Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/KIMgJNKTAJW5QSYtt2bN2pU8Nik.roa
File: KIMgJNKTAJW5QSYtt2bN2pU8Nik.roa (raw, json)
Hash identifier: yOl7fjVEC5SvnVSg9lFuHxQnDksXU12CbmrZRQ/Ul3o=
Subject key identifier: 28:83:20:24:D2:93:00:95:B9:41:26:2D:B7:66:CD:DA:95:3C:36:29
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F045351E3CC45AE096546FDE16623CF77
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/KIMgJNKTAJW5QSYtt2bN2pU8Nik.roa
Signing time: Fri 26 Jun 2026 14:26:36 +0000
ROA not before: Fri 26 Jun 2026 14:26:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200084
IP address blocks: 2a06:9801:cc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:04:53:51:e3:cc:45:ae:09:65:46:fd:e1:66:23:cf:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jun 26 14:26:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28832024d2930095b941262db766cdda953c3629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ec:db:81:c8:8d:ba:0a:43:b1:8a:5d:19:af:
80:9e:fd:04:0a:86:5a:0e:83:36:3f:64:f8:a6:c6:
63:14:b7:70:c9:03:0d:14:8c:b0:c4:0d:5d:28:49:
21:19:fe:54:26:21:c1:45:f3:e1:d2:4a:f4:a1:8b:
8c:5e:01:36:50:56:d4:d2:43:f1:ca:d9:24:26:54:
7b:22:a4:21:de:e2:6a:c6:a7:be:53:ac:00:0d:80:
5e:47:1a:8e:fb:a9:c7:a4:43:7f:4d:29:f4:ef:e3:
5e:18:1e:1d:f3:67:7f:1f:97:e6:62:f2:9b:d4:1c:
0e:0d:a3:5e:15:fe:53:27:94:fa:65:f4:17:22:2b:
07:aa:a5:4c:5d:0a:cc:1c:09:20:40:05:9d:f4:94:
d7:68:a2:a4:18:63:df:26:60:e5:c2:9e:bf:04:c1:
38:9e:04:64:53:8f:cf:0a:e4:23:90:2f:38:e2:66:
64:57:15:90:82:0f:23:fe:3c:10:94:bc:ee:6a:aa:
2e:f1:71:75:27:ef:0e:93:b3:9f:20:8d:98:01:d4:
c2:5a:6c:f9:8b:da:29:e0:63:4e:7c:6c:b2:6b:6c:
3c:3c:a4:c4:c2:0a:97:ce:80:e3:96:c0:a6:c2:fe:
91:1e:c4:b8:12:08:aa:72:8f:71:07:4e:a0:58:17:
2b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:83:20:24:D2:93:00:95:B9:41:26:2D:B7:66:CD:DA:95:3C:36:29
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/KIMgJNKTAJW5QSYtt2bN2pU8Nik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:cc::/48
Signature Algorithm: sha256WithRSAEncryption
83:57:33:20:2c:b0:2d:f1:4d:ba:68:89:de:05:92:cd:34:99:
72:ad:34:a3:e4:0c:bd:e0:23:cd:97:de:ad:46:71:78:12:5b:
0e:61:59:b7:a5:ec:b5:ab:27:02:a8:73:c2:34:2e:93:30:50:
b9:1a:2f:cb:b9:1a:74:bf:ed:9e:04:80:68:48:14:4b:58:15:
45:9c:f4:d2:96:2e:00:a5:ab:5e:1f:a0:1b:4f:b2:e2:0f:32:
b5:db:cc:c8:e9:79:70:e0:a7:e4:1d:ff:f3:b3:a7:14:3e:d8:
45:25:23:e9:d8:e1:d2:87:10:3a:b4:cc:06:c8:aa:5a:38:83:
51:f4:97:7f:0b:c8:fd:8a:d2:8a:3f:1a:29:b8:3e:bc:eb:7f:
a6:67:e8:7a:84:28:f3:32:22:13:de:30:04:71:b7:65:c0:71:
5c:29:36:21:5a:d4:3e:48:e0:d1:0d:fa:55:04:f6:ee:e6:d5:
9b:f1:05:10:00:76:f7:48:e6:a2:59:13:b3:ec:12:05:e6:06:
67:97:68:a7:47:b9:8b:83:c6:30:f2:d9:52:33:5a:58:85:27:
53:b2:7c:34:1f:17:44:a5:d9:eb:d9:07:5b:ec:98:4b:c6:bf:
9d:96:cf:86:1a:af:e9:39:c3:32:a0:be:d6:0f:65:88:0f:a0:
7f:b4:6a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 21:31:15 2026 by rpki-client