Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/kuzxM9bfCkdl7Sdt_re7xVUoleE.roa
File: kuzxM9bfCkdl7Sdt_re7xVUoleE.roa (raw, json)
Hash identifier: ICXWytiUL0lVIICL6qAqX8iARLCwUbgeK1ilLcEIJDU=
Subject key identifier: 92:EC:F1:33:D6:DF:0A:47:65:ED:27:6D:FE:B7:BB:C5:55:28:95:E1
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0FD517BF3D19D1A1D4888F3209A375D98
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/kuzxM9bfCkdl7Sdt_re7xVUoleE.roa
Signing time: Fri 02 Oct 2026 15:52:50 +0000
ROA not before: Fri 02 Oct 2026 15:52:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205150
IP address blocks: 2a06:9801:1550::/44 maxlen: 48
2a06:9801:15a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:51:7b:f3:d1:9d:1a:1d:48:88:f3:20:9a:37:5d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 2 15:52:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92ecf133d6df0a4765ed276dfeb7bbc5552895e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:49:65:ca:76:e1:f2:b4:f0:bd:69:75:a6:97:
4e:1c:c6:24:9c:de:b1:cc:33:fd:e8:6d:86:ab:05:
71:78:e6:69:20:db:32:77:6b:60:59:2e:95:65:4f:
57:d7:9d:98:71:15:6f:92:76:f3:71:c9:dc:0d:a7:
68:a8:e9:fe:4c:13:0d:8f:c3:cb:99:0c:84:8c:71:
8c:a8:af:cc:b7:bd:58:e9:6d:d5:d9:38:51:57:bb:
57:7a:67:fa:08:52:40:67:ac:29:33:24:16:c5:e5:
9d:37:78:20:5e:5b:2a:e9:6b:de:00:c2:26:47:76:
3c:09:cc:5e:75:72:e1:9e:fb:f7:6d:5f:c2:10:ab:
a4:52:3d:c2:ef:62:74:75:84:3d:d2:ab:2f:93:97:
8d:c9:4d:bf:cd:99:e0:57:42:83:5c:9f:2d:82:68:
f1:65:9e:79:ad:2b:95:93:fa:b8:e4:95:14:13:f3:
2d:65:9e:46:3b:07:6d:d7:5f:69:58:2b:f3:40:d1:
c4:53:5a:a9:66:fb:54:13:5d:63:bb:eb:93:24:dc:
de:26:ca:cf:19:b8:e9:ed:56:97:85:e3:7e:4c:37:
7b:38:0f:96:c2:be:74:c3:d4:da:2e:b0:49:16:d2:
ca:af:16:8b:83:85:b1:d4:28:eb:3d:d7:1a:66:2b:
48:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EC:F1:33:D6:DF:0A:47:65:ED:27:6D:FE:B7:BB:C5:55:28:95:E1
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/kuzxM9bfCkdl7Sdt_re7xVUoleE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1550::/44
2a06:9801:15a0::/44
Signature Algorithm: sha256WithRSAEncryption
78:f5:8a:ff:37:c0:6d:f5:41:5c:47:45:73:18:27:37:e8:9c:
4d:01:b5:f5:49:ac:44:0b:31:cd:df:78:9e:94:59:6f:68:29:
49:09:a7:f0:6c:6e:fc:17:85:11:59:46:0c:e2:63:31:09:d5:
c2:27:c7:a8:2e:02:82:da:23:3f:24:60:aa:27:e9:33:db:8a:
c9:58:d5:41:95:36:ea:b3:dc:23:32:72:cf:f9:45:59:5d:d5:
8d:f3:62:4f:b0:d9:c6:bd:23:6e:31:bc:de:92:e6:d4:91:5e:
e3:71:93:12:a6:8d:40:0b:2c:d6:a2:26:4a:02:54:8c:f5:13:
90:2c:c7:89:e0:19:e0:06:cd:ff:97:4b:2c:a3:f6:5a:2d:77:
c7:af:e2:c1:e2:08:e2:08:92:f9:11:10:3d:fa:be:64:ca:70:
c2:85:67:de:9d:2c:b1:f3:1b:bb:10:13:c6:9c:22:2c:2b:71:
2e:ce:ac:90:3e:0a:ba:38:74:1e:53:44:d3:aa:b5:92:20:3f:
28:05:56:e6:54:4d:88:f8:2a:28:2b:b8:3e:28:c9:ee:33:cb:
97:73:fc:fe:06:92:27:b7:df:a7:52:eb:04:26:f0:01:bf:d6:
42:35:37:a3:dd:c5:ff:42:d7:87:b5:43:58:d8:b9:f3:a3:8a:
2b:fc:ad:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:40:59 2026 by rpki-client