Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/kMXVbz2TuORvoHZ7UfuE6YxZLcc.roa
File: kMXVbz2TuORvoHZ7UfuE6YxZLcc.roa (raw, json)
Hash identifier: tU3JunGy9A12HYURdznAlTij6asn5+6G+/mvxmK09Xw=
Subject key identifier: 90:C5:D5:6F:3D:93:B8:E4:6F:A0:76:7B:51:FB:84:E9:8C:59:2D:C7
Certificate issuer: /CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf
Certificate serial: 019C81C48B0F071407A3259E8D4B89A247EF
Authority key identifier: 55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/kMXVbz2TuORvoHZ7UfuE6YxZLcc.roa
Signing time: Sat 21 Feb 2026 19:54:27 +0000
ROA not before: Sat 21 Feb 2026 19:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400342
IP address blocks: 2a14:e00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 15:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:c4:8b:0f:07:14:07:a3:25:9e:8d:4b:89:a2:47:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf
Validity
Not Before: Feb 21 19:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90c5d56f3d93b8e46fa0767b51fb84e98c592dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fc:26:fa:e3:a5:fd:15:9e:d3:aa:41:10:c5:
ab:07:c9:a1:9e:90:ed:f0:67:56:61:f9:94:05:fb:
ea:2f:b9:08:db:5d:f8:b6:ca:4e:f9:6f:d4:d2:d7:
64:b7:f0:29:b1:e8:3a:bc:24:78:8a:25:eb:f3:3e:
a0:e1:e8:9c:ad:a0:3e:67:ff:5f:45:36:31:c6:a9:
f9:0e:02:42:31:03:9c:8c:74:e5:5b:8c:7e:65:fa:
b8:b7:9c:16:07:d3:21:de:65:bb:90:34:22:01:16:
51:50:1e:a4:5f:c5:7a:4b:59:0e:1c:49:5a:bc:94:
58:d9:74:e0:1b:9f:e8:17:e4:60:50:b5:64:89:c8:
04:81:4b:cf:c7:66:cb:81:da:89:fc:89:5f:3e:2d:
32:0c:07:70:f2:8b:aa:12:0b:47:bd:b0:63:6c:1b:
74:5c:97:65:6a:ca:14:4e:1b:0f:01:da:89:bc:0b:
5c:7d:cf:ba:a8:de:cb:a2:3a:bb:14:f8:b3:6d:d5:
4b:11:c3:45:25:d6:d1:5b:fc:55:05:6e:32:55:91:
2d:41:38:74:de:9e:68:dc:47:8c:81:d5:f9:eb:4d:
32:70:24:a3:ed:f6:89:21:f1:01:4f:ab:11:c6:bb:
42:8d:0a:43:10:d0:28:02:cb:93:ed:65:43:8f:48:
ec:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C5:D5:6F:3D:93:B8:E4:6F:A0:76:7B:51:FB:84:E9:8C:59:2D:C7
X509v3 Authority Key Identifier:
keyid:55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/kMXVbz2TuORvoHZ7UfuE6YxZLcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:e00::/29
Signature Algorithm: sha256WithRSAEncryption
57:9e:fa:7d:37:69:4e:18:fc:46:fa:25:f0:ec:bc:8c:dd:31:
62:b6:64:89:36:e3:00:af:6c:0a:65:79:07:8e:c2:c0:fa:c1:
b1:23:0c:65:8a:cd:fb:47:a8:b0:c0:4d:24:f5:3c:02:55:7a:
47:95:12:55:d4:45:90:db:70:e1:af:37:4a:83:9a:ce:04:97:
ae:48:72:a7:b5:88:aa:2b:ae:9e:d4:05:eb:c4:69:8d:19:02:
68:b5:d8:7b:67:ba:0a:08:f6:82:90:db:d1:2f:60:b8:6a:cf:
76:f8:a3:25:a1:4f:98:11:81:59:d1:b8:e3:a1:8a:14:12:5a:
24:ea:43:a2:38:85:9b:5c:b8:40:89:12:66:a0:0b:1f:a7:f1:
b5:35:21:a0:90:a4:0d:77:39:d8:6e:a5:01:c1:e4:3f:20:6d:
00:47:0b:99:4f:43:cc:4f:88:18:d5:6e:1d:69:3b:02:a3:38:
8a:38:9d:09:52:cd:56:2a:06:cc:85:0a:5d:87:9a:bf:a9:e2:
7d:f6:3e:ae:da:24:0e:80:46:62:e3:3d:d1:56:ed:48:be:09:
77:f4:0a:37:35:7d:28:99:0d:9b:e4:21:bd:f6:4e:1e:2b:8e:
e4:62:e8:5c:2e:2d:fd:c9:b6:bd:f4:79:47:9d:91:58:f1:de:
41:02:ba:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:53:07 2026 by rpki-client