Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/1-KmRXcm0EffFQzS72fl1S3DZymg.roa
File: 1-KmRXcm0EffFQzS72fl1S3DZymg.roa (raw, json)
Hash identifier: rN/S5u/23R8Op30IhNEisJnhOq3o+6urpM4nYbYy55k=
Subject key identifier: F8:A9:91:5D:C9:B4:11:F7:C5:43:34:BB:D9:F9:75:4B:70:D9:CA:68
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 01A13BC5AE075601C60144A92A44E03E1864
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/1-KmRXcm0EffFQzS72fl1S3DZymg.roa
Signing time: Wed 14 Oct 2026 18:56:13 +0000
ROA not before: Wed 14 Oct 2026 18:56:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197200
IP address blocks: 2a14:1040::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c5:ae:07:56:01:c6:01:44:a9:2a:44:e0:3e:18:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Oct 14 18:56:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8a9915dc9b411f7c54334bbd9f9754b70d9ca68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:89:32:07:73:c8:2a:df:84:88:6c:b4:de:
11:9f:4c:ed:94:b6:7a:d1:f2:7a:a8:eb:73:b8:c3:
76:8a:6f:ea:7d:0f:63:04:24:32:38:16:3b:8d:89:
84:f6:13:d0:03:2d:89:1f:b4:d6:ed:e8:c2:26:ee:
26:84:73:5c:23:f4:73:74:0d:85:6e:fe:f3:09:36:
e9:33:f7:d3:a9:9c:ca:90:0d:3b:6a:05:da:99:6e:
16:ce:c3:d3:22:14:a7:67:7a:e7:42:b0:d0:f3:07:
36:67:1b:ca:0f:51:49:b1:3a:02:e3:7b:6f:78:3b:
9c:7e:6b:e9:35:8c:fb:bd:ec:89:5e:13:e1:61:d3:
2d:20:a7:24:5e:66:13:ba:df:51:93:68:9b:1c:a5:
6c:c4:aa:1e:92:f5:ea:63:33:33:47:2f:55:a2:9d:
7c:b8:2d:f2:68:b6:3c:61:2d:dd:03:65:6c:9d:dd:
cd:a8:b1:57:c8:48:39:57:b9:de:46:50:46:9b:a3:
cc:32:e9:0a:2b:82:11:98:3d:98:53:1e:ff:ac:f7:
3c:3d:5e:b0:9f:a3:6f:9a:9e:e5:59:12:26:5a:22:
b1:05:7a:26:4a:1d:8f:20:d4:d8:42:a7:14:9a:0d:
06:de:82:8e:bd:2d:b8:93:26:d2:21:c9:9b:ea:ee:
d2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A9:91:5D:C9:B4:11:F7:C5:43:34:BB:D9:F9:75:4B:70:D9:CA:68
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/1-KmRXcm0EffFQzS72fl1S3DZymg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1040::/29
Signature Algorithm: sha256WithRSAEncryption
a3:91:63:d3:cc:4c:06:91:6e:0c:5a:b9:7b:7a:26:71:ea:e8:
e0:70:37:ff:8c:03:2c:d5:fc:f4:f4:d6:13:69:de:3c:bd:19:
2f:2d:02:1a:b2:25:b5:5a:bb:2e:f0:d9:5c:07:07:6f:48:53:
f5:b1:c7:38:c6:c2:c5:c5:20:74:df:d1:26:87:37:37:60:1a:
c3:40:c3:70:03:1d:fc:5c:e4:84:0a:5c:0d:9b:38:1a:06:b3:
09:44:3f:3b:b3:2b:4f:83:30:95:91:2b:03:92:e9:71:01:85:
8e:d8:45:f7:59:35:10:cd:b8:79:9d:af:05:e2:99:14:a2:31:
7a:c7:52:72:7f:2f:28:fa:85:e0:3f:22:21:9e:54:d4:ba:a5:
73:2a:17:be:4e:1c:7e:41:e8:33:58:f7:94:2d:61:3e:7b:eb:
12:21:ed:6e:df:e6:ea:d3:df:b2:5b:b1:4c:62:ae:e3:64:db:
ee:b4:22:cd:e0:69:c7:fb:66:6b:24:06:ab:87:0c:68:28:11:
23:6b:ff:7b:bf:ad:c4:11:5a:c3:da:3c:69:43:11:53:09:55:
d7:16:20:14:1f:62:62:30:1a:66:92:25:c1:32:29:b9:82:92:
4b:45:bf:c0:c7:6f:0b:76:cc:b0:5c:f7:f2:5c:51:ef:75:eb:
d6:23:6c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:01:57 2026 by rpki-client