Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/kkaN34dPFzsfPEI-fZd7KP-pfLU.roa
File: kkaN34dPFzsfPEI-fZd7KP-pfLU.roa (raw, json)
Hash identifier: AzWDWwHIXhb8lGQNOOstOsRvBfcDp2w4pMgxi168ueE=
Subject key identifier: 92:46:8D:DF:87:4F:17:3B:1F:3C:42:3E:7D:97:7B:28:FF:A9:7C:B5
Certificate issuer: /CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Certificate serial: 019F2368519FB7B6213FE61DA694350A4AE9
Authority key identifier: 01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/kkaN34dPFzsfPEI-fZd7KP-pfLU.roa
Signing time: Thu 02 Jul 2026 15:17:46 +0000
ROA not before: Thu 02 Jul 2026 15:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200747
IP address blocks: 2a04:5d00:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:51:9f:b7:b6:21:3f:e6:1d:a6:94:35:0a:4a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Validity
Not Before: Jul 2 15:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92468ddf874f173b1f3c423e7d977b28ffa97cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a7:5e:c4:12:70:fc:ee:8a:89:c2:59:d0:52:
da:32:26:cd:d5:74:c4:67:ba:7e:c6:90:f4:ad:b7:
f2:36:62:3a:24:08:81:2f:e9:26:7d:18:fb:12:16:
85:9a:74:f5:dc:fa:f3:f3:97:b2:59:ba:61:f4:86:
c2:27:01:2e:35:78:e9:9c:2c:ee:b1:91:a4:1b:1e:
e0:4c:90:d3:e5:8e:0a:2a:21:af:89:b9:fe:f9:6c:
f7:39:f4:76:22:79:6f:e1:bb:23:ec:c3:33:a2:5f:
6a:98:97:f6:b5:68:0e:ca:38:56:a9:fe:26:29:79:
fa:52:50:c5:4b:82:c4:41:81:4f:79:9d:55:76:52:
66:50:78:99:bd:df:ef:eb:5c:e5:f3:f1:4a:ae:03:
4a:6d:51:4b:e0:6c:96:4e:f4:96:36:95:1d:a3:22:
ae:44:4c:ce:b1:3a:1c:a8:c6:42:fa:4f:31:74:a1:
43:8d:78:23:42:bb:5e:38:e7:d4:04:ef:0e:e7:05:
4f:2d:44:23:7f:cf:29:d3:6c:8b:c4:31:c4:69:a3:
ad:b5:05:ac:c3:a0:28:e7:a1:81:93:88:88:d8:18:
dd:c5:3c:c3:ba:9c:67:48:f6:ed:0d:4e:7d:44:f6:
d8:fa:9a:2e:2c:19:8f:a7:2d:26:3b:14:69:e0:21:
7a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:46:8D:DF:87:4F:17:3B:1F:3C:42:3E:7D:97:7B:28:FF:A9:7C:B5
X509v3 Authority Key Identifier:
keyid:01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/kkaN34dPFzsfPEI-fZd7KP-pfLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5d00:10::/44
Signature Algorithm: sha256WithRSAEncryption
91:1b:e8:ae:b6:59:1b:62:93:fa:35:4c:d1:20:eb:fe:32:e5:
70:90:01:0a:2c:96:37:24:f5:47:6a:a5:db:cc:23:f1:41:bd:
e1:09:29:98:d6:b5:56:83:04:03:e7:ba:29:46:87:4a:b6:4e:
3a:b9:f0:17:fb:31:12:90:61:f2:cc:4f:e5:0d:b8:b5:ba:68:
44:9e:ac:7e:60:c4:fc:df:14:46:33:89:7f:aa:a1:c3:c8:db:
0a:2f:c1:33:e5:78:4f:52:95:24:ca:14:b4:87:d2:4c:4b:53:
d6:b1:d4:0c:6e:2d:4f:c8:11:2d:0e:a7:db:14:f8:68:d7:69:
2b:85:78:b8:1f:80:be:03:2d:56:68:29:f3:78:04:66:52:7a:
41:3d:06:ef:4f:b3:be:86:7b:e1:ee:9d:10:79:3c:49:ee:54:
c9:e5:d1:10:2f:f7:b0:d5:18:2e:e6:95:9f:13:19:63:4b:ce:
a4:57:a8:6c:ef:fe:b8:91:fd:bf:28:7c:08:1e:f8:77:37:4f:
fe:be:bf:3f:6c:e8:3b:bc:4f:c3:eb:97:22:76:43:ec:b6:a1:
10:8b:b0:bd:e3:e1:cd:de:fc:ff:6a:42:b1:e9:ae:a2:6e:d9:
fd:ae:d6:13:b9:28:48:d0:ce:d2:e3:a3:7c:ea:d5:8f:9e:b8:
27:25:e4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:09 2026 by rpki-client