Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/kkCwO5RvNT-6NZSBU5TSQmyBDvk.roa
File: kkCwO5RvNT-6NZSBU5TSQmyBDvk.roa (raw, json)
Hash identifier: U7PNcCefC3hob4xDsEZDi+4kJe01WLbR7TfRShuMBzI=
Subject key identifier: 92:40:B0:3B:94:6F:35:3F:BA:35:94:81:53:94:D2:42:6C:81:0E:F9
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019FB8E75498ADD8F2A55A532EF64E380ACF
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/kkCwO5RvNT-6NZSBU5TSQmyBDvk.roa
Signing time: Fri 31 Jul 2026 15:59:55 +0000
ROA not before: Fri 31 Jul 2026 15:59:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214693
IP address blocks: 2a06:9801:f4c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b8:e7:54:98:ad:d8:f2:a5:5a:53:2e:f6:4e:38:0a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 31 15:59:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9240b03b946f353fba3594815394d2426c810ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:fc:3e:04:5f:f1:ab:e8:05:7b:3e:b2:01:
7d:7b:87:15:20:cb:32:e6:d2:63:82:1c:4e:25:4f:
01:40:50:e6:3b:7c:5f:63:78:3c:54:1e:7a:87:ce:
f0:21:d1:39:b5:ae:59:9c:ed:8e:01:3a:4a:46:33:
4d:3c:a7:e8:5e:84:7b:9b:7e:b5:b5:c8:e9:4d:68:
6b:96:e4:7b:b3:90:44:c4:44:5e:77:ac:73:34:3c:
2d:31:e4:b0:06:b4:42:1f:2d:8d:ec:90:9e:37:b5:
c8:ef:aa:6b:08:68:b1:3d:5d:61:21:e0:24:96:16:
cf:64:70:71:20:7f:11:fa:6f:4b:71:63:6d:63:d3:
1e:32:be:06:dc:9b:1b:73:95:e3:3d:f3:9c:2b:a2:
2e:9f:14:12:13:d5:78:aa:ca:c4:0f:40:80:f5:36:
3b:bd:c4:ab:07:ea:22:fd:27:bf:88:12:1a:ff:97:
7f:9c:d9:4b:4a:10:60:ea:39:23:b2:04:ca:1b:d4:
13:b4:9a:e3:fa:28:8c:53:b8:0c:ce:cb:17:21:b5:
36:3c:61:34:5e:31:50:a3:74:6e:36:3a:99:6f:8b:
10:e9:d2:17:d3:9e:31:97:5c:3c:05:6c:05:90:b6:
7d:3d:68:18:30:bd:1b:aa:6d:67:ec:3d:fe:ec:ca:
04:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:40:B0:3B:94:6F:35:3F:BA:35:94:81:53:94:D2:42:6C:81:0E:F9
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/kkCwO5RvNT-6NZSBU5TSQmyBDvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f4c::/48
Signature Algorithm: sha256WithRSAEncryption
6d:5d:10:cd:5d:6a:ac:a7:6f:43:8f:82:c7:81:e4:ff:49:2b:
4c:14:33:2f:35:79:ca:4d:e5:d4:da:b9:a2:a8:d9:80:e4:3f:
db:d7:4f:fa:16:04:38:e0:6a:a4:0c:6f:ca:a4:fd:14:e8:ae:
bf:78:9f:32:5c:fd:78:ce:04:88:4f:70:7e:a6:9d:40:90:19:
d0:89:ee:f7:b7:ef:3c:23:f8:85:01:d9:3c:33:26:63:c3:c8:
f2:bd:a6:c2:9e:aa:46:40:62:a1:36:2b:b1:a2:6d:f0:f4:e8:
5a:c5:f4:fe:e4:59:d9:97:1d:67:f7:4f:6d:b6:a9:28:75:1c:
36:0e:d1:7f:a3:dc:f5:80:72:c6:94:5b:55:f3:98:7a:1d:0f:
fc:0e:56:76:f4:52:72:3f:86:b2:dd:32:31:85:7b:dd:5a:26:
0e:58:2a:c5:c1:51:c8:c0:de:48:fd:8b:cf:ed:37:85:e9:1d:
9f:10:96:2e:4d:b9:b5:15:54:88:73:70:c6:8c:89:11:18:78:
ac:69:0e:54:21:fb:4f:05:34:db:a9:69:8a:0c:39:e3:7c:43:
f5:2c:8a:07:08:2d:59:30:b9:63:da:48:6d:3b:55:69:61:ba:
8b:ae:63:8e:ad:36:b6:f6:33:47:b1:9c:c6:18:17:99:91:60:
46:77:b9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 17:13:32 2026 by rpki-client