Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/KrB7uvE9bKw3yAKVJCQvXlGLopk.roa
File: KrB7uvE9bKw3yAKVJCQvXlGLopk.roa (raw, json)
Hash identifier: 8K9bI6nkeysWqiudvR2q+I1t8ttPCPC4qoTAEiGR6EE=
Subject key identifier: 2A:B0:7B:BA:F1:3D:6C:AC:37:C8:02:95:24:24:2F:5E:51:8B:A2:99
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 019B78A2B32638886F12729AC1887D7DDB00
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/KrB7uvE9bKw3yAKVJCQvXlGLopk.roa
Signing time: Thu 01 Jan 2026 08:18:07 +0000
ROA not before: Thu 01 Jan 2026 08:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203555
IP address blocks: 2a03:404::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Feb 2026 19:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:b3:26:38:88:6f:12:72:9a:c1:88:7d:7d:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Jan 1 08:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ab07bbaf13d6cac37c8029524242f5e518ba299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0d:85:77:63:fb:83:2d:6c:ef:a3:28:62:f6:
0f:22:22:81:79:eb:b7:01:d9:d5:df:4b:76:42:b6:
a9:d5:db:96:42:4d:5f:58:83:c7:dc:d6:e5:d0:17:
79:88:9e:7b:97:07:cf:fa:5c:94:5c:53:76:ec:d1:
69:0e:69:85:ab:b2:c9:f5:b9:29:13:73:b3:b5:fe:
e8:da:2f:56:e9:f3:b7:d2:07:07:8d:1f:4d:49:05:
e7:1f:ee:06:c2:3c:95:a0:b1:1d:af:0a:89:c0:d3:
5b:39:ff:1b:22:39:58:40:1f:21:3c:e8:d9:a7:6d:
26:2a:2e:58:33:f0:e1:7b:8c:ef:73:8c:d3:ce:aa:
d2:ef:61:ed:91:a7:71:d6:62:c7:6c:57:ea:ea:a2:
4d:7c:6f:db:5f:0b:3e:94:8d:20:00:f7:0c:be:5d:
93:b3:46:0c:ac:08:32:8d:8e:80:28:50:03:17:ef:
bf:08:99:f9:dd:26:a9:88:a5:9a:69:52:05:92:54:
40:42:74:30:dc:f1:02:a8:58:47:e3:96:43:b2:bf:
6c:15:79:39:61:c8:64:2a:13:05:e7:94:e2:25:a9:
3e:56:ec:89:0d:f5:bb:34:47:55:98:12:1c:28:ec:
4e:fc:04:11:2a:b3:0e:14:27:c4:ab:83:d4:93:39:
85:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B0:7B:BA:F1:3D:6C:AC:37:C8:02:95:24:24:2F:5E:51:8B:A2:99
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/KrB7uvE9bKw3yAKVJCQvXlGLopk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:404::/32
Signature Algorithm: sha256WithRSAEncryption
d2:6a:2f:e0:34:3c:65:c8:db:ce:2e:d6:cd:44:d3:74:ab:cc:
83:55:2b:41:f5:29:98:a2:00:02:dc:3b:7b:8a:63:19:fd:0f:
fe:3e:9a:6c:ce:a3:9c:c9:aa:b6:49:6b:68:44:79:7f:b7:0b:
ed:32:eb:44:d4:4b:03:61:23:c8:41:93:e7:7a:fe:d8:f8:54:
f6:78:ba:c1:cb:31:d2:94:52:aa:a4:9b:1c:14:ef:cf:94:21:
45:1d:94:a8:81:ec:40:ac:37:5e:25:fb:13:63:e4:c7:f1:a4:
73:03:ec:36:33:58:23:f8:72:4c:75:2d:4f:cc:fe:50:39:2e:
95:75:af:66:94:f8:2a:e1:bc:4f:17:0b:43:0e:d1:c8:f8:f1:
cb:59:d0:a1:2e:e9:6c:03:e9:01:15:9d:e9:40:c5:0e:e7:47:
ff:77:52:db:f1:ad:7d:4f:c8:dd:01:1b:84:d5:e3:6f:94:ad:
7f:ec:d5:26:c9:94:2e:4c:6a:68:db:c1:28:84:ed:05:f3:5a:
9e:1c:b1:13:f8:05:bb:3b:5e:ff:41:33:22:3d:01:4a:2b:ba:
61:1c:e4:78:a2:9a:bb:d8:c0:ac:f8:e4:e3:ec:6d:21:b3:8a:
1a:6c:e1:81:67:86:c9:3d:8e:fa:f2:94:f6:e5:6c:55:ac:69:
46:e2:cb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:41:17 2026 by rpki-client