Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/AQKZI-sxza3OKrFKgUkkp1FQl-M.roa
File: AQKZI-sxza3OKrFKgUkkp1FQl-M.roa (raw, json)
Hash identifier: 7P0TExlCfUamPOtkxEtd+w4GCyMJLUtGdDlX1lowjsM=
Subject key identifier: 01:02:99:23:EB:31:CD:AD:CE:2A:B1:4A:81:49:24:A7:51:50:97:E3
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019F9618C9C6145EAEB5A7AF546DED6A769F
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/AQKZI-sxza3OKrFKgUkkp1FQl-M.roa
Signing time: Fri 24 Jul 2026 21:47:14 +0000
ROA not before: Fri 24 Jul 2026 21:47:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51783
IP address blocks: 2a11:77c5::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:18:c9:c6:14:5e:ae:b5:a7:af:54:6d:ed:6a:76:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 24 21:47:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01029923eb31cdadce2ab14a814924a7515097e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:fb:dd:b5:3c:33:df:91:47:79:02:4a:32:
29:a5:80:73:3c:2b:7e:8e:31:0d:dc:bc:d5:43:bf:
c5:e2:47:7b:39:21:a2:80:54:56:4f:74:e8:15:19:
ee:91:5a:8e:7e:68:51:10:8b:70:19:fd:af:64:c7:
3a:2d:be:0d:75:00:8f:df:83:63:46:10:29:97:18:
f7:27:43:f1:05:38:33:13:a5:eb:14:c9:02:7f:26:
8a:ba:6b:aa:a8:48:13:a8:a3:a7:85:38:ea:ba:73:
c6:42:43:3f:52:41:50:9a:f7:37:b5:00:18:93:22:
0d:90:f8:32:fa:cf:d3:a3:e5:ef:8a:49:10:c0:8c:
90:96:c2:e1:08:99:b4:30:02:fa:c4:22:ae:17:ed:
22:5a:0c:ec:1b:df:07:47:89:c1:3f:17:ee:bd:a6:
53:c6:f6:8b:d2:4a:8c:96:ce:c8:54:26:96:b5:f4:
43:41:91:7a:f8:36:df:85:5e:1f:bb:eb:c3:1e:f3:
fe:b6:06:07:e2:53:0f:aa:ca:e1:b7:a0:28:92:d6:
a5:65:7d:5e:5c:0d:07:f8:35:21:fa:d1:7a:7a:55:
73:72:5d:1f:f6:67:b5:a7:20:b3:bd:03:54:70:0d:
86:d1:a6:ae:a7:bf:7a:61:60:8e:b6:b7:fc:38:ed:
5c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:02:99:23:EB:31:CD:AD:CE:2A:B1:4A:81:49:24:A7:51:50:97:E3
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/AQKZI-sxza3OKrFKgUkkp1FQl-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:77c5::/32
Signature Algorithm: sha256WithRSAEncryption
8c:14:c5:57:b7:6c:5f:76:cd:5d:eb:1f:80:80:4a:5d:af:ab:
a1:3d:15:38:aa:5e:cb:d4:3b:b2:6c:2c:4b:82:5c:af:f1:bf:
38:b9:6a:a3:a5:f0:8e:4f:11:04:8e:1f:c0:21:b7:d2:68:72:
c7:33:c4:7d:10:af:ab:1a:42:3d:91:34:8f:3f:01:58:84:9e:
7a:32:51:af:75:8e:ae:07:1b:19:ca:dc:aa:9c:d5:84:f4:db:
2d:6e:89:19:fe:d8:02:3a:0a:fc:80:24:d4:dd:53:56:24:ae:
03:76:e9:a2:56:ff:5a:28:d6:48:23:02:c3:5f:f6:2f:8a:c0:
fc:44:65:a4:26:27:03:89:8f:d7:54:08:36:72:5e:a1:22:fa:
a7:f9:df:33:a1:54:00:4a:7f:94:80:9c:80:a3:77:0b:7e:c5:
29:0d:1d:65:a2:57:b5:45:7c:e0:00:50:98:a0:b6:a1:94:e3:
79:1a:32:9f:28:5a:cc:1f:a3:48:92:8d:25:66:76:09:8c:3c:
c8:87:6b:0f:0a:26:a7:0b:2b:d8:08:20:21:38:94:6d:82:db:
d8:81:f4:f3:be:60:ae:bc:cb:1e:25:96:ff:ea:69:a1:bd:1e:
12:4f:3b:44:3e:ab:74:d7:c0:98:9a:de:6a:55:c4:6e:77:f9:
f6:1e:21:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:05:51 2026 by rpki-client