Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/KJdQpyBfWKtJLPF9TORRQAb4qdA.roa
File: KJdQpyBfWKtJLPF9TORRQAb4qdA.roa (raw, json)
Hash identifier: oVwC0gqTzOIZsECyjeO5OkI+oHIry1HIScm7Hq7iDLw=
Subject key identifier: 28:97:50:A7:20:5F:58:AB:49:2C:F1:7D:4C:E4:51:40:06:F8:A9:D0
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A16A54362B6778AA8B46D9500A672A40E1
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/KJdQpyBfWKtJLPF9TORRQAb4qdA.roa
Signing time: Fri 23 Oct 2026 19:54:25 +0000
ROA not before: Fri 23 Oct 2026 19:54:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40115
IP address blocks: 2a0e:4005:ff00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:54:36:2b:67:78:aa:8b:46:d9:50:0a:67:2a:40:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Oct 23 19:54:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=289750a7205f58ab492cf17d4ce4514006f8a9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:5e:86:25:84:d8:a8:21:86:80:43:c9:64:
61:65:58:42:0f:ab:8a:9b:42:e4:cb:96:1d:d3:17:
36:0b:58:ec:8b:b4:ef:80:4d:ee:89:ac:13:b8:60:
76:95:d3:4a:9c:b8:2b:56:aa:16:e3:87:53:a6:05:
11:fd:83:f8:41:51:6e:f2:df:85:21:11:7f:40:34:
ad:c1:03:49:c5:fd:6c:8b:f6:8a:e3:d7:8c:b4:6b:
f7:ee:44:03:0b:9d:87:7e:d8:01:11:a2:da:e5:af:
a9:83:27:1d:73:eb:e6:fb:95:d6:1d:25:07:d6:9e:
4b:b4:11:b1:9d:a7:37:c2:72:74:f4:44:1e:9d:e7:
94:99:f0:52:94:86:37:09:93:a4:0c:2e:3c:70:af:
dd:e3:84:b4:3d:9e:9c:66:84:c0:9f:c6:0e:cd:a5:
43:d6:83:35:65:ca:bb:bc:2c:14:d0:a8:58:ab:d1:
2c:c9:18:00:b6:db:aa:56:98:5b:b2:2a:5f:2e:ce:
9d:46:f8:c2:ff:98:59:34:d7:c5:b6:06:3b:05:a2:
8a:b2:29:b6:a2:bb:5a:60:01:35:13:22:44:a1:bd:
db:eb:bf:9f:0d:99:5c:ad:8c:66:39:85:ac:44:bb:
36:8d:be:1b:e9:3d:78:73:90:86:a0:5b:43:19:9b:
aa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:97:50:A7:20:5F:58:AB:49:2C:F1:7D:4C:E4:51:40:06:F8:A9:D0
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/KJdQpyBfWKtJLPF9TORRQAb4qdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4005:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
6a:f7:52:09:d5:28:0a:51:ca:77:08:44:a0:35:b2:b9:4b:6e:
3a:bd:76:e8:5a:d2:8b:9d:a6:bd:83:1b:63:85:3f:a6:08:f6:
6d:2f:8f:3d:ce:b4:4d:a9:20:23:94:a1:78:b7:03:e7:e2:c8:
67:c1:90:5e:58:e4:ed:61:bc:ff:44:d4:f9:29:74:f9:e7:e5:
06:bb:13:fc:36:8e:06:91:6d:ba:bf:4c:92:5f:57:94:8c:de:
fc:06:d2:8f:51:ba:70:02:91:8a:66:70:cf:70:9e:b7:9b:97:
1a:f5:9f:70:f5:4e:c5:30:50:c9:90:d9:09:ec:3d:74:34:93:
e6:aa:17:04:e8:b6:5b:8c:cf:a1:d5:c9:01:66:01:af:db:f3:
06:0e:31:11:d1:4c:73:e0:a6:11:0d:de:b7:00:79:94:26:eb:
7a:8c:5e:c7:84:8e:f3:fb:9d:80:0c:5d:dc:84:32:a5:6f:b3:
00:01:2b:2e:96:65:f1:b5:09:df:7d:e6:53:9e:98:d7:80:11:
d7:ee:86:7d:5f:36:c1:6f:f0:ca:f9:0a:7b:72:7d:62:27:50:
7a:8c:10:61:b9:15:6d:58:cb:71:ba:5a:29:53:b7:fb:b0:ba:
e2:88:6e:2f:aa:f5:d2:e5:09:3a:74:76:fa:f8:09:07:d2:13:
73:08:4f:72
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaFqVDYrZ3iqi0bZUApnKkDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjYxMDIzMTk1NDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODk3NTBhNzIwNWY1OGFiNDkyY2YxN2Q0Y2U0NTE0MDA2ZjhhOWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRRehiWE2KghhoBDyWRhZVhCD6uK
m0Lky5Yd0xc2C1jsi7TvgE3uiawTuGB2ldNKnLgrVqoW44dTpgUR/YP4QVFu8t+F
IRF/QDStwQNJxf1si/aK49eMtGv37kQDC52HftgBEaLa5a+pgycdc+vm+5XWHSUH
1p5LtBGxnac3wnJ09EQeneeUmfBSlIY3CZOkDC48cK/d44S0PZ6cZoTAn8YOzaVD
1oM1Zcq7vCwU0KhYq9EsyRgAttuqVphbsipfLs6dRvjC/5hZNNfFtgY7BaKKsim2
ortaYAE1EyJEob3b67+fDZlcrYxmOYWsRLs2jb4b6T14c5CGoFtDGZuqHwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFCiXUKcgX1irSSzxfUzkUUAG+KnQMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvS0pkUXB5QmZXS3RKTFBGOVRPUlJRQWI0cWRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg5ABf8w
DQYJKoZIhvcNAQELBQADggEBAGr3UgnVKApRyncIRKA1srlLbjq9duha0oudpr2D
G2OFP6YI9m0vjz3OtE2pICOUoXi3A+fiyGfBkF5Y5O1hvP9E1PkpdPnn5Qa7E/w2
jgaRbbq/TJJfV5SM3vwG0o9RunACkYpmcM9wnreblxr1n3D1TsUwUMmQ2QnsPXQ0
k+aqFwTotluMz6HVyQFmAa/b8wYOMRHRTHPgphEN3rcAeZQm63qMXseEjvP7nYAM
XdyEMqVvswABKy6WZfG1Cd995lOemNeAEdfuhn1fNsFv8Mr5CntyfWInUHqMEGG5
FW1Yy3G6WilTt/uwuuKIbi+q9dLlCTp0dvr4CQfSE3MIT3I=
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:59:17 2026 by rpki-client