Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/KVYnG1rasxK0lFwIWs0m90qVCwo.roa
File: KVYnG1rasxK0lFwIWs0m90qVCwo.roa (raw, json)
Hash identifier: 3EZ/z4Q8VBlWlWq5DaBE242a5qu04Bq4t9H9x0FLAzs=
Subject key identifier: 29:56:27:1B:5A:DA:B3:12:B4:94:5C:08:5A:CD:26:F7:4A:95:0B:0A
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 01A13BC5AF38F18CC525028291E35E21A9F9
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/KVYnG1rasxK0lFwIWs0m90qVCwo.roa
Signing time: Wed 14 Oct 2026 18:56:13 +0000
ROA not before: Wed 14 Oct 2026 18:56:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219100
IP address blocks: 2a14:1040::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c5:af:38:f1:8c:c5:25:02:82:91:e3:5e:21:a9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Oct 14 18:56:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2956271b5adab312b4945c085acd26f74a950b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:79:f0:c7:2a:70:51:4a:de:5b:2c:e2:05:
d4:40:60:9c:d4:9b:2d:c2:ac:c5:65:43:07:2d:ff:
71:ef:74:7f:61:26:f7:3d:5e:6a:7e:eb:cd:43:6a:
8e:95:28:4e:d2:8d:60:58:30:12:e3:d7:29:4e:06:
87:d5:18:c5:03:80:19:f4:81:b4:cb:66:4a:f5:29:
85:db:42:76:c1:e1:dd:ce:34:0b:d6:b1:11:12:bd:
be:86:3b:3e:b7:a7:dd:c6:48:87:fc:b7:a6:77:49:
bb:51:c3:64:95:bf:ae:f4:af:f7:fc:b6:99:42:7c:
1d:9b:fe:1c:4e:9b:1c:f6:2a:16:28:76:23:dc:b2:
23:bf:83:d0:fa:68:81:3c:01:62:b8:bd:e0:36:28:
f5:a5:64:18:c6:eb:96:01:ca:0a:97:ad:84:5c:2e:
54:5f:9a:4d:e2:39:3b:a4:41:9a:e0:b2:03:10:81:
50:bb:d0:a4:33:a2:f1:07:9e:c7:e3:ed:a6:f4:ad:
d3:b2:81:46:59:7f:1f:4e:5d:48:ad:40:db:b9:34:
77:44:66:13:dd:31:26:3e:d6:2d:59:53:c3:f1:8f:
3c:ef:cc:3e:96:84:3d:35:a1:96:13:da:f9:11:26:
78:87:05:53:ea:56:a7:3e:7b:0e:5c:bc:d7:28:40:
19:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:56:27:1B:5A:DA:B3:12:B4:94:5C:08:5A:CD:26:F7:4A:95:0B:0A
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/KVYnG1rasxK0lFwIWs0m90qVCwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1040::/29
Signature Algorithm: sha256WithRSAEncryption
88:fd:3d:5c:16:28:47:c2:50:48:b2:33:06:b5:a6:de:ed:a5:
72:36:2c:71:81:53:28:da:79:dd:b6:fd:d5:97:5e:57:7c:0e:
2b:03:1f:e8:77:54:10:42:7e:ee:68:7b:63:3e:57:7c:f5:15:
58:d6:1a:6d:31:7f:bf:d9:61:49:bb:13:23:6e:1e:3a:79:45:
da:72:19:56:8e:a0:3e:62:68:cf:e6:e2:64:25:ac:8f:6b:2c:
fb:6d:43:9f:4f:93:b3:3a:a9:2c:c6:cc:cd:35:52:7c:5b:5f:
3d:7b:d2:cf:b6:f3:96:33:67:29:c6:5a:9f:d1:9a:c6:fc:19:
28:b0:1c:a9:f0:48:65:dc:24:84:17:40:f3:ed:ba:98:f5:b7:
0e:c8:e7:27:f1:ab:84:09:cc:17:7d:69:5e:8c:d0:84:fe:b6:
5c:31:94:f5:cc:78:4d:9a:7a:9d:af:13:34:47:e1:04:3f:98:
ef:58:7f:39:75:c2:93:1d:10:1b:2b:c3:8a:78:22:77:0a:8a:
19:6b:2f:64:2a:26:63:f5:0c:cb:d5:d6:19:5c:49:6b:8f:c1:
1d:f2:ca:2b:7a:be:ca:5b:fa:39:c2:63:b2:f1:24:85:3e:ce:
da:9c:da:2c:3a:a2:e4:c0:0d:0e:6f:5a:d9:6e:93:fd:e6:35:
cf:86:8a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:07:10 2026 by rpki-client