Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/nKKeWinGnqBjcGFmPGlb0XrUI0U.roa
File: nKKeWinGnqBjcGFmPGlb0XrUI0U.roa (raw, json)
Hash identifier: sa74JZ/0LmfSkiGf+vBGfeJmMzDtGBqTiqTaP+F3efs=
Subject key identifier: 9C:A2:9E:5A:29:C6:9E:A0:63:70:61:66:3C:69:5B:D1:7A:D4:23:45
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019E5F1ADFA8FFA526D9C3D77569209692BA
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/nKKeWinGnqBjcGFmPGlb0XrUI0U.roa
Signing time: Mon 25 May 2026 12:27:37 +0000
ROA not before: Mon 25 May 2026 12:27:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213436
IP address blocks: 2a14:67c1:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5f:1a:df:a8:ff:a5:26:d9:c3:d7:75:69:20:96:92:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: May 25 12:27:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ca29e5a29c69ea0637061663c695bd17ad42345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:80:16:e8:47:6b:e9:e5:d8:5a:30:6d:76:a2:
4a:3e:bd:42:6b:3e:34:d9:eb:de:5e:25:b2:31:28:
25:27:2a:1c:fd:95:3c:5f:22:02:bb:cf:65:23:0b:
ee:db:7d:b8:63:79:56:4e:e5:98:0b:fd:5e:f8:67:
43:af:b5:c0:86:54:cf:08:50:8e:e0:3d:76:55:55:
74:7e:ad:75:eb:2f:e8:ae:6f:b6:8c:15:3e:8c:ef:
5e:7a:bf:6d:ef:dd:cd:3a:46:7a:2f:39:24:2f:b5:
0f:a8:d9:b3:00:aa:be:2c:ee:95:02:92:85:34:87:
8b:1d:01:04:6d:53:ad:f3:a0:b5:74:8a:27:0a:73:
55:c7:56:0d:ab:31:e0:7d:ec:29:02:63:28:20:c5:
44:1a:13:0e:d9:53:6e:9a:8b:8b:3f:c2:c7:fc:5e:
73:1a:53:6f:2d:1e:e1:e2:d8:b9:e7:5e:7f:04:c5:
ce:87:8e:7a:05:ef:6b:37:e6:56:fd:74:7e:9e:60:
d8:1f:ab:fc:a2:b1:c8:c1:95:19:88:4d:18:17:78:
fc:6f:b6:52:cd:ea:18:d6:c4:44:fb:f4:c4:6c:67:
11:55:62:d1:53:54:9f:29:e3:e5:c1:ef:b6:e3:27:
09:bd:68:10:1e:d0:b3:1a:b3:21:18:cf:17:81:95:
da:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A2:9E:5A:29:C6:9E:A0:63:70:61:66:3C:69:5B:D1:7A:D4:23:45
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/nKKeWinGnqBjcGFmPGlb0XrUI0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:1000::/36
Signature Algorithm: sha256WithRSAEncryption
c9:e8:0e:e3:11:7d:d5:73:90:f9:c2:68:d9:43:3b:39:57:d3:
94:e8:cc:c3:2b:4a:2e:16:91:80:5e:6f:9a:e4:77:19:6d:28:
f0:71:08:9f:16:94:d9:5f:1b:50:86:c7:df:ca:2c:93:32:df:
e5:8b:10:7f:87:57:22:94:1a:f7:3f:86:fe:aa:81:86:01:3e:
cf:ae:4d:af:05:c8:21:35:18:4d:50:19:7d:3f:5b:fb:4f:c8:
f6:ae:a1:02:c5:76:32:91:70:58:31:8d:45:98:4a:0d:5d:41:
ec:92:73:d8:21:36:78:ed:2d:a7:3b:29:48:36:89:98:4e:6c:
8f:39:16:99:d6:e5:f9:dc:74:29:5f:43:d7:6b:ca:8b:1f:5a:
ef:a4:bd:7e:1c:b0:fd:8c:f3:d7:ae:9e:2c:bb:49:83:cf:bf:
59:b5:60:3f:ac:3d:c5:34:fa:49:1f:70:fe:94:3c:39:0a:b2:
1e:3e:80:9f:8a:a8:44:4e:56:78:e4:82:23:ce:cc:01:64:b6:
c6:e6:f3:d9:62:2e:64:26:e1:da:6f:2b:46:63:a4:f5:74:cc:
61:bf:41:b1:c8:77:8c:02:58:33:67:28:21:5e:94:fd:31:f0:
80:42:aa:94:8f:21:e7:93:33:d7:a2:f0:78:30:a5:2b:52:1f:
26:af:a0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:31 2026 by rpki-client