Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/AOkKST9KwSJH3sXE5USL9gzAqUU.roa
File: AOkKST9KwSJH3sXE5USL9gzAqUU.roa (raw, json)
Hash identifier: aXhO9sIv6q5kHGbb9/fb2Aw1F2NhhrGlB5l1s7C1sMo=
Subject key identifier: 00:E9:0A:49:3F:4A:C1:22:47:DE:C5:C4:E5:44:8B:F6:0C:C0:A9:45
Certificate issuer: /CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf
Certificate serial: 019C81C48B88BFDFC90A32DEBE5EEAC14A49
Authority key identifier: 55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/AOkKST9KwSJH3sXE5USL9gzAqUU.roa
Signing time: Sat 21 Feb 2026 19:54:27 +0000
ROA not before: Sat 21 Feb 2026 19:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401163
IP address blocks: 2a14:e00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 15:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:c4:8b:88:bf:df:c9:0a:32:de:be:5e:ea:c1:4a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf
Validity
Not Before: Feb 21 19:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00e90a493f4ac12247dec5c4e5448bf60cc0a945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a7:95:f4:03:dc:c2:ce:df:6e:13:86:2f:f6:
db:18:53:f6:65:99:6d:ee:3c:fd:85:c1:2b:fe:6d:
f4:85:34:94:85:e5:90:d4:f8:a9:2b:85:24:fa:b3:
d8:a1:48:4e:a1:e9:68:ec:2c:2d:dc:a0:9b:8f:bc:
58:c6:ad:cc:e5:fe:66:23:18:28:4b:67:32:5d:56:
65:a9:8b:0e:0f:26:c1:89:82:7d:ec:6f:46:e3:f7:
d1:3c:5f:f2:99:6f:30:5d:16:29:6e:fb:7f:8f:dd:
c9:05:ba:3c:36:20:5a:cf:d7:0e:fd:99:21:4e:00:
08:68:e4:88:05:64:6c:4f:d8:60:77:17:74:bc:c7:
76:20:da:1f:cc:2c:c7:a9:5d:41:ff:97:df:2e:f9:
ef:f2:7c:cc:a5:4e:dc:70:b9:a9:8b:e6:6c:2d:11:
03:f8:e6:9a:0f:4c:2b:4c:b6:1f:b1:34:d5:34:c0:
2a:b9:43:46:54:8d:39:f2:a8:db:1f:6c:e8:e1:68:
8f:21:0d:58:36:fd:87:b6:e2:e9:42:46:a6:69:46:
dc:c3:b0:e8:a3:67:9e:f9:c0:49:93:04:fc:8d:e1:
92:0a:78:c9:09:db:c4:a2:59:a5:8d:17:c6:77:7a:
12:ef:af:a3:62:8d:2e:55:5e:8d:37:38:51:79:49:
9e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E9:0A:49:3F:4A:C1:22:47:DE:C5:C4:E5:44:8B:F6:0C:C0:A9:45
X509v3 Authority Key Identifier:
keyid:55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/AOkKST9KwSJH3sXE5USL9gzAqUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:e00::/29
Signature Algorithm: sha256WithRSAEncryption
2b:55:6a:65:2a:af:6a:15:52:08:bb:01:80:9e:7e:97:ac:f4:
8a:63:1f:d1:b2:0b:4b:a1:af:8c:a1:82:ff:25:04:5d:11:3a:
bc:52:00:5c:ba:29:85:d8:99:d8:a0:2b:26:5a:37:fd:dd:85:
2a:ac:a6:4a:72:59:45:ef:3e:cf:41:a0:07:84:fa:34:a3:59:
aa:5b:be:4d:b7:f0:09:7e:8a:d6:43:41:00:f6:cb:0b:a3:59:
91:b9:b1:cd:34:9a:c8:cf:36:60:85:e1:31:5e:7e:f1:98:5f:
64:77:a4:da:fe:41:5e:cb:d8:6c:5d:49:57:24:fc:1e:da:d6:
a4:3e:bd:ab:78:02:e8:df:cf:b6:e5:3f:fb:bd:0e:50:ca:27:
bf:32:ee:32:23:8a:3a:c4:e6:c9:4f:10:21:0d:4e:c5:b4:40:
e8:43:78:45:43:60:1f:99:1d:55:9f:8b:e4:6f:92:26:1b:6d:
75:87:03:9f:43:f3:7b:75:0c:db:b1:2a:37:1f:a2:99:85:98:
8b:ea:33:05:f6:44:c7:cb:a0:2b:e3:cb:cb:fa:5e:81:f6:81:
f9:9b:e7:49:b5:80:ab:46:dd:fd:3f:5e:ff:b2:e3:81:5f:89:
50:3c:49:60:54:e4:ec:2a:3c:55:b4:90:3a:eb:49:13:37:af:
6f:c1:9e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:54:28 2026 by rpki-client