5:1d:8a:ca:8e:f0:9f:f8:43:a8:67:22:8a:f7:26:3a:
6f:a3:1b:77:da:9a:ed:e8:36:fb:1c:b9:b5:bd:9b:6a:4f:49:
82:f2:72:37:fc:88:68:49:14:34:21:d5:1a:f8:69:92:e5:c0:
ca:31:28:60:2a:67:21:7b:3b:13:71:42:a2:04:6a:1f:9c:95:
6d:07:08:c5:38:a2:9d:ff:a9:b1:4b:0f:fe:6f:8a:4e:d1:68:
03:47:51:48:06:9d:f7:c7:24:c8:92:64:5b:3b:c5:ec:a3:94:
bd:86:63:6d
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAZ9A2jRO2D94ZKYMrsJ6zhAQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl
MTQwNzEwHhcNMjYwNzA4MDgzMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWFhMGFmNzVjODZiOThmYjYyNzEzZGU4OWM4ZWNjZjJjMDViYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk/QhqN3jfCUQr65Ga9+aNVNcuwo
9+OeYk5YhGp6WCElQdfC33e85/hGjv7RQ49pLpN1pEtNaguDslpPr+vIcJPr0Q+k
XZr+GsMbJawemLVKr1GgtgPdgT31qpQI6jST/vE/aFnap+7lY0dLIIojOpuBRJeI
KGbyRQHMqTnGMN2W4tAbCLvZsPQj8El0861YX3jI/7XeC6eUs+8SQYH0r7LYwF9c
7f9TWnt/hVYX3pcsbqfSrC6vtNEj92XjTe/kgvEdjnxNJ7los0UERKDh+VfW5mqa
vJuxaz9f5YeLO0sK9dDADXbNm9+Cb7ky1WpSmtylz0Lt+v1pluDbUWbpTQIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFCqqCvdchrmPticT3onI7M8sBbxfMB8GA1UdIwQY
MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt
YWQ1NzU1MjJiMzY1LzEvS3FvSzkxeUd1WS0ySnhQZWljanN6eXdGdkY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1
LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAIwbAMHBioEmgAS
AAMHACoHNQAQIAMHACoHNQARoAMHACoHNQAawAMHACoHNQAa2AMHACoHNQAbMAMH
ACoHNQAbSAMHACoHNQAbwAMHACoHNQAcAAMHACoHNQAdqAMHACoHNQEQEAMHACoH
NQIQ4DANBgkqhkiG9w0BAQsFAAOCAQEAlu3Apw66B/FrTqu/gtQp7oJNPL3JPmuZ
T/vJT65LAqWhKxolbSqFWobcx26kSt1fXc95PR16A/ZGyRLbC+n/cSitYqMwqBP4
6OOXZIjRCWKIdksmpJdHHmWgbYSUQOET4XYq/XLHqeflGPrLP+OclGRCfARGrkm1
l7C6C5wmO38HwpBFRT0NaaHY0s7V7LRKQlWlHYrKjvCf+EOoZyKK9yY6b6Mbd9qa
7eg2+xy5tb2bak9JgvJyN/yIaEkUNCHVGvhpkuXAyjEoYCpnIXs7E3FCogRqH5yV
bQcIxTiinf+psUsP/m+KTtFoA0dRSAad98ckyJJkWzvF7KOUvYZjbQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:28:19 2026 by rpki-client