Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/KmrQG8ABSDDoPWxM0MmmDyWHCmA.roa
File: KmrQG8ABSDDoPWxM0MmmDyWHCmA.roa (raw, json)
Hash identifier: g70sdgkDbYrQc1kwIhz+eBYDzl0gJbikJ8mXpxog+G0=
Subject key identifier: 2A:6A:D0:1B:C0:01:48:30:E8:3D:6C:4C:D0:C9:A6:0F:25:87:0A:60
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 01A0689576740591B4E412B2F1077E8A4515
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/KmrQG8ABSDDoPWxM0MmmDyWHCmA.roa
Signing time: Thu 03 Sep 2026 18:43:40 +0000
ROA not before: Thu 03 Sep 2026 18:43:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 64.178.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:95:76:74:05:91:b4:e4:12:b2:f1:07:7e:8a:45:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Sep 3 18:43:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a6ad01bc0014830e83d6c4cd0c9a60f25870a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:f5:6f:85:1e:54:23:e1:49:ed:f5:4f:53:
7f:00:91:fc:e7:a8:5c:99:90:7a:ea:da:3a:ee:d5:
dc:12:ed:5d:64:64:8a:c1:b2:a4:90:52:45:ec:1e:
40:89:27:aa:f4:3b:1e:ad:9d:88:1c:a9:1d:25:05:
a9:cf:0e:2c:b2:de:24:97:bd:97:28:e9:e4:91:44:
15:17:7c:f8:42:fa:42:be:da:69:c0:84:d7:7b:b6:
ad:dc:67:95:ff:90:70:f6:e7:0f:51:15:c8:9b:32:
93:77:15:09:7d:47:52:f5:0e:e0:9d:6e:9d:11:89:
73:2b:ab:2f:ba:9e:61:5a:cc:cf:1b:9e:8e:0f:a5:
78:ae:ed:7f:66:f5:3d:33:ea:ac:b0:df:34:e2:0b:
60:85:23:03:21:cd:26:39:c7:9f:d9:bf:e1:d6:65:
f5:c1:37:eb:f9:fd:d9:50:ab:2d:c3:78:b2:74:56:
7d:bb:7b:a6:8a:86:ac:a2:4b:01:74:85:3c:84:bb:
d0:f4:6d:ef:74:a0:c0:29:82:3b:e4:08:a1:bb:89:
84:bb:3a:91:41:e4:49:7c:a7:ce:f7:f3:b2:92:8a:
25:3e:dc:06:43:7b:2d:bb:2b:41:b9:53:1e:a7:4f:
53:96:b7:bb:e0:b7:35:fb:b1:4c:58:68:67:35:7b:
63:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6A:D0:1B:C0:01:48:30:E8:3D:6C:4C:D0:C9:A6:0F:25:87:0A:60
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/KmrQG8ABSDDoPWxM0MmmDyWHCmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.178.96.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:26:ce:50:bc:ed:ef:79:b9:5b:a2:bc:55:e9:6d:34:a5:60:
33:37:90:01:54:e8:02:51:41:54:7a:7f:97:e9:e3:8a:e1:18:
cf:56:06:52:07:db:7a:c8:42:36:c5:6b:b0:63:ea:11:17:55:
34:e4:3b:94:a6:2e:fa:81:71:7a:49:3e:ba:42:d5:92:c5:ad:
7f:d3:b5:74:3a:cc:84:1d:19:c4:8e:0f:09:35:21:e9:b2:fe:
63:d5:49:d3:eb:89:23:b9:d8:51:52:94:2c:df:35:59:ec:73:
99:9a:d5:69:04:e1:37:49:21:8d:d8:85:25:c8:a1:7e:d1:4a:
cf:a0:c5:c1:5d:df:79:c0:6c:b1:23:cf:46:e8:f7:74:18:94:
f1:e7:16:be:3f:ab:36:c1:d3:a9:75:6c:e5:e7:20:5a:79:e3:
5b:d7:d7:a3:f0:0f:61:ff:d8:10:0f:79:ee:dc:49:f4:03:71:
61:b8:c5:1a:4c:22:7c:77:31:13:db:cf:6c:b3:15:35:92:13:
a8:b2:71:c8:0f:ae:12:9b:71:1f:ba:8b:a1:61:f7:b2:df:c3:
e6:30:55:d8:33:1d:6b:74:f9:a2:85:52:57:dd:6c:30:11:c9:
89:c5:e1:2b:09:98:c1:aa:19:6a:ea:52:84:29:ee:73:4d:2a:
67:22:db:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 13:21:51 2026 by rpki-client