Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/K5ostPCTlzhRxaxo847usrKR-CI.roa
File: K5ostPCTlzhRxaxo847usrKR-CI.roa (raw, json)
Hash identifier: NmMLX9d9BtFVnwDmZOqCtfLXGibrWNZHHPi91g//AAQ=
Subject key identifier: 2B:9A:2C:B4:F0:93:97:38:51:C5:AC:68:F3:8E:EE:B2:B2:91:F8:22
Certificate issuer: /CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Certificate serial: 01A1589790BF1773355998E40EAE5CF2F508
Authority key identifier: 38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/K5ostPCTlzhRxaxo847usrKR-CI.roa
Signing time: Tue 20 Oct 2026 09:14:50 +0000
ROA not before: Tue 20 Oct 2026 09:14:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218441
IP address blocks: 2a13:3f41::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:97:90:bf:17:73:35:59:98:e4:0e:ae:5c:f2:f5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Validity
Not Before: Oct 20 09:14:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b9a2cb4f093973851c5ac68f38eeeb2b291f822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:eb:52:a3:3c:e6:30:74:f0:0d:19:d8:52:53:
76:e3:dc:cc:2e:6f:f5:8f:ab:43:91:a7:8e:d8:29:
5c:a1:5e:54:06:3b:9e:b1:fa:01:c8:ad:71:7b:13:
30:9b:02:c1:f9:87:df:34:71:49:08:5a:7b:7b:a1:
08:60:d6:4c:28:62:88:9e:ba:54:97:52:76:5d:6f:
42:aa:31:5b:ec:47:ac:b8:68:5c:b7:b8:11:d0:1f:
a7:7d:f8:f7:0a:02:b1:a4:aa:67:db:53:18:ec:e8:
1c:3a:47:35:3d:9d:07:ee:09:c9:6a:0d:be:68:4e:
3c:b5:89:69:54:fb:41:b0:98:39:68:b2:a0:91:1b:
a7:fa:ab:03:d7:fd:42:ea:9f:a0:03:01:c6:76:69:
95:4a:33:4b:4f:65:48:21:85:d5:ea:ad:1f:a3:24:
72:aa:f7:1f:ae:b3:9f:84:f9:77:74:df:e1:49:10:
e5:de:41:92:96:15:93:3f:db:6f:b8:fe:d5:be:7b:
75:7e:f6:42:3d:07:06:ad:ec:33:59:b0:92:ee:f8:
22:e6:df:4d:ea:29:a5:82:d0:d2:0e:1b:db:95:17:
ca:c9:da:8c:6f:a9:d3:e5:57:07:1b:e9:26:34:da:
e5:88:57:a6:8d:ce:91:33:db:0c:c6:2e:26:84:89:
f4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9A:2C:B4:F0:93:97:38:51:C5:AC:68:F3:8E:EE:B2:B2:91:F8:22
X509v3 Authority Key Identifier:
keyid:38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/K5ostPCTlzhRxaxo847usrKR-CI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3f41::/32
Signature Algorithm: sha256WithRSAEncryption
48:60:60:bd:c7:ed:d4:50:46:f4:1e:fe:42:37:3a:e4:0a:af:
18:e8:a6:24:f0:cc:ca:2f:8f:4f:af:d1:a6:ae:dc:23:c6:e6:
87:ca:0c:3b:18:50:d6:77:26:8d:b1:f2:31:8e:4a:c5:16:57:
4b:8f:2d:3c:1e:ff:8d:1d:8a:1b:73:76:e8:c1:5f:90:b1:53:
36:f7:54:f8:d4:57:9c:0a:8a:9d:71:21:31:5e:96:1a:b4:26:
0b:83:e9:04:9c:6d:7a:f4:58:c7:2c:f0:e0:5c:6b:84:7f:9a:
92:5c:d1:3c:c3:7c:76:c7:4e:ef:1f:8d:b5:04:bc:b0:c8:8c:
7f:f4:51:2b:36:4a:d3:b7:5e:9d:f0:e9:76:67:ae:fa:86:f2:
c0:b3:6c:54:bd:c9:08:73:5b:db:ad:eb:0d:e9:bb:30:79:84:
69:73:20:97:a8:b0:4f:88:36:f5:a5:ae:99:a3:35:af:0f:14:
51:4e:54:ec:31:b7:b9:32:e5:61:bf:ed:bd:28:25:de:c0:fa:
ea:e8:28:3f:68:63:81:48:33:d7:35:27:60:1d:1a:10:42:bb:
2b:2f:a7:bf:23:71:3c:11:c4:0c:73:47:27:00:11:99:ae:de:
43:c5:4a:02:ab:8e:63:56:73:6b:94:a0:9a:69:8f:8c:17:7b:
bb:d8:9f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:40:54 2026 by rpki-client