Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/KnUZPperipabjgbkkBIydxbps-U.roa
File: KnUZPperipabjgbkkBIydxbps-U.roa (raw, json)
Hash identifier: 3L5j7iZKawUeg5OFRPV5pveqRQKR6RnBP/u+k6HX71I=
Subject key identifier: 2A:75:19:3E:97:AB:8A:96:9B:8E:06:E4:90:12:32:77:16:E9:B3:E5
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A16AB36D6871F769951FC457A1A6F41548
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/KnUZPperipabjgbkkBIydxbps-U.roa
Signing time: Fri 23 Oct 2026 21:38:26 +0000
ROA not before: Fri 23 Oct 2026 21:38:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218297
IP address blocks: 2a06:9801:214::/48 maxlen: 48
2a06:9801:15be::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:b3:6d:68:71:f7:69:95:1f:c4:57:a1:a6:f4:15:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 23 21:38:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a75193e97ab8a969b8e06e49012327716e9b3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:90:31:bd:52:af:e5:4f:86:ee:85:e8:88:
13:7f:f5:64:2b:37:a9:c3:ce:0e:5f:1c:80:8d:2c:
e6:0e:97:6f:ef:f5:c6:cb:41:1e:bb:10:56:ce:0e:
fb:33:e8:21:eb:03:80:73:e6:e4:0c:10:78:9c:4b:
be:c2:5a:60:fe:48:60:a3:9b:c2:3d:13:93:90:e1:
09:1c:c7:70:4e:c8:02:7c:cd:85:80:2f:c4:0f:c7:
3c:10:9c:fd:76:d7:02:a0:89:a1:1f:84:65:db:7e:
5a:b8:4e:e1:ac:7b:a7:b4:f8:2b:52:ad:4c:de:40:
b5:0e:cc:a1:6a:70:29:5a:9c:97:34:7f:62:d8:40:
6f:e2:a2:ef:78:8a:f7:22:36:60:c9:77:2b:2e:d8:
f5:34:a4:ac:67:c9:c7:1b:a9:d9:33:4a:64:a4:b0:
cc:b3:39:6c:08:b5:20:6d:1c:99:6c:96:58:7d:50:
0d:15:29:d6:3c:01:98:ac:1d:96:cf:e3:e2:19:34:
0f:fc:a2:c6:d6:c9:f0:ef:6b:83:ed:3c:ee:b0:e1:
2a:21:6e:34:c6:78:5c:0e:ec:33:75:a6:64:08:f1:
90:74:b0:b5:2f:07:3e:5c:f7:12:e6:0c:3c:79:c7:
19:24:fc:48:b7:26:52:27:bb:90:89:1f:bb:4a:a7:
68:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:75:19:3E:97:AB:8A:96:9B:8E:06:E4:90:12:32:77:16:E9:B3:E5
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/KnUZPperipabjgbkkBIydxbps-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:214::/48
2a06:9801:15be::/48
Signature Algorithm: sha256WithRSAEncryption
be:dc:69:ee:80:22:25:cc:42:14:35:64:81:80:48:ec:bf:e6:
3a:00:5c:a0:89:b2:a1:06:f5:9c:ed:a1:c3:e1:44:b6:c9:dd:
b0:fb:0a:29:01:3e:af:3b:24:7a:e9:90:81:2a:4c:c1:f9:7a:
46:81:f0:e0:30:f3:86:d9:d2:ac:e4:83:26:d3:55:26:4f:53:
c1:0a:12:3d:12:b7:83:73:9d:57:d4:ca:49:88:f4:da:68:ec:
4b:f9:67:5e:e5:8a:aa:6d:12:f7:ad:b9:ad:44:24:e9:b3:47:
04:e6:33:80:55:90:ef:79:5e:f5:66:40:fc:db:43:5f:e2:48:
e8:97:f2:4c:50:db:54:0a:1d:cc:58:ba:17:ec:9c:03:f9:85:
e6:50:9d:19:ec:4c:af:a5:fe:93:59:46:f1:6a:f7:7e:df:0f:
4f:d7:ee:97:ee:b5:b9:98:eb:af:1d:bd:6c:12:a1:11:aa:a5:
6e:8b:c6:fe:34:a7:5f:66:81:bd:df:7e:fe:39:fe:b1:d8:5d:
36:5f:29:83:7f:48:81:2a:ff:88:4e:77:7d:93:83:9b:6f:b4:
d4:93:6e:90:76:43:74:66:a9:5d:51:92:db:61:5a:3e:c0:7d:
60:25:06:fa:de:da:8f:23:f3:d1:30:73:80:6c:da:21:6c:39:
bf:e8:8e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 15:28:33 2026 by rpki-client