Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/KPp_e_CsiDuaH8RwbBpE6ljcPrc.roa
File: KPp_e_CsiDuaH8RwbBpE6ljcPrc.roa (raw, json)
Hash identifier: HHA6QR+b3qbM+xI+xjKcb096ouqA8Erd4pslEVw6pcs=
Subject key identifier: 28:FA:7F:7B:F0:AC:88:3B:9A:1F:C4:70:6C:1A:44:EA:58:DC:3E:B7
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368C56C8305D8BCFC31FC3EDAF8342B
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/KPp_e_CsiDuaH8RwbBpE6ljcPrc.roa
Signing time: Thu 02 Jul 2026 15:18:16 +0000
ROA not before: Thu 02 Jul 2026 15:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62410
IP address blocks: 2a0e:d604::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c5:6c:83:05:d8:bc:fc:31:fc:3e:da:f8:34:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28fa7f7bf0ac883b9a1fc4706c1a44ea58dc3eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:e0:1d:70:b6:24:2f:1f:02:4c:60:bb:c4:
35:0f:23:44:12:a3:59:57:8c:b0:0b:61:9f:ce:55:
ed:69:8a:fd:49:58:6d:84:34:1a:2f:ec:e7:79:b0:
84:8a:4f:c4:3f:99:8b:a8:81:e5:1e:c5:32:60:9f:
5c:30:e7:a7:f0:a9:60:2d:5c:60:ff:6c:ff:f7:50:
84:67:4d:2b:93:03:26:6f:8e:1a:bd:79:2a:31:a6:
3d:07:75:ab:d0:d6:3b:4a:08:65:ff:23:4d:16:42:
65:bf:e9:de:e5:78:93:63:94:8f:e8:43:28:7c:08:
6f:a9:17:91:4b:bb:02:94:fb:16:ff:36:b0:80:38:
d1:0b:93:c4:ff:7b:00:21:a1:53:7b:ae:f2:1b:34:
2a:31:6f:2f:91:ab:b4:ee:b6:55:7f:f7:39:45:1e:
8a:81:0e:8c:6b:f6:6d:c4:e0:33:b0:09:79:2e:d8:
1c:bc:61:9b:be:5c:93:ab:3e:96:65:95:96:37:69:
7c:46:b8:74:85:d7:45:32:73:26:c0:99:44:5f:b9:
25:1e:d5:05:5f:6c:04:fd:35:54:76:88:cf:c4:48:
3a:97:ec:f2:b7:8b:26:ad:05:59:cc:fc:f1:07:02:
da:ac:b7:80:b1:dd:e4:55:d0:74:6c:c1:6d:25:d5:
dd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FA:7F:7B:F0:AC:88:3B:9A:1F:C4:70:6C:1A:44:EA:58:DC:3E:B7
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/KPp_e_CsiDuaH8RwbBpE6ljcPrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d604::/48
Signature Algorithm: sha256WithRSAEncryption
64:a0:ab:f6:8d:d6:dc:01:a1:bd:4d:5a:dc:57:ed:f1:08:15:
8a:73:b5:83:7f:05:af:d6:76:88:41:07:7c:40:95:d6:8c:48:
c0:83:f8:37:09:03:79:a3:dc:09:bc:be:d7:a6:db:a6:7b:ee:
a2:e2:a2:ec:90:d9:0b:e0:e9:8a:f9:e5:fa:16:f4:08:ee:e2:
12:5f:54:74:14:9a:02:8f:df:d6:31:e8:e9:89:7b:ba:6c:06:
28:56:8f:68:0c:8f:38:69:43:8a:75:49:6a:48:ac:93:ca:03:
2c:de:0f:dc:f9:58:09:38:d0:d9:85:81:78:9a:08:82:71:67:
27:6d:52:39:61:35:32:de:cc:de:ed:95:dd:19:fa:49:92:62:
d5:8b:f1:ec:d2:03:60:43:ea:44:aa:1e:0e:b6:4a:43:d0:bb:
da:a0:75:cb:ff:07:a1:d1:eb:b3:90:50:67:39:58:70:ae:71:
2a:05:2e:a6:19:a7:a9:d8:02:00:45:a1:23:1b:a8:7a:e2:fe:
7c:56:64:55:bf:16:b2:78:06:3d:7c:f1:55:b6:45:ad:dc:76:
ca:27:0f:b9:c7:01:87:8d:cf:e3:7a:79:80:72:3d:98:a5:26:
02:26:58:89:4f:cf:69:26:f3:8d:66:34:e8:9f:a3:e8:eb:97:
74:f4:63:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:38 2026 by rpki-client