Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/kWjbG5o_Db94CdRN3NWSKKUVjXw.roa
File: kWjbG5o_Db94CdRN3NWSKKUVjXw.roa (raw, json)
Hash identifier: hKOz5xHim00nQqN9nHTkJJK9vZ0QKHkeOVauAtR5gzE=
Subject key identifier: 91:68:DB:1B:9A:3F:0D:BF:78:09:D4:4D:DC:D5:92:28:A5:15:8D:7C
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 01A08AF464BCF40086A57641C45D43BDE678
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/kWjbG5o_Db94CdRN3NWSKKUVjXw.roa
Signing time: Thu 10 Sep 2026 10:54:27 +0000
ROA not before: Thu 10 Sep 2026 10:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8881
IP address blocks: 2a02:11f3:101::/48 maxlen: 48
2a02:11f8:170::/48 maxlen: 48
2a02:11f8:171::/48 maxlen: 48
2a02:11f8:172::/48 maxlen: 48
2a02:11f8:173::/48 maxlen: 48
2a02:11f8:174::/48 maxlen: 48
2a02:11f8:175::/48 maxlen: 48
2a02:11f8:176::/48 maxlen: 48
2a02:11f8:177::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:f4:64:bc:f4:00:86:a5:76:41:c4:5d:43:bd:e6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Sep 10 10:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9168db1b9a3f0dbf7809d44ddcd59228a5158d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:63:d4:08:af:72:9b:06:ab:11:ad:9c:33:a3:
01:d9:77:35:66:d4:89:e4:f8:99:d7:d3:35:4a:da:
bf:19:e5:fa:5b:22:71:9e:10:b2:57:ab:ea:39:0e:
6b:ff:7b:79:7d:19:3d:05:f2:d0:02:43:94:31:18:
ac:25:e1:16:f0:bc:51:ee:35:5a:19:51:d7:da:8e:
d2:84:a1:aa:b2:8a:cb:90:98:8a:8a:b5:67:07:30:
fd:de:63:82:f5:68:02:bf:99:98:63:5b:4c:4e:cf:
d9:82:ae:97:0f:56:f2:40:99:df:0d:dd:a0:f0:d7:
d7:eb:0a:ef:8f:f1:29:8e:a6:86:57:83:bb:b8:84:
36:34:2d:d6:9b:08:1d:c0:d6:ee:f1:28:9e:b4:8c:
ae:dc:a1:48:f6:33:23:44:c9:42:d2:42:45:35:c4:
49:7e:47:0c:d3:bf:af:e5:a3:b3:86:3f:15:71:e8:
75:9d:25:f5:d1:4e:ca:ab:68:80:b3:0c:51:5e:c7:
3f:dc:2a:b6:f1:41:aa:e4:1a:e8:0f:40:6b:8f:ec:
ee:11:38:03:52:3f:a6:d7:02:bb:e2:6b:96:63:aa:
83:51:cf:a3:f9:54:19:3d:90:cc:5b:25:b5:e5:2b:
9e:05:e5:c7:67:63:44:7c:ac:b3:50:c7:01:fa:f8:
be:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:68:DB:1B:9A:3F:0D:BF:78:09:D4:4D:DC:D5:92:28:A5:15:8D:7C
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/kWjbG5o_Db94CdRN3NWSKKUVjXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:11f3:101::/48
2a02:11f8:170::/45
Signature Algorithm: sha256WithRSAEncryption
d9:1d:51:05:91:5f:f0:d2:cd:87:9a:28:a7:b0:1a:b6:27:85:
c3:30:ad:84:2c:34:5e:f8:bb:51:5b:a6:80:1e:f5:d9:96:4b:
a7:98:1d:69:55:d4:1e:18:86:24:99:6f:59:ff:9b:90:aa:df:
c1:02:42:eb:c4:ac:59:a5:8f:1b:42:5d:f5:d2:d5:9c:a0:89:
a8:5d:2f:5a:f3:48:98:33:66:04:87:20:d6:bb:2e:1f:72:26:
38:6f:54:ac:ef:31:9c:4b:30:aa:b5:91:19:26:a4:d5:af:90:
a0:ba:37:81:f7:2a:6c:eb:70:a3:4c:cb:83:5d:75:f0:c0:8e:
47:66:80:cf:d9:98:9e:f7:17:74:5a:7d:87:ed:c4:ed:a5:8d:
13:47:d2:43:fa:b2:60:20:eb:92:5c:ff:d0:87:92:16:e3:2f:
16:55:9f:cd:85:cd:7c:fe:d6:00:c8:0b:3f:41:8c:cf:1a:f3:
ea:80:f7:59:fb:f7:85:8f:99:43:80:bb:35:c5:1f:16:04:66:
e0:0b:12:f7:c7:15:54:2d:72:44:1a:c8:57:c8:25:b7:83:78:
24:6b:e2:e9:cf:1f:2a:8a:84:3b:75:89:7c:89:d6:ab:d5:7b:
de:26:bc:25:49:26:81:06:2a:b8:ef:f7:a9:31:87:40:4f:db:
11:52:67:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 14:36:13 2026 by rpki-client