Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Kf0KJdb_D-kCzLhxBVzEwRVwj48.roa
File: Kf0KJdb_D-kCzLhxBVzEwRVwj48.roa (raw, json)
Hash identifier: lMLbyIXsO+jt1HI4aRMIKZYRrX3hl72ksvutA5OK75w=
Subject key identifier: 29:FD:0A:25:D6:FF:0F:E9:02:CC:B8:71:05:5C:C4:C1:15:70:8F:8F
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A11D45F6793A0FA68CB43F030DDBEA1012
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Kf0KJdb_D-kCzLhxBVzEwRVwj48.roa
Signing time: Thu 08 Oct 2026 20:48:06 +0000
ROA not before: Thu 08 Oct 2026 20:48:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210880
IP address blocks: 2a06:9801:15b2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 22:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:45:f6:79:3a:0f:a6:8c:b4:3f:03:0d:db:ea:10:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 8 20:48:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29fd0a25d6ff0fe902ccb871055cc4c115708f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b1:0c:5d:9f:d1:6c:ba:40:8e:98:9f:f8:b6:
92:00:fe:6a:5d:e2:03:00:e4:e7:47:d8:3d:a8:d4:
e7:04:ce:3e:f7:0a:f8:36:2e:58:d8:29:aa:e4:43:
73:a6:36:21:bf:5f:1d:e1:10:9e:09:9d:17:90:6c:
eb:77:a7:02:64:fe:1c:d6:b3:84:de:ac:ac:4d:d1:
ef:0d:f7:19:70:22:1d:27:52:0f:71:72:ee:e6:f5:
d6:dc:ba:dd:1a:b5:69:ae:09:ff:aa:5a:b2:fa:6a:
f3:9e:8c:2b:12:f0:24:0e:84:70:e6:b7:7b:65:bf:
92:eb:5b:ac:9c:88:66:21:c6:44:32:d2:ae:86:e7:
e6:69:c9:99:a4:55:06:8e:de:c9:d1:8d:98:9a:61:
ec:1f:80:b5:fd:0e:e3:02:d1:3f:ca:fc:db:a6:52:
a3:57:7f:cb:71:9a:10:0c:ca:35:dd:aa:a3:87:79:
69:83:d5:80:06:ea:70:ae:6a:1b:61:6d:6d:c6:20:
d3:6b:dd:e3:0c:c2:b7:93:9b:cc:9a:1e:87:ea:c7:
bd:12:aa:2b:71:64:b1:00:7f:3b:e8:1d:4b:6f:d8:
06:dc:9e:ad:ed:52:f9:37:d3:8e:3f:53:9e:f3:e0:
5d:4b:17:f8:05:29:74:71:16:24:a9:8b:a9:3f:68:
d0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FD:0A:25:D6:FF:0F:E9:02:CC:B8:71:05:5C:C4:C1:15:70:8F:8F
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Kf0KJdb_D-kCzLhxBVzEwRVwj48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:15b2::/48
Signature Algorithm: sha256WithRSAEncryption
1b:cb:bb:79:88:b7:49:a0:c9:cf:5c:cc:23:23:6d:6b:e9:28:
c3:2b:db:5b:87:a3:73:cc:c8:e1:a4:89:47:59:b9:ae:62:1d:
82:fd:34:3a:c5:d4:9e:bf:c8:75:b0:d0:ee:7f:f1:dd:28:26:
93:15:1c:0b:52:6e:51:61:2d:16:e1:1b:bb:66:79:44:19:62:
4c:c7:5e:72:49:86:dc:8e:48:88:1b:ec:b8:06:57:31:bf:1d:
cb:f8:64:0c:41:39:d4:03:3f:ec:1f:c4:2d:d3:0d:79:cd:95:
e7:0b:60:ef:d8:6f:5b:9b:31:c7:c6:f9:1e:d5:73:ab:3a:e5:
80:01:56:c8:18:38:8e:af:91:e4:10:b2:1d:e2:31:6a:ef:df:
2b:a7:28:ba:55:81:a7:cd:4b:0b:f4:e4:85:29:dc:d5:a7:77:
aa:03:24:7d:99:00:14:77:ad:ae:76:a2:9f:f3:58:98:5c:de:
eb:80:56:b6:36:c2:d2:32:bc:95:9c:61:25:07:7e:a8:a8:93:
c6:0b:8b:53:74:4d:26:c2:f1:04:4b:71:60:b7:83:a5:65:b6:
df:54:91:9c:59:54:20:01:c6:70:0e:e2:19:c5:ef:82:1b:34:
3d:f3:8a:9d:31:d2:98:b5:7b:15:a7:9a:56:2a:83:10:8b:10:
6b:f7:85:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:18:18 2026 by rpki-client