Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/khA-0aemzoAXkitqCw-4sQmsMRM.roa
File: khA-0aemzoAXkitqCw-4sQmsMRM.roa (raw, json)
Hash identifier: VSDpeQpVEqUcKTzAzPsD8pCDtuVb2HEMCe2DHFaAIZc=
Subject key identifier: 92:10:3E:D1:A7:A6:CE:80:17:92:2B:6A:0B:0F:B8:B1:09:AC:31:13
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A14A9B9D72B776E09ACF0E74E57A919B1D
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/khA-0aemzoAXkitqCw-4sQmsMRM.roa
Signing time: Sat 17 Oct 2026 16:04:34 +0000
ROA not before: Sat 17 Oct 2026 16:04:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218424
IP address blocks: 2a0c:9a40:e140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:9b:9d:72:b7:76:e0:9a:cf:0e:74:e5:7a:91:9b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Oct 17 16:04:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92103ed1a7a6ce8017922b6a0b0fb8b109ac3113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dc:72:9f:db:c8:4f:a1:cf:1f:09:1f:0c:a2:
68:57:bc:9e:d8:e2:a6:c9:05:b3:ad:a8:63:d0:07:
23:c7:31:e4:74:5a:ef:aa:d0:35:1b:fc:59:4e:da:
b6:2b:36:7d:d2:7f:46:a1:48:c2:05:15:79:62:30:
20:b3:d9:0e:c4:80:da:c5:7b:64:68:a1:53:03:7f:
48:c8:14:bb:63:93:9b:af:f3:0c:dc:39:7a:03:73:
bd:3b:61:a3:5d:25:c0:de:61:31:fe:99:45:8c:08:
85:d7:a2:f5:b2:27:72:02:68:8b:64:92:64:68:da:
b3:43:23:e8:c6:03:a2:ac:82:40:23:d9:c4:73:e8:
f1:1a:3c:5a:16:b3:dc:55:0e:81:dc:1f:2c:cd:0f:
fa:6a:33:c7:7e:a0:d2:81:3d:b6:5b:88:06:2e:08:
7e:17:d5:27:c1:6e:b6:ad:3a:17:00:89:cf:20:de:
f8:1c:83:e7:9f:c5:3b:14:fa:d1:d8:47:a9:27:da:
06:dd:9a:aa:ff:02:8f:54:40:8d:f1:e4:c0:87:aa:
21:75:2f:5f:60:33:c6:cc:cc:64:b2:12:e2:14:a2:
79:89:c9:7d:27:19:f1:b4:e8:62:72:b1:6d:4c:51:
de:d9:7c:9a:19:1e:7a:49:bf:5b:c5:50:56:e7:02:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:10:3E:D1:A7:A6:CE:80:17:92:2B:6A:0B:0F:B8:B1:09:AC:31:13
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/khA-0aemzoAXkitqCw-4sQmsMRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:e140::/48
Signature Algorithm: sha256WithRSAEncryption
a9:4f:07:65:29:bf:28:f8:f1:0a:ef:4c:38:aa:d3:91:93:6d:
e6:23:8f:e0:2f:af:50:8e:12:8e:fb:d9:1b:e6:23:a7:51:99:
d2:eb:99:ff:67:9d:cd:71:60:e1:fc:05:10:1f:2e:18:27:08:
29:2a:47:1e:8d:68:6b:89:f6:2e:2a:bc:5d:81:d4:6b:50:05:
e8:a5:33:cc:bd:5f:8f:0f:81:0e:72:0b:45:5c:97:b3:2f:f1:
9a:fc:84:13:5e:7e:8f:5e:93:86:ce:eb:3a:e2:4e:f5:8c:86:
92:3b:de:50:fe:e2:fa:0c:94:03:5f:22:5d:c3:ec:df:81:5a:
34:2f:ea:69:b8:8e:33:42:1f:cf:23:31:d2:65:81:bf:13:c2:
87:af:26:f0:00:7f:b7:07:7c:30:27:95:c7:5c:ec:7b:0a:ee:
a1:70:dc:36:0c:9a:49:01:fb:67:db:02:11:c5:ed:d2:18:a5:
58:4f:96:57:81:58:b4:ec:d3:81:ba:ea:5e:18:85:d9:72:30:
b4:5f:fb:bb:94:72:75:5e:fa:b5:67:7b:59:14:23:38:63:d4:
10:3c:3d:67:20:a2:81:07:95:a3:4d:68:24:0e:d4:1d:44:f2:
55:8c:a0:e6:b7:c8:36:45:55:52:a4:f1:7b:72:53:c1:18:03:
29:70:91:e6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaFKm51yt3bgms8OdOV6kZsdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjYxMDE3MTYwNDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjEwM2VkMWE3YTZjZTgwMTc5MjJiNmEwYjBmYjhiMTA5YWMzMTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNxyn9vIT6HPHwkfDKJoV7ye2OKm
yQWzrahj0AcjxzHkdFrvqtA1G/xZTtq2KzZ90n9GoUjCBRV5YjAgs9kOxIDaxXtk
aKFTA39IyBS7Y5Obr/MM3Dl6A3O9O2GjXSXA3mEx/plFjAiF16L1sidyAmiLZJJk
aNqzQyPoxgOirIJAI9nEc+jxGjxaFrPcVQ6B3B8szQ/6ajPHfqDSgT22W4gGLgh+
F9UnwW62rToXAInPIN74HIPnn8U7FPrR2EepJ9oG3Zqq/wKPVECN8eTAh6ohdS9f
YDPGzMxkshLiFKJ5icl9JxnxtOhicrFtTFHe2XyaGR56Sb9bxVBW5wIQhQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJIQPtGnps6AF5IragsPuLEJrDETMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEva2hBLTBhZW16b0FYa2l0cUN3LTRzUW1zTVJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQOFA
MA0GCSqGSIb3DQEBCwUAA4IBAQCpTwdlKb8o+PEK70w4qtORk23mI4/gL69QjhKO
+9kb5iOnUZnS65n/Z53NcWDh/AUQHy4YJwgpKkcejWhrifYuKrxdgdRrUAXopTPM
vV+PD4EOcgtFXJezL/Ga/IQTXn6PXpOGzus64k71jIaSO95Q/uL6DJQDXyJdw+zf
gVo0L+ppuI4zQh/PIzHSZYG/E8KHrybwAH+3B3wwJ5XHXOx7Cu6hcNw2DJpJAftn
2wIRxe3SGKVYT5ZXgVi07NOBuupeGIXZcjC0X/u7lHJ1Xvq1Z3tZFCM4Y9QQPD1n
IKKBB5WjTWgkDtQdRPJVjKDmt8g2RVVSpPF7clPBGAMpcJHm
-----END CERTIFICATE-----
Generated at Wed Oct 21 15:31:25 2026 by rpki-client