Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/dKLrGCnnWV06iolZrHx2nh4vWJg.roa
File: dKLrGCnnWV06iolZrHx2nh4vWJg.roa (raw, json)
Hash identifier: IGn7SudG+KQQ8pkrK3hPDPOgmXUuAfTQAKdCH2IyL6I=
Subject key identifier: 74:A2:EB:18:29:E7:59:5D:3A:8A:89:59:AC:7C:76:9E:1E:2F:58:98
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 019F2066D36E2F1A9EA4676F1743755DB5B3
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/dKLrGCnnWV06iolZrHx2nh4vWJg.roa
Signing time: Thu 02 Jul 2026 01:17:17 +0000
ROA not before: Thu 02 Jul 2026 01:17:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206848
IP address blocks: 2a04:92c5:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:20:66:d3:6e:2f:1a:9e:a4:67:6f:17:43:75:5d:b5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jul 2 01:17:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74a2eb1829e7595d3a8a8959ac7c769e1e2f5898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d5:bf:6b:e9:1b:a1:02:01:07:aa:8d:dc:64:
99:f9:15:f2:40:71:c7:c6:d4:12:8b:88:c6:35:2c:
08:da:27:cf:29:bd:6c:47:05:93:ad:e3:2b:83:0a:
eb:6d:86:a8:4c:d2:7d:49:f5:4d:18:c0:e7:1e:d2:
28:0b:21:27:ed:f3:03:78:e9:5d:09:dc:1e:d4:8a:
88:c1:ba:6b:0c:ef:56:03:b6:09:9e:fb:c0:d5:01:
95:80:ce:77:da:12:30:a8:8b:a2:9c:30:bb:a5:b7:
b9:0b:48:7a:ea:52:c7:87:75:f0:96:9f:91:1c:c2:
2a:75:1c:1d:2c:ad:d2:85:fc:5a:15:22:d8:62:d2:
16:ca:43:9f:f8:f2:55:e9:5b:31:b4:55:06:a4:b4:
24:41:4a:cc:8f:b6:02:d0:cf:41:9d:1c:80:e9:4d:
e2:4b:2c:af:e5:bc:7f:02:f1:04:7d:02:3a:5f:47:
10:ca:c4:9d:1d:cb:15:b5:bd:7c:3e:05:08:ed:d0:
d6:eb:f6:f9:0a:98:08:99:08:d3:71:ac:17:77:dc:
c5:88:20:bf:d9:98:2d:78:af:f1:ef:35:9b:e3:f4:
57:81:4a:21:c7:7e:c3:65:19:ca:d6:5b:0a:fd:d8:
81:ee:f9:86:f3:51:8b:58:27:e9:69:56:fb:8c:ee:
86:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A2:EB:18:29:E7:59:5D:3A:8A:89:59:AC:7C:76:9E:1E:2F:58:98
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/dKLrGCnnWV06iolZrHx2nh4vWJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:92c5:100::/40
Signature Algorithm: sha256WithRSAEncryption
07:c7:99:5d:f6:e1:87:50:73:1a:96:b0:95:8a:14:38:88:31:
db:0c:c7:31:75:30:3b:5c:94:74:6c:dc:30:c8:d2:72:69:9a:
79:c8:1a:50:c6:70:fd:e6:a9:76:3d:a9:16:e7:c5:89:a7:82:
5d:ac:37:11:4f:e5:ed:a2:01:64:11:48:6d:93:52:51:bf:7f:
f0:6b:a1:20:b5:64:74:80:2b:00:bf:b9:8b:7f:8e:1e:9e:c5:
a8:11:da:1c:aa:34:50:c2:30:c9:85:de:d2:a6:f7:8e:e7:d3:
5c:3d:76:a1:b9:35:fd:8c:35:b1:c8:58:29:9f:d1:a0:26:ec:
f4:8f:38:04:7c:ac:7e:e1:fc:23:b4:1a:0b:42:a3:31:ba:be:
33:85:be:d6:e8:2c:c5:d9:59:94:a0:25:11:26:8b:b4:e3:58:
b8:c4:84:9f:21:76:94:27:e7:66:6a:00:60:e7:75:ff:db:eb:
52:63:33:87:b0:30:8e:64:a3:e6:7f:49:1c:bc:0e:33:3d:38:
44:14:d1:47:09:be:b0:61:58:18:32:89:b6:a3:32:4c:f3:a1:
35:a7:35:85:66:0d:84:1d:23:11:87:00:a4:4a:eb:9e:c8:0f:
cf:2e:bb:f6:9c:62:2a:99:8d:08:33:9e:b0:b0:02:44:50:e2:
2c:17:17:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:58 2026 by rpki-client