Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/KScxqHqB-FUcEf5EMaehr6H24s4.roa
File: KScxqHqB-FUcEf5EMaehr6H24s4.roa (raw, json)
Hash identifier: veg/H48mghnpee9Q7H0VJaTPxGQVaIu/cftmq4ahFJU=
Subject key identifier: 29:27:31:A8:7A:81:F8:55:1C:11:FE:44:31:A7:A1:AF:A1:F6:E2:CE
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019C52FA7B86C7B8B5CC5E7A9E3DAA3D603B
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/KScxqHqB-FUcEf5EMaehr6H24s4.roa
Signing time: Thu 12 Feb 2026 17:51:13 +0000
ROA not before: Thu 12 Feb 2026 17:51:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201279
IP address blocks: 2a0d:d940:500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:52:fa:7b:86:c7:b8:b5:cc:5e:7a:9e:3d:aa:3d:60:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Feb 12 17:51:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=292731a87a81f8551c11fe4431a7a1afa1f6e2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6e:10:65:a8:a6:99:00:03:a3:22:fc:04:51:
be:8a:f9:1b:67:5d:9d:49:23:0a:96:fe:ee:d9:80:
d4:27:0a:02:9c:80:96:ee:9a:d5:f5:63:26:f2:e4:
9f:a6:50:43:69:05:d1:f4:51:c6:4e:09:b9:21:51:
66:27:c4:65:34:b1:42:6f:63:67:e6:3c:63:2d:84:
45:0f:b9:6f:d5:9e:a5:8e:cb:02:2e:c1:46:07:77:
5e:4e:30:22:23:d0:64:b4:99:20:23:cf:4b:8b:fe:
c7:93:82:5a:1a:e9:15:87:de:86:81:ff:27:65:cd:
23:a5:92:6b:58:10:d2:0e:cf:d1:25:c4:00:3f:c5:
54:b7:6f:6e:dc:5b:c1:3b:53:95:bd:68:a3:ea:fb:
c3:84:53:2e:3d:41:05:cb:65:1c:12:45:da:50:5b:
62:65:ce:88:fb:0c:8c:ad:d6:64:28:dc:4f:52:c6:
0b:62:a9:a3:cd:04:6f:38:c1:97:24:13:0c:51:39:
58:e6:34:2a:4d:40:b2:c4:a1:05:39:97:68:56:92:
3c:ab:ba:ef:ea:9a:54:89:f1:cb:b3:a0:88:e7:f4:
79:4b:96:05:99:ac:7e:dd:0e:3a:83:36:fc:fb:82:
5c:94:43:2f:b9:61:8e:36:17:a5:b1:88:51:41:5e:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:27:31:A8:7A:81:F8:55:1C:11:FE:44:31:A7:A1:AF:A1:F6:E2:CE
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/KScxqHqB-FUcEf5EMaehr6H24s4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:500::/40
Signature Algorithm: sha256WithRSAEncryption
86:4f:78:ec:c7:63:6c:ec:48:65:96:7b:75:c5:66:7e:f8:0d:
8f:0b:96:08:a7:f2:9c:d6:38:81:bb:6a:3d:46:a7:ab:9e:8d:
ca:c0:cd:49:c5:18:dd:bb:53:7b:79:87:0b:7d:c7:ea:da:31:
ff:62:82:e7:68:f6:47:ae:6a:82:fc:60:a5:30:b8:04:22:87:
e6:bb:cc:b1:91:91:fc:4e:14:a9:72:47:53:10:60:da:42:e5:
4d:05:6a:f2:ed:4a:5c:ed:40:e5:7d:ea:30:67:84:5b:78:e6:
35:6f:10:fb:a6:d5:91:3c:c9:22:5e:b3:88:19:e4:05:35:10:
35:18:21:b8:26:e9:70:3b:cc:e7:8b:13:0f:0c:2c:0a:87:15:
f4:74:65:ad:f3:f0:ce:09:63:74:a5:8a:c5:0e:dc:45:6e:81:
df:84:b8:6f:2f:f6:05:ce:66:f7:5e:17:9d:87:d9:5d:86:b6:
cf:84:58:8f:90:8e:c0:af:b9:3b:2f:a5:d5:09:f1:1e:95:1a:
98:6e:d2:20:ef:99:a0:f2:7d:02:b5:18:99:ae:fd:62:fc:ee:
01:03:59:f7:30:ed:9b:3e:2b:c0:3e:ab:a9:a6:31:1d:8e:66:
80:58:1f:bd:59:e9:5e:c2:8d:cc:7d:66:0f:1e:e5:a2:be:45:
0a:69:ce:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 08:48:43 2026 by rpki-client