Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/Ky30bgCFAJiWkVqMq906lb5RTj4.roa
File: Ky30bgCFAJiWkVqMq906lb5RTj4.roa (raw, json)
Hash identifier: n8TlDhgLBlnlOh2uvWKa+LVsP820Oh1C+WMR73t3uaY=
Subject key identifier: 2B:2D:F4:6E:00:85:00:98:96:91:5A:8C:AB:DD:3A:95:BE:51:4E:3E
Certificate issuer: /CN=2369cf693efc102c937faca7ba09cccaec574948
Certificate serial: 01A15345638596E323C3A29F064C7E12949F
Authority key identifier: 23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/Ky30bgCFAJiWkVqMq906lb5RTj4.roa
Signing time: Mon 19 Oct 2026 08:26:58 +0000
ROA not before: Mon 19 Oct 2026 08:26:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54694
IP address blocks: 2a0d:36c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:45:63:85:96:e3:23:c3:a2:9f:06:4c:7e:12:94:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2369cf693efc102c937faca7ba09cccaec574948
Validity
Not Before: Oct 19 08:26:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b2df46e0085009896915a8cabdd3a95be514e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:9f:f4:88:d8:52:cb:e0:34:05:33:9c:a8:
95:12:8e:7a:3d:86:83:2c:1f:d1:03:2c:6e:fa:31:
38:2f:e7:81:d2:3d:6c:fe:84:e6:08:71:c1:d1:eb:
fe:b1:d1:1c:7a:ce:3c:5e:35:c3:ba:88:23:cc:fa:
41:52:cc:ea:94:a3:31:a2:c5:dd:1a:f0:6a:e5:a5:
89:b2:91:fd:7a:57:74:7c:74:43:e7:39:8e:a3:d3:
73:9e:29:73:f5:c8:46:e7:b6:ee:bf:e9:2c:fc:bd:
c5:bc:0f:37:aa:4f:ac:97:29:43:4e:f2:79:af:79:
9f:8b:38:7e:ab:38:75:65:57:ba:1d:bc:68:32:a5:
ad:31:82:0c:7f:eb:c5:e0:c3:d8:07:69:dc:3f:68:
8d:80:2c:4c:07:e8:69:21:f7:5e:04:3d:98:38:a5:
d5:c3:13:45:a6:2b:f7:a5:e9:58:d9:92:c5:06:22:
c1:63:7e:84:3f:32:9a:c0:b3:aa:ed:25:c3:e8:d4:
70:8d:73:e7:a4:52:9e:c3:5d:4c:35:9f:2e:5c:ae:
32:d8:ae:7e:84:47:8b:02:0a:8e:af:d3:cc:fc:e6:
43:f1:df:18:60:28:cb:fc:18:73:4b:31:72:d7:25:
78:01:91:33:44:63:db:9f:b7:05:3f:7f:86:5f:84:
55:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2D:F4:6E:00:85:00:98:96:91:5A:8C:AB:DD:3A:95:BE:51:4E:3E
X509v3 Authority Key Identifier:
keyid:23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/Ky30bgCFAJiWkVqMq906lb5RTj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:36c0::/29
Signature Algorithm: sha256WithRSAEncryption
b9:8b:fd:03:c4:08:ca:df:c2:3c:b5:37:cf:c4:b8:3b:a9:ae:
52:24:f0:df:14:ef:50:30:23:d8:34:9c:c9:26:3e:82:33:0b:
f5:b4:10:7e:ed:ec:de:60:44:8b:f0:30:a5:32:3b:c6:55:bf:
aa:e3:3c:c4:6a:07:80:cd:fe:ee:9e:ef:57:1a:41:c7:cc:f5:
ec:d8:ce:46:93:bd:83:b7:43:cd:25:fe:df:ba:ba:66:f0:1b:
1f:f2:a3:d4:75:ac:5e:fd:e8:43:82:bc:03:f5:2f:d3:d6:bf:
30:42:d2:20:76:e5:03:ca:31:47:31:d3:ec:c7:b4:ad:f5:e4:
16:9c:b3:66:84:98:05:1f:fd:18:62:b6:06:4c:05:9e:16:b5:
90:b7:f2:1e:c5:d3:a9:ce:e8:d2:d5:a4:55:2e:c9:18:7c:f8:
a4:3c:a6:c3:6c:25:fa:c0:53:e0:90:b1:f9:e3:c6:18:22:9d:
ec:51:49:bf:f9:d7:ea:54:6e:f1:a3:13:14:81:86:78:81:fb:
11:b5:ee:1a:ea:39:e9:37:78:3f:d1:43:cc:95:73:eb:d5:75:
94:96:bd:69:e7:2e:53:e9:a9:32:a6:e0:ff:bc:eb:1b:29:24:
f7:16:d2:d4:51:2f:fc:68:39:6e:9a:ff:30:10:fd:d7:83:c8:
e4:36:8e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:52:14 2026 by rpki-client