Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/ktR5aIXX8DCSaPyU0JqULEOdpDU.roa
File: ktR5aIXX8DCSaPyU0JqULEOdpDU.roa (raw, json)
Hash identifier: k4DH/NgsWxNDC6QhLfhwddBpbOTI6E+3vgE3oTuzzck=
Subject key identifier: 92:D4:79:68:85:D7:F0:30:92:68:FC:94:D0:9A:94:2C:43:9D:A4:35
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01A10B9992CCDD7127DFDBDF468D0858B070
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/ktR5aIXX8DCSaPyU0JqULEOdpDU.roa
Signing time: Mon 05 Oct 2026 10:26:16 +0000
ROA not before: Mon 05 Oct 2026 10:26:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218995
IP address blocks: 2a14:6782:200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:99:92:cc:dd:71:27:df:db:df:46:8d:08:58:b0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Oct 5 10:26:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92d4796885d7f0309268fc94d09a942c439da435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bf:0f:07:03:ae:49:e6:69:11:d6:02:e6:d5:
6f:ea:da:9c:29:c1:d3:6e:d6:b8:2d:d9:65:2f:f8:
d0:46:92:c5:05:4d:80:ab:1a:48:7b:e9:82:10:f4:
73:78:fe:c2:bd:14:3f:e2:0a:2c:ab:e6:e2:09:30:
2c:79:27:32:17:88:4e:ac:7c:02:53:67:1e:eb:a3:
a5:51:66:c9:df:0a:80:ac:3e:81:ca:d6:41:cc:03:
53:7c:65:fa:1c:dc:07:f7:50:67:6b:fd:fd:7d:d9:
ce:b4:a3:b5:24:50:1b:ea:5c:f5:c5:fd:5c:92:0b:
f8:9e:57:cf:fb:cc:03:48:74:17:ac:62:6a:5d:01:
9b:f0:b3:6e:b9:16:ca:7c:72:9f:70:69:f7:69:7f:
db:b4:94:fa:54:43:3e:bf:9e:04:91:7c:3b:67:fc:
7a:20:20:28:66:5e:7c:5a:42:05:29:0b:39:a9:a6:
e0:37:20:5a:a6:68:b6:51:8f:d2:81:ad:7d:cc:56:
41:a8:be:52:04:63:96:e1:26:26:9f:81:c3:6f:f0:
5d:1e:a9:80:73:d6:ed:d8:41:7c:fa:f6:05:2b:4b:
e9:e5:6f:18:d9:45:cb:01:9b:b1:e7:3b:0d:4b:72:
a3:b4:74:dd:e2:e2:98:91:3c:e9:d3:13:ed:b5:a8:
df:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D4:79:68:85:D7:F0:30:92:68:FC:94:D0:9A:94:2C:43:9D:A4:35
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/ktR5aIXX8DCSaPyU0JqULEOdpDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6782:200::/48
Signature Algorithm: sha256WithRSAEncryption
51:32:12:f6:92:64:67:a7:2f:02:7c:b8:83:44:d2:8d:09:34:
66:ac:44:8c:df:7b:4c:39:14:70:b7:e9:0c:e7:8a:a0:21:21:
02:cd:69:8b:3c:87:4b:8f:66:d0:ce:32:ff:ef:c9:8c:81:8b:
9f:4e:24:5b:b0:74:59:25:27:26:93:50:40:0d:fb:a1:03:8a:
0f:26:08:4c:0e:c7:d9:98:01:07:c9:c6:b0:3b:85:e6:1e:3b:
f2:5f:95:02:04:80:a0:8e:f1:c5:16:6d:48:01:c9:fa:73:4e:
00:27:3e:a5:2d:a7:28:e3:9b:52:be:0b:e2:04:de:a0:9e:5e:
62:a0:47:21:7a:24:63:44:57:a0:ac:39:02:8a:d3:67:90:df:
2c:82:83:80:ca:e5:72:34:3e:79:18:1f:fd:9d:b6:c2:a0:51:
11:03:94:dc:a6:d0:09:7c:b3:4f:57:fd:6d:de:86:6e:ba:4f:
ef:e9:07:93:67:aa:4d:16:3e:6b:43:49:84:28:a5:62:4a:84:
7c:59:41:5e:4f:b3:f9:42:40:e6:61:92:fe:11:a9:b6:1d:0b:
3f:5b:f3:9f:99:4f:1f:14:29:a6:cf:3f:a4:69:80:0e:dd:c2:
1b:f9:1f:c1:2d:7c:c9:3e:7e:f6:c4:bf:60:87:5f:50:7e:db:
74:82:ff:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:44:40 2026 by rpki-client