Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/kNYFMtj48zDvL9rXAS2-UYTlJ8U.roa
File: kNYFMtj48zDvL9rXAS2-UYTlJ8U.roa (raw, json)
Hash identifier: UPggW0cBIf+pegWGWHoijb2annhj+po65C3/gJ4sdOY=
Subject key identifier: 90:D6:05:32:D8:F8:F3:30:EF:2F:DA:D7:01:2D:BE:51:84:E5:27:C5
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019DCD16A72C626A9C1E268D7AB9D8FFE1FA
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/kNYFMtj48zDvL9rXAS2-UYTlJ8U.roa
Signing time: Mon 27 Apr 2026 03:58:26 +0000
ROA not before: Mon 27 Apr 2026 03:58:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198681
IP address blocks: 2a14:67c3:1100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:16:a7:2c:62:6a:9c:1e:26:8d:7a:b9:d8:ff:e1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Apr 27 03:58:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90d60532d8f8f330ef2fdad7012dbe5184e527c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:5b:7b:dd:f0:5c:a3:3e:63:38:cb:dc:85:
89:4d:4b:a5:30:b8:7a:6a:50:59:6f:ce:d9:9f:af:
da:dc:de:75:47:9b:30:6c:4e:33:b2:5e:4b:c9:c0:
29:57:80:96:35:b6:56:1d:04:88:31:c6:f7:ef:d9:
11:27:3f:8c:fb:0f:8f:bc:f6:a0:f3:d1:26:41:21:
03:c3:ee:a5:e6:de:d7:1b:60:a9:69:04:22:e9:53:
43:92:44:33:94:03:df:a9:89:88:e1:25:30:d8:04:
e3:d4:23:cc:50:8c:7b:9d:5a:36:d9:b2:e0:1a:db:
1a:ee:02:8e:28:fd:ac:8b:ce:40:5c:e1:3c:32:98:
19:44:56:9e:61:9a:d8:6d:e0:ae:d5:96:d1:ed:88:
15:68:08:5e:70:0a:5c:fb:48:af:26:a2:67:90:35:
73:2e:a3:fc:30:b7:a1:dd:32:3f:38:2a:8c:28:53:
3b:19:26:9c:b8:a0:a1:fe:a3:0d:e5:97:44:26:f6:
7b:6a:f7:81:c2:d6:db:80:4a:67:61:5d:0f:6a:3d:
53:d2:fc:f4:67:74:e2:73:5e:80:d8:a7:5c:b8:23:
1f:c1:9c:aa:68:aa:80:56:bc:0a:d0:d8:c3:c4:47:
b0:ce:b2:8f:73:9c:d7:98:fd:1a:5a:b1:d1:b0:68:
e6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D6:05:32:D8:F8:F3:30:EF:2F:DA:D7:01:2D:BE:51:84:E5:27:C5
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/kNYFMtj48zDvL9rXAS2-UYTlJ8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c3:1100::/44
Signature Algorithm: sha256WithRSAEncryption
06:bc:0a:21:c8:c7:7b:33:3d:f0:02:fb:66:5f:15:a2:aa:fa:
9a:19:e2:e2:41:52:ab:63:15:a0:d9:fc:29:62:0c:fa:98:89:
0a:58:3b:19:c9:b3:db:d5:9e:ee:2d:ad:30:ef:5e:a7:d9:9d:
47:6d:e5:a1:e2:ae:0b:02:78:75:ea:b9:07:21:de:aa:d8:1c:
80:1f:45:b6:08:8e:36:0f:90:9d:77:dc:1b:a3:ce:02:4d:29:
37:1e:d8:7b:ac:3d:0c:76:35:96:0a:b3:58:84:28:d5:86:5f:
02:ad:f3:02:d1:45:4e:5f:3d:36:55:44:89:ea:6a:14:36:76:
bf:98:82:5a:e7:95:ad:61:48:9e:08:5b:6f:af:f7:c5:59:85:
19:f3:22:81:55:cc:e3:8b:6d:db:a6:a3:62:62:d1:41:78:68:
47:b5:c8:78:13:e2:d6:bb:3d:a1:1c:74:e2:48:74:30:2e:9c:
5c:28:46:e8:d7:da:a0:60:2a:c6:63:ef:ff:d1:06:00:de:ea:
2f:c1:a2:7d:c2:d6:d9:c6:9c:d6:8b:1a:03:2f:d6:52:6b:c7:
8b:c8:08:6c:8c:b4:84:fa:3a:72:96:93:0f:13:27:a6:24:9e:
ea:60:66:51:6b:a3:21:1a:53:7c:4a:65:f0:d5:52:85:54:76:
51:d2:19:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 08:24:37 2026 by rpki-client