Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/K7l2QVXbQc1d3QSCveOA5R_SFzQ.roa
File: K7l2QVXbQc1d3QSCveOA5R_SFzQ.roa (raw, json)
Hash identifier: 6SxLToCJGQ0tyzF3lmCtYtoY4ip5uoJlgPEbbSMdxII=
Subject key identifier: 2B:B9:76:41:55:DB:41:CD:5D:DD:04:82:BD:E3:80:E5:1F:D2:17:34
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F69ADC14822F581AE6D117E4CE87D59B
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/K7l2QVXbQc1d3QSCveOA5R_SFzQ.roa
Signing time: Thu 01 Oct 2026 08:35:39 +0000
ROA not before: Thu 01 Oct 2026 08:35:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200940
IP address blocks: 213.16.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:9a:dc:14:82:2f:58:1a:e6:d1:17:e4:ce:87:d5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 08:35:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bb9764155db41cd5ddd0482bde380e51fd21734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:68:64:38:fa:6d:77:f9:1d:5b:16:ba:7a:90:
19:f4:ff:5a:b2:e7:79:f9:07:8c:93:b8:86:23:b8:
26:74:5c:1c:ca:b5:c2:87:e5:af:e5:df:39:89:dd:
ea:3a:99:42:52:43:98:55:57:cb:38:a9:89:9b:56:
6e:f2:da:bf:68:bf:7f:b6:8f:fe:4b:27:ab:ea:19:
98:89:65:3e:18:ac:08:1b:5b:7e:e7:b8:d0:af:85:
c9:f5:eb:8a:b7:a1:b4:df:aa:ce:ab:ea:2c:ae:8a:
f0:e1:1e:6f:dd:64:9e:10:d3:cc:cd:55:89:16:0c:
f7:77:bc:7e:3f:42:ed:f7:28:7e:23:3d:96:20:a9:
15:eb:c9:04:dc:67:9a:5c:5f:c5:c3:93:c8:92:7f:
7e:94:d7:26:bf:c4:e7:94:01:3c:13:18:04:2b:fb:
56:32:f1:cd:2d:da:b7:7a:62:26:8a:63:e6:c6:2d:
ad:ad:83:bd:ec:1c:f7:b1:52:65:41:7d:c5:b3:f2:
79:8d:33:33:e5:16:34:b3:96:57:c2:9e:28:10:c8:
55:a8:1f:ab:3c:1e:b6:dc:40:1f:5c:42:ad:a8:75:
33:d7:bd:c0:36:a1:fb:f0:de:eb:f0:17:05:35:71:
64:c9:92:ac:b3:68:43:67:ae:16:b0:f4:57:fe:b2:
96:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B9:76:41:55:DB:41:CD:5D:DD:04:82:BD:E3:80:E5:1F:D2:17:34
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/K7l2QVXbQc1d3QSCveOA5R_SFzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.16.92.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:94:ca:78:ea:fc:35:55:c6:e4:8b:58:31:bc:33:d8:aa:95:
2a:64:c2:68:11:f6:25:64:c3:ea:a5:c3:09:b4:2a:8c:1f:b2:
4f:20:77:4f:7c:f7:78:a5:fc:04:56:ec:7d:6e:70:9e:27:fd:
18:02:78:58:ef:07:87:8e:d4:1d:41:b2:b0:ff:ad:f2:54:69:
a2:f5:98:a6:7b:95:2c:0d:b9:2b:b2:d3:b7:02:6e:34:ca:b4:
06:fd:10:d2:ca:fb:55:4b:c2:81:e2:78:d9:e8:b7:40:5b:d4:
37:e6:7f:16:07:29:18:09:33:f2:97:ad:1c:e7:3e:08:fc:cc:
75:9f:37:4d:73:a9:b9:93:23:6d:59:c5:fa:53:4a:1f:6d:73:
bd:5a:fc:a7:04:0f:d4:ec:e5:e1:9b:e8:56:f5:e5:df:03:81:
1e:64:21:cb:1e:3b:eb:47:ce:bf:42:b2:be:80:ce:00:4a:67:
9e:d1:80:15:86:be:f5:19:2e:87:6e:37:b5:98:f1:74:ad:6a:
74:86:02:f2:83:d2:48:07:54:53:a5:c1:b0:32:c3:44:ce:c6:
52:d2:4e:5a:ba:0b:06:83:89:63:70:ca:c2:31:f9:84:ad:00:
0f:51:2f:e9:1e:c2:35:90:97:da:cc:31:9c:d6:08:e6:a0:8b:
67:f8:58:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:23 2026 by rpki-client