Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/K5u3Tr40I3mfToZrB6zkDBlzWK8.roa
File: K5u3Tr40I3mfToZrB6zkDBlzWK8.roa (raw, json)
Hash identifier: n7FJtuIQo8tBV72/k4cOCqSmD1yp6D32dYcs4ZkK6ug=
Subject key identifier: 2B:9B:B7:4E:BE:34:23:79:9F:4E:86:6B:07:AC:E4:0C:19:73:58:AF
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F6A143C232C9DBEEF5E0C80343D9780D
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/K5u3Tr40I3mfToZrB6zkDBlzWK8.roa
Signing time: Thu 01 Oct 2026 08:42:38 +0000
ROA not before: Thu 01 Oct 2026 08:42:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21209
IP address blocks: 213.253.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:a1:43:c2:32:c9:db:ee:f5:e0:c8:03:43:d9:78:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 08:42:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b9bb74ebe3423799f4e866b07ace40c197358af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:a1:51:68:9c:07:c0:c0:95:05:dd:b7:67:
27:a2:69:33:b4:48:e3:b4:0b:1d:e8:d3:da:ea:4f:
e1:1f:6f:16:e9:12:e8:c7:a6:c4:c4:ce:bc:df:a2:
90:f3:8c:db:a2:4e:5e:65:be:89:c9:01:0f:e1:75:
1a:c9:d4:a2:28:fc:7c:28:eb:97:d6:2f:4a:b3:0a:
0d:db:9e:30:cd:13:ea:c4:c7:78:aa:dd:a3:8b:64:
36:ad:5f:6b:17:71:7a:b9:14:7f:dc:1e:87:9e:d3:
b4:b2:c3:0d:8a:ff:0e:48:13:c8:79:f7:18:4b:d0:
94:78:c6:9b:d3:85:8f:cb:45:c6:a1:2d:43:fb:7a:
10:bb:e0:93:b6:76:78:ee:0b:d4:92:13:d4:19:93:
cb:8b:17:33:f4:a6:90:c3:66:14:32:17:bd:26:ae:
23:d9:cf:24:5b:07:9d:e2:6b:c1:9a:77:6d:f6:55:
de:02:ae:35:22:77:fe:ee:fb:f5:26:b2:e5:b5:d7:
59:f6:af:b9:43:4a:b2:93:2b:2d:2a:46:08:6c:ac:
d4:82:50:58:5f:b7:9c:08:3e:e0:e7:a1:43:bb:a3:
d3:4e:ee:12:8c:2c:ce:bd:4c:f0:9c:a8:0e:00:fb:
f5:87:03:be:20:2b:3f:2c:0b:58:ec:1a:71:3b:24:
c9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9B:B7:4E:BE:34:23:79:9F:4E:86:6B:07:AC:E4:0C:19:73:58:AF
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/K5u3Tr40I3mfToZrB6zkDBlzWK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.253.215.0/24
Signature Algorithm: sha256WithRSAEncryption
af:13:24:b3:14:21:54:ce:88:95:53:ce:4b:f2:83:3b:0b:97:
0f:3b:77:fe:6d:0a:14:65:04:16:df:e2:5d:52:7d:e8:20:b9:
a1:19:da:ad:0b:3c:95:c1:20:7c:66:86:d0:74:9d:ea:39:82:
04:c3:a3:e6:3a:e5:de:24:81:27:2a:50:e2:70:9f:cc:2f:a0:
4c:73:8e:84:68:c3:a7:a5:de:56:fd:b2:33:dc:15:07:45:f4:
36:fd:50:18:7f:98:af:96:c2:bc:ac:df:f0:b9:47:13:96:c2:
12:9a:6a:d9:2d:4d:eb:7e:0d:ca:d2:f3:f7:d2:6c:30:8b:97:
15:64:18:a6:d5:21:2b:0e:3b:8f:41:94:f3:5f:ea:38:d9:96:
cd:85:9f:03:cd:87:4b:37:ef:3e:86:7e:3d:f4:c9:20:e3:37:
39:44:43:48:5c:59:59:9e:a1:6b:fa:d1:3b:35:5d:71:fc:e2:
56:46:27:df:ba:c2:18:19:54:f1:59:a4:a2:84:c0:a5:ef:c8:
12:ec:22:61:c4:0a:d1:6a:f9:97:c2:a5:b5:0e:44:2d:aa:1f:
4a:a1:f2:a4:5a:d2:70:c3:40:86:ad:d4:da:8f:23:68:bd:c2:
91:97:55:be:33:b3:b4:56:0f:e3:98:97:fb:92:12:fc:e9:22:
72:c7:85:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 02:16:53 2026 by rpki-client