Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/KuCSaCEOTSfMj8uwOknmWfQSUeo.roa
File: KuCSaCEOTSfMj8uwOknmWfQSUeo.roa (raw, json)
Hash identifier: 3+MmnXuvI/JOfNZCrj8AZFjZyZJa2SF9JSTpsOfpZ38=
Subject key identifier: 2A:E0:92:68:21:0E:4D:27:CC:8F:CB:B0:3A:49:E6:59:F4:12:51:EA
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 019F4BBE76DF045D23804339879F24B31355
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/KuCSaCEOTSfMj8uwOknmWfQSUeo.roa
Signing time: Fri 10 Jul 2026 11:16:41 +0000
ROA not before: Fri 10 Jul 2026 11:16:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199144
IP address blocks: 2a01:48a0:4301::/48 maxlen: 48
2a06:1301:4100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:be:76:df:04:5d:23:80:43:39:87:9f:24:b3:13:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Jul 10 11:16:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ae09268210e4d27cc8fcbb03a49e659f41251ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:38:20:73:79:89:51:8c:79:09:77:0f:50:92:
cd:ef:96:0c:24:20:f9:55:85:8c:47:3e:df:94:6e:
fd:3a:4f:5f:43:ad:81:e0:9f:c9:d4:4c:83:a7:a0:
1d:e6:d6:83:f5:4d:41:98:90:e6:89:b4:a5:0d:05:
77:57:ff:46:9f:9c:fe:f8:e2:a0:1c:da:08:eb:be:
37:6b:ab:c8:c6:a1:e9:57:c7:c1:e3:10:2a:ff:97:
61:72:fb:c4:27:c2:9a:8b:3c:68:3c:20:eb:ac:e1:
5e:9a:b0:d2:f0:7d:fe:9c:fc:bd:25:25:2d:09:d0:
37:45:f4:1a:4b:4f:51:d6:90:13:71:ad:35:3d:33:
95:5d:32:6f:36:f0:14:ae:b2:60:c7:6f:11:26:6e:
6d:d5:50:77:c2:5d:90:a9:a9:8c:5c:cf:10:dd:e8:
79:89:94:80:19:59:a1:96:77:0d:7d:41:44:2c:40:
e4:2b:75:77:ea:5b:2e:ed:b5:c4:e6:75:95:ec:b5:
11:ea:72:f2:4b:c2:47:35:30:7f:58:25:54:2c:22:
65:f9:9f:02:17:2c:70:40:8a:75:84:e5:70:6b:14:
16:e6:8d:22:20:74:bc:ad:26:f9:b8:77:5a:26:ce:
d7:af:d5:aa:56:83:b5:4d:82:1c:20:8c:e0:2c:64:
17:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E0:92:68:21:0E:4D:27:CC:8F:CB:B0:3A:49:E6:59:F4:12:51:EA
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/KuCSaCEOTSfMj8uwOknmWfQSUeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:48a0:4301::/48
2a06:1301:4100::/48
Signature Algorithm: sha256WithRSAEncryption
7e:ec:9c:73:63:6f:be:c3:e3:4f:d5:a0:92:4f:6b:2f:c7:17:
a6:02:95:c7:ef:1a:6e:ec:8f:48:90:d7:cd:e2:54:91:d0:68:
fc:fa:e7:06:4c:73:c0:11:85:b9:bf:a5:1e:76:d2:03:02:fc:
ce:3c:6a:24:1e:95:85:cc:5d:0e:8f:e4:53:51:38:c6:32:3f:
85:45:d5:c7:b9:f6:9d:3d:da:02:46:ca:43:03:c7:03:79:39:
3a:20:27:60:7d:84:1b:3c:62:0d:91:94:0c:61:79:9a:45:1b:
61:ad:ac:1b:3a:db:53:5a:66:5a:3b:0e:58:8b:85:d3:e0:06:
56:5d:20:38:fd:63:4b:11:cd:3a:41:d5:2b:02:a3:9f:d3:19:
72:2d:bc:c8:ba:62:a4:09:cf:64:88:ce:a9:4b:9e:99:ff:36:
f9:0f:44:7d:b2:93:a1:65:a7:b8:96:fa:78:d5:da:c6:08:94:
61:99:b0:a2:31:e9:be:e5:51:50:3b:00:8a:46:c2:6a:55:54:
f8:f7:37:5d:af:79:b7:bd:69:fd:06:97:06:d8:4c:ee:8f:85:
6c:4d:40:36:d5:81:b3:cb:0d:d3:e1:5e:e6:22:e4:db:59:aa:
7b:92:de:43:4a:92:01:c5:b4:f1:7e:74:80:c0:ec:5b:cb:f3:
7f:5e:8b:e5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ9LvnbfBF0jgEM5h58ksxNVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx
ODhlYTcwHhcNMjYwNzEwMTExNjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWUwOTI2ODIxMGU0ZDI3Y2M4ZmNiYjAzYTQ5ZTY1OWY0MTI1MWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zggc3mJUYx5CXcPUJLN75YMJCD5
VYWMRz7flG79Ok9fQ62B4J/J1EyDp6Ad5taD9U1BmJDmibSlDQV3V/9Gn5z++OKg
HNoI6743a6vIxqHpV8fB4xAq/5dhcvvEJ8KaizxoPCDrrOFemrDS8H3+nPy9JSUt
CdA3RfQaS09R1pATca01PTOVXTJvNvAUrrJgx28RJm5t1VB3wl2QqamMXM8Q3eh5
iZSAGVmhlncNfUFELEDkK3V36lsu7bXE5nWV7LUR6nLyS8JHNTB/WCVULCJl+Z8C
FyxwQIp1hOVwaxQW5o0iIHS8rSb5uHdaJs7Xr9WqVoO1TYIcIIzgLGQXcQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCrgkmghDk0nzI/LsDpJ5ln0ElHqMB8GA1UdIwQY
MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt
ZTU3NjhkNmIxODJjLzEvS3VDU2FDRU9UU2ZNajh1d09rbm1XZlFTVWVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj
LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgFIoEMB
AwcAKgYTAUEAMA0GCSqGSIb3DQEBCwUAA4IBAQB+7JxzY2++w+NP1aCST2svxxem
ApXH7xpu7I9IkNfN4lSR0Gj8+ucGTHPAEYW5v6UedtIDAvzOPGokHpWFzF0Oj+RT
UTjGMj+FRdXHufadPdoCRspDA8cDeTk6ICdgfYQbPGINkZQMYXmaRRthrawbOttT
WmZaOw5Yi4XT4AZWXSA4/WNLEc06QdUrAqOf0xlyLbzIumKkCc9kiM6pS56Z/zb5
D0R9spOhZae4lvp41drGCJRhmbCiMem+5VFQOwCKRsJqVVT49zddr3m3vWn9BpcG
2Ezuj4VsTUA21YGzyw3T4V7mIuTbWap7kt5DSpIBxbTxfnSAwOxby/N/Xovl
-----END CERTIFICATE-----
Generated at Sat Jul 18 04:29:05 2026 by rpki-client