Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ktbMNaIv5SJ6__zLWQyqNF0v_mg.roa
File: ktbMNaIv5SJ6__zLWQyqNF0v_mg.roa (raw, json)
Hash identifier: Ht3A/phyTNhZp8n+8HExHEyfdcXouSzxfvTZnRTy4so=
Subject key identifier: 92:D6:CC:35:A2:2F:E5:22:7A:FF:FC:CB:59:0C:AA:34:5D:2F:FE:68
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A10B228FF058BB43D46F9D2F9D73969B7F
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ktbMNaIv5SJ6__zLWQyqNF0v_mg.roa
Signing time: Mon 05 Oct 2026 08:16:16 +0000
ROA not before: Mon 05 Oct 2026 08:16:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42260
IP address blocks: 5.1.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:22:8f:f0:58:bb:43:d4:6f:9d:2f:9d:73:96:9b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Oct 5 08:16:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92d6cc35a22fe5227afffccb590caa345d2ffe68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:f6:19:87:7a:d6:5b:51:dd:a2:5b:1f:03:
d8:89:69:8c:53:54:da:e2:9b:cb:e7:73:44:b3:e1:
56:e1:3d:10:a9:b2:f4:6e:fb:da:3d:dd:6c:9a:62:
ea:39:2d:e7:56:54:05:ea:17:ae:7a:68:eb:46:bb:
eb:50:0c:ae:78:18:79:50:ab:af:fb:fd:82:16:c1:
d0:d7:2d:ea:ba:49:68:ad:97:70:35:f9:05:45:d8:
f1:63:38:5f:c2:c2:8a:ed:5f:fa:5f:c9:d0:3d:c4:
2e:7a:6c:2c:a2:d6:05:7f:9f:9a:3c:50:5f:cd:7d:
4a:34:d3:ec:71:45:dd:98:8c:4e:98:cd:72:5d:28:
39:d3:1f:83:15:ca:46:f0:82:23:d3:40:43:25:f4:
3d:b9:9a:f3:af:0b:6f:83:f8:c6:b4:05:b3:ed:8f:
15:2e:c7:76:6e:06:0c:ae:28:df:9d:3f:df:14:15:
bd:0b:dd:37:40:24:31:09:ad:68:8b:1c:26:54:d8:
57:65:bb:89:77:76:47:a5:3e:0e:d8:36:ce:25:3b:
a0:98:90:93:77:77:a5:84:8e:23:a7:04:8a:2f:15:
fa:89:4d:7e:9e:4d:7b:04:72:af:37:91:8f:f2:01:
70:e9:29:59:14:a4:b7:30:5a:ed:ec:10:80:b2:7a:
11:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D6:CC:35:A2:2F:E5:22:7A:FF:FC:CB:59:0C:AA:34:5D:2F:FE:68
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ktbMNaIv5SJ6__zLWQyqNF0v_mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.47.0/24
Signature Algorithm: sha256WithRSAEncryption
76:82:d0:79:14:95:7f:12:7a:b5:61:48:b2:77:b9:5a:3b:0c:
2a:68:4f:58:ce:40:0b:aa:4b:a5:b7:c6:d3:c5:d1:3b:bc:b9:
b9:ba:ca:51:29:1a:52:0b:28:cb:c2:84:78:40:ee:d1:08:dc:
36:95:b8:af:a7:39:a8:82:8e:86:8b:73:7a:8c:5d:5c:73:f5:
fa:53:62:bb:3e:a8:02:a9:f0:e7:d6:1f:cb:c9:16:58:86:b6:
b1:b3:6d:73:8e:1f:87:0d:57:80:18:73:ac:e1:60:77:2b:05:
b0:f3:48:be:16:e7:ad:f8:f1:a7:b7:b1:4c:0f:01:1e:44:91:
8a:ca:c4:18:12:52:ee:e0:7c:77:b5:3b:35:6c:33:a7:3e:5f:
08:3d:40:0e:67:d4:09:5a:97:d6:ee:79:90:a4:b0:e6:4f:15:
e8:a3:c7:c9:b8:99:fa:04:42:1a:10:25:a4:89:91:4e:f6:db:
75:37:3d:ff:9a:4b:94:6e:35:cf:05:d1:4e:29:5c:f4:d7:80:
af:19:27:7b:59:a8:ca:f4:41:87:25:99:53:21:a8:31:bf:b4:
af:fc:dc:57:17:e4:e9:0a:a4:4e:98:c1:78:e9:f5:c6:a1:45:
3c:bb:de:71:d9:cf:35:0c:2d:c2:db:0e:d7:b8:78:c0:40:15:
a8:84:dd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:16:47 2026 by rpki-client