Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/KGPtjFnqao2z33N8scVlU8kTpPM.roa
File: KGPtjFnqao2z33N8scVlU8kTpPM.roa (raw, json)
Hash identifier: EpdAjeKvoCRNGOwRdkdn3dYHdua8/rKvJ/y5JDWydAI=
Subject key identifier: 28:63:ED:8C:59:EA:6A:8D:B3:DF:73:7C:B1:C5:65:53:C9:13:A4:F3
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01A16437E5331319E6B6F7FA6E71178589FF
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/KGPtjFnqao2z33N8scVlU8kTpPM.roa
Signing time: Thu 22 Oct 2026 15:25:47 +0000
ROA not before: Thu 22 Oct 2026 15:25:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a10:eec0:23::/48 maxlen: 48
2a10:eec0:24::/46 maxlen: 46
2a10:eec0:28::/45 maxlen: 45
2a10:eec0:35::/48 maxlen: 48
2a10:eec0:36::/47 maxlen: 47
2a10:eec0:38::/45 maxlen: 45
2a10:eec0:44::/46 maxlen: 46
2a10:eec0:48::/45 maxlen: 45
2a10:eec0:53::/48 maxlen: 48
2a10:eec0:54::/46 maxlen: 46
2a10:eec0:58::/45 maxlen: 45
2a10:eec0:60::/43 maxlen: 43
2a10:eec0:80::/41 maxlen: 41
2a10:eec0:100::/40 maxlen: 40
2a10:eec0:200::/39 maxlen: 39
2a10:eec0:400::/38 maxlen: 38
2a10:eec0:800::/37 maxlen: 37
2a10:eec0:1000::/36 maxlen: 36
2a10:eec0:2000::/35 maxlen: 35
2a10:eec0:4000::/34 maxlen: 34
2a10:eec0:8000::/35 maxlen: 35
2a10:eec0:a000::/37 maxlen: 37
2a10:eec0:a800::/39 maxlen: 39
2a10:eec0:aa00::/40 maxlen: 40
2a10:eec0:ab00::/41 maxlen: 41
2a10:eec0:ab80::/42 maxlen: 42
2a10:eec0:abc0::/45 maxlen: 45
2a10:eec0:abc8::/46 maxlen: 46
2a10:eec0:abcc::/48 maxlen: 48
2a10:eec0:abce::/47 maxlen: 47
2a10:eec0:abd0::/44 maxlen: 44
2a10:eec0:abe0::/43 maxlen: 43
2a10:eec0:ac00::/38 maxlen: 38
2a10:eec0:b000::/36 maxlen: 36
2a10:eec0:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:37:e5:33:13:19:e6:b6:f7:fa:6e:71:17:85:89:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Oct 22 15:25:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2863ed8c59ea6a8db3df737cb1c56553c913a4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:87:e1:9e:af:46:a3:fe:9c:aa:df:d6:b3:15:
50:86:82:e1:1f:f1:de:02:aa:96:c2:f0:3a:25:d1:
25:25:07:36:71:a9:e9:6e:0c:21:78:40:5f:57:74:
9a:38:28:27:45:c9:56:f6:8e:ba:47:6f:29:9a:6f:
39:6f:59:f0:e6:d6:21:de:95:95:dd:0d:fa:25:60:
22:0b:77:04:5e:73:f8:fb:c5:90:3d:e0:8f:fa:e8:
54:da:55:8a:db:69:4a:8f:1f:6b:56:6e:e0:5a:a8:
7f:75:50:cd:34:75:f0:c7:0d:d8:b6:d7:9a:09:32:
84:b5:85:88:5f:38:4f:82:d9:33:0a:03:4f:d8:b6:
e9:2f:54:82:f6:6d:db:01:05:dd:0d:96:2e:4c:c0:
3c:92:34:73:94:8e:76:84:e5:49:f9:cd:6d:db:06:
d2:a6:90:f1:87:aa:cb:93:12:af:fb:9d:cd:f6:4d:
d7:9e:48:f1:e0:b0:83:ca:b4:04:76:df:a1:95:c3:
57:6c:0d:4f:70:95:86:43:39:ba:37:f4:d0:4f:f3:
69:d9:61:05:2c:73:83:c0:8e:98:65:a1:1d:9d:b3:
1d:18:76:3b:82:8c:3e:37:4d:74:42:c4:73:30:38:
b8:f3:af:35:97:0e:fe:92:2f:ca:18:7c:cc:f0:bb:
0b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:63:ED:8C:59:EA:6A:8D:B3:DF:73:7C:B1:C5:65:53:C9:13:A4:F3
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/KGPtjFnqao2z33N8scVlU8kTpPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:eec0:23::-2a10:eec0:2f:ffff:ffff:ffff:ffff:ffff
2a10:eec0:35::-2a10:eec0:3f:ffff:ffff:ffff:ffff:ffff
2a10:eec0:44::-2a10:eec0:4f:ffff:ffff:ffff:ffff:ffff
2a10:eec0:53::-2a10:eec0:abcc:ffff:ffff:ffff:ffff:ffff
2a10:eec0:abce::-2a10:eec0:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6f:7e:1c:79:bd:81:6f:95:9f:9a:6e:fd:21:4a:9e:82:2d:46:
1f:7d:0f:ed:9d:00:ed:99:8b:fd:d1:e3:ab:ce:29:3a:25:c2:
36:91:0f:34:63:dc:79:6e:00:62:3a:35:73:12:41:c1:26:bf:
a7:45:c4:74:88:38:f3:da:e2:cc:db:98:1c:2f:f2:9f:89:d0:
74:35:ad:57:79:9a:2b:7a:73:de:6a:56:00:80:92:52:74:0b:
6e:98:82:8c:3e:ef:e6:c4:d5:bb:d0:fc:ae:94:56:38:48:5e:
c1:1f:08:53:2d:d1:89:00:55:53:8a:49:26:1b:38:24:c7:52:
f5:6c:88:dc:e5:b9:11:39:27:07:cb:92:96:a0:13:af:e9:65:
b7:6e:5e:03:9e:1b:06:ad:87:15:9f:3f:d0:7d:69:d4:bc:5a:
2a:89:30:80:d6:27:94:b9:38:60:65:fb:2f:23:12:a7:94:0a:
8c:1b:01:6b:c2:17:b8:8c:de:8b:5f:46:7e:af:35:de:56:2c:
bf:9d:07:f2:66:b0:e6:5e:7e:04:17:0b:cf:5e:f4:6b:b8:4b:
15:ba:85:3e:84:d5:3e:72:bc:8f:40:27:6a:83:b3:d8:10:3e:
2c:5b:3d:b8:2c:b5:9b:78:7e:98:24:76:81:29:9f:f6:4a:20:
29:93:eb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:32:36 2026 by rpki-client