Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/KsIy7-1yLG8CYI1bRB3T-M2jsUk.roa
File: KsIy7-1yLG8CYI1bRB3T-M2jsUk.roa (raw, json)
Hash identifier: Zt8aA3v04F17PgCAbUAJ5TXgyUDA/tAmdYu5z0MvARg=
Subject key identifier: 2A:C2:32:EF:ED:72:2C:6F:02:60:8D:5B:44:1D:D3:F8:CD:A3:B1:49
Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial: 01A15378AAEF3B08F3582809302174B02857
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/KsIy7-1yLG8CYI1bRB3T-M2jsUk.roa
Signing time: Mon 19 Oct 2026 09:22:59 +0000
ROA not before: Mon 19 Oct 2026 09:22:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401163
IP address blocks: 2a14:5f00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:78:aa:ef:3b:08:f3:58:28:09:30:21:74:b0:28:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Validity
Not Before: Oct 19 09:22:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ac232efed722c6f02608d5b441dd3f8cda3b149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:92:a3:e5:99:c3:3d:0d:b6:ce:16:27:5c:54:
e2:e4:a6:e8:d4:6c:00:9d:0e:54:e7:da:48:7d:3e:
d9:02:cc:f7:0b:3b:a7:7b:bf:73:8a:2e:b7:07:85:
4f:d2:c2:71:3f:6c:0e:bc:1a:57:73:24:05:03:72:
49:bf:73:cd:f4:49:7e:9e:f3:a9:4a:ec:79:15:3e:
10:98:46:70:48:ab:c7:cd:ba:d3:97:df:4a:5b:52:
74:1e:b9:ba:d4:c6:88:40:0b:72:22:07:92:c0:c7:
d9:f8:17:58:34:59:51:cc:22:eb:b4:79:b9:54:88:
db:78:9e:5b:22:34:c9:e5:63:f2:e9:d3:dc:47:80:
c3:4c:03:8b:7f:06:86:c4:3f:37:72:66:41:0b:81:
16:bb:a1:ee:35:7c:f8:87:1f:5c:68:fb:b1:4a:1c:
70:83:d9:99:2c:ae:87:c0:a4:0d:a1:99:55:4d:56:
95:c1:4a:66:e6:70:26:97:f8:0f:c3:1c:a4:a2:9f:
82:91:ce:d7:bf:1f:70:aa:8d:1c:13:e5:8a:df:dd:
e8:af:a5:5c:cb:2d:bc:a6:24:bd:77:6e:77:64:b8:
62:0e:2b:72:a2:b3:b9:44:b1:8e:d1:cd:de:8d:94:
ba:f0:18:e0:44:a1:89:20:fb:b6:70:a9:d5:64:04:
bb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C2:32:EF:ED:72:2C:6F:02:60:8D:5B:44:1D:D3:F8:CD:A3:B1:49
X509v3 Authority Key Identifier:
keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/KsIy7-1yLG8CYI1bRB3T-M2jsUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:5f00::/29
Signature Algorithm: sha256WithRSAEncryption
50:8e:d8:8e:0c:6e:ed:74:47:5c:14:34:12:bd:a4:20:30:42:
96:2e:b4:b6:91:38:8b:c4:83:8c:39:b4:25:e8:db:b9:f2:78:
b8:45:3f:b0:48:b3:ac:9c:db:36:b3:0a:02:ee:95:2a:22:2e:
1a:35:59:08:d7:47:b1:71:08:4d:81:e1:9d:5a:f5:38:93:05:
5c:8d:e9:d0:ba:0a:4f:c3:e1:88:16:c9:f8:0e:43:58:d8:59:
56:01:ed:d6:82:56:f7:b8:f0:05:1b:69:1a:4a:b5:29:9e:d4:
69:38:7b:c8:b7:f4:b9:5e:7a:7d:2e:43:98:12:56:48:ff:dd:
b5:6e:b1:e7:37:db:7c:0e:ad:55:73:bd:7a:eb:46:0c:03:17:
2d:c9:0d:b9:76:a7:8b:cb:14:28:fd:47:38:f9:cc:84:0a:01:
28:ff:68:60:70:86:1b:d4:01:c3:f4:77:40:7c:bb:50:9f:f0:
56:cb:fd:e7:ad:2e:f2:c1:d8:2b:13:83:97:7f:92:8c:6e:66:
66:a4:aa:80:54:2a:72:72:4f:7f:a0:47:51:55:8b:40:92:c2:
75:26:af:d8:06:f5:d6:7c:42:e3:30:59:cb:a6:68:7e:e4:c9:
78:17:96:c1:0b:8e:b3:fa:16:86:69:76:63:49:23:75:d8:3e:
de:16:d4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:01 2026 by rpki-client