Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/KUryY42m2fnkmP-WzOJ-QVftr9g.roa
File: KUryY42m2fnkmP-WzOJ-QVftr9g.roa (raw, json)
Hash identifier: Gx9GfjB1RZqYcjhruz7ETAwNtunYLpuohd0SXD4QObk=
Subject key identifier: 29:4A:F2:63:8D:A6:D9:F9:E4:98:FF:96:CC:E2:7E:41:57:ED:AF:D8
Certificate issuer: /CN=522a22bccd3de8265afd55f9830ffc01c83af726
Certificate serial: 019E2B73E737A61EA41722DBD8D09420EF3D
Authority key identifier: 52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/KUryY42m2fnkmP-WzOJ-QVftr9g.roa
Signing time: Fri 15 May 2026 11:44:36 +0000
ROA not before: Fri 15 May 2026 11:44:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213618
IP address blocks: 2a05:64c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:73:e7:37:a6:1e:a4:17:22:db:d8:d0:94:20:ef:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522a22bccd3de8265afd55f9830ffc01c83af726
Validity
Not Before: May 15 11:44:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=294af2638da6d9f9e498ff96cce27e4157edafd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:be:e8:8d:70:d0:28:41:27:9c:71:59:d0:
33:8e:45:89:16:2e:b4:bc:99:0f:8d:68:1d:18:a1:
33:1d:bb:c4:1f:69:a2:76:dd:05:31:3f:da:97:57:
1b:66:2b:9c:fe:d7:82:5a:f2:67:51:56:41:0d:21:
d7:56:31:54:65:31:e1:31:54:66:18:16:be:61:7a:
23:75:55:8e:60:6c:6a:15:b4:2b:d4:36:79:54:52:
4b:52:bf:cd:a1:6f:29:da:26:0e:6b:c0:d8:a7:b5:
bc:d9:8a:88:78:2f:44:30:35:9a:ec:fb:cf:a8:52:
3d:ab:ef:68:66:a1:bf:48:45:12:76:6c:d1:e6:df:
d4:a2:9e:94:24:96:28:fd:80:cd:38:ea:39:2a:14:
dd:dc:4a:b6:f5:ea:6c:ed:e7:0b:b2:8e:d7:8c:c3:
06:5e:97:7e:21:02:0b:36:4e:8a:95:a9:08:2f:ae:
08:47:11:34:b0:2e:23:ee:47:6c:39:ce:1d:8a:98:
01:59:0c:cc:c9:7d:ab:51:6e:9d:60:23:58:4c:f6:
92:b5:bc:03:cf:7a:6d:4c:b0:2a:18:6e:8d:e3:0c:
be:a9:d5:09:d4:ca:fc:8c:5d:10:95:e6:74:96:08:
8d:bb:56:51:3f:3d:32:07:bc:4e:32:e3:73:5c:1f:
af:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4A:F2:63:8D:A6:D9:F9:E4:98:FF:96:CC:E2:7E:41:57:ED:AF:D8
X509v3 Authority Key Identifier:
keyid:52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/KUryY42m2fnkmP-WzOJ-QVftr9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:64c0::/29
Signature Algorithm: sha256WithRSAEncryption
4c:94:bb:10:38:fd:1f:89:fa:0e:3f:b5:27:b2:af:5d:73:b6:
0d:8b:34:57:48:e0:9f:21:b6:a6:77:db:ca:6d:17:92:82:2a:
14:b8:2d:08:9a:fb:11:72:70:e0:73:c8:a9:52:91:95:47:80:
cb:cb:0c:9c:1d:ff:a2:7c:30:cc:10:b5:f5:81:5e:b8:ba:e0:
18:3c:a7:ef:31:07:ed:0c:6b:81:51:60:f3:d5:e1:e2:74:ab:
08:38:ef:09:da:6c:57:58:38:e1:2b:ea:29:57:47:e5:65:fd:
78:97:a0:4b:aa:7f:e4:99:2c:47:c2:8b:c0:71:1b:2e:a2:59:
65:60:d1:5f:e4:15:13:1b:42:79:ca:28:42:6f:f1:73:a7:dc:
e7:3b:22:50:a4:ac:cb:d8:9a:c1:36:a7:f0:12:62:fb:fa:29:
20:90:67:7d:d1:d4:9d:77:44:a9:bf:6b:7c:a5:85:05:d3:eb:
e7:99:be:50:7d:16:a0:2d:08:e4:78:5f:d6:c8:56:d0:64:42:
9e:71:0b:38:f1:34:99:8f:79:f6:63:7c:cb:6e:b7:02:84:82:
97:65:af:37:44:c4:e9:8c:2c:e2:a9:cd:34:67:0c:a2:1d:6d:
b4:5c:b3:b0:21:96:c8:71:ec:fa:a3:87:0f:7e:ea:39:b0:20:
0b:7f:4f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:25:15 2026 by rpki-client