Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/K2OwPxMayCE_1ViREDJ_Lw9Kd5E.roa
File: K2OwPxMayCE_1ViREDJ_Lw9Kd5E.roa (raw, json)
Hash identifier: gffqd1M2fn2Fy9anzZwV6xr4tLTh3PAkfv21h6tFVf4=
Subject key identifier: 2B:63:B0:3F:13:1A:C8:21:3F:D5:58:91:10:32:7F:2F:0F:4A:77:91
Certificate issuer: /CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Certificate serial: 019F1D8BB9CDC527F4651220370D2ACC3C12
Authority key identifier: 04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/K2OwPxMayCE_1ViREDJ_Lw9Kd5E.roa
Signing time: Wed 01 Jul 2026 11:58:43 +0000
ROA not before: Wed 01 Jul 2026 11:58:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47526
IP address blocks: 78.138.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:8b:b9:cd:c5:27:f4:65:12:20:37:0d:2a:cc:3c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Validity
Not Before: Jul 1 11:58:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b63b03f131ac8213fd5589110327f2f0f4a7791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7b:e7:d6:5c:b1:8b:89:47:ea:fd:bc:5b:5b:
32:8b:f5:b9:3e:a2:ba:4e:e0:d6:7c:3c:ce:1e:29:
b8:0f:8f:46:c4:a8:f5:af:d9:63:ca:a6:7d:1a:d6:
89:0d:3f:42:4d:91:cd:a9:42:20:56:0e:78:f9:0a:
bc:aa:3f:7d:9e:6b:3a:a9:29:28:6d:09:34:4f:12:
97:00:1e:cc:16:e8:39:50:20:17:ca:18:83:27:42:
79:b5:5f:df:04:a1:5b:6a:43:4f:69:6c:d0:b8:20:
f4:da:e0:89:b1:5d:78:f0:26:60:b0:91:88:f2:07:
77:ec:75:62:8d:d7:0c:9a:43:f6:59:9e:c5:d2:ba:
0b:ce:96:98:40:54:07:30:21:58:74:76:6d:76:f9:
ff:e8:dd:7a:06:23:12:ab:9f:a5:84:07:48:ff:32:
e5:54:fe:c7:9a:91:62:8a:46:46:2c:96:87:fe:20:
08:c7:cd:e3:f8:d3:dd:f2:04:8d:fc:6c:54:49:06:
95:5b:fe:bc:1f:33:51:94:42:9b:12:b4:16:a7:3e:
f1:a1:b7:b8:1e:ff:e4:04:37:88:36:76:eb:7d:1a:
1a:1a:9b:fe:5b:f8:20:75:13:8e:fa:f7:24:f0:06:
18:c2:f2:90:13:74:9a:be:fb:31:fa:af:0a:67:c5:
c6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:63:B0:3F:13:1A:C8:21:3F:D5:58:91:10:32:7F:2F:0F:4A:77:91
X509v3 Authority Key Identifier:
keyid:04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/K2OwPxMayCE_1ViREDJ_Lw9Kd5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.138.61.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:2a:ac:64:c8:9f:3e:12:0d:c0:6b:b0:5c:90:95:30:39:7f:
1b:46:db:2d:a4:26:ef:76:51:7a:a0:c1:b1:06:9e:08:4d:62:
c3:54:d2:b1:bf:2f:6e:63:e4:a8:25:a3:56:5d:5c:8b:ce:02:
14:3d:1b:7a:87:92:0d:6a:14:b6:32:ea:9f:3d:09:fd:13:6e:
5c:8c:c0:d0:55:8f:31:27:f0:15:66:1d:e7:1b:e1:38:b1:f5:
a1:03:4e:29:48:9b:cb:cd:56:2a:97:26:57:0b:1a:18:a9:a5:
03:f8:f1:ca:d9:1f:a3:77:8c:d7:ef:ed:b9:d4:4f:89:c0:96:
55:48:90:15:63:59:e8:6c:0a:2f:a9:32:4b:b8:59:cb:4c:13:
cf:3a:57:d6:89:fd:87:41:ef:e2:54:47:fe:c3:7b:41:50:c5:
10:e1:33:fe:cc:6c:eb:e9:27:4b:f5:5c:14:f7:f5:24:ef:1a:
72:6d:30:39:51:28:6f:63:0f:c6:22:e7:34:e6:11:c6:3c:80:
7a:d2:ab:32:d3:a4:d3:f2:2d:5a:89:dd:46:66:96:78:04:06:
32:e8:6b:0f:be:44:e7:92:ee:e4:c3:ab:db:12:d7:46:63:04:
7f:52:5d:4f:82:16:c1:6c:d6:d0:6f:ac:f9:41:7b:95:01:f0:
78:c8:d1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:16 2026 by rpki-client