Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/kZLvQWfbY2wNmmZt0RziyksanQ8.roa
File: kZLvQWfbY2wNmmZt0RziyksanQ8.roa (raw, json)
Hash identifier: aUbdoyZ5n9uFtvepxyY/vkk6TZxQRziKFL54EA8GQ60=
Subject key identifier: 91:92:EF:41:67:DB:63:6C:0D:9A:66:6D:D1:1C:E2:CA:4B:1A:9D:0F
Certificate issuer: /CN=87785594824d5b1a5b245ff8737e08aeaf47f3e8
Certificate serial: 019F2368AA74B1BBD11D573E1E193BB3BA26
Authority key identifier: 87:78:55:94:82:4D:5B:1A:5B:24:5F:F8:73:7E:08:AE:AF:47:F3:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3hVlIJNWxpbJF_4c34Irq9H8-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/kZLvQWfbY2wNmmZt0RziyksanQ8.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 2a14:f180::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/h3hVlIJNWxpbJF_4c34Irq9H8-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/h3hVlIJNWxpbJF_4c34Irq9H8-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3hVlIJNWxpbJF_4c34Irq9H8-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:aa:74:b1:bb:d1:1d:57:3e:1e:19:3b:b3:ba:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87785594824d5b1a5b245ff8737e08aeaf47f3e8
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9192ef4167db636c0d9a666dd11ce2ca4b1a9d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:77:b6:44:ad:8e:a0:a8:cd:9f:f3:38:e0:
ec:fa:e0:99:da:e6:08:b6:70:6f:83:3f:2a:58:fb:
89:5a:8e:4b:4f:1d:3a:26:93:c4:4b:55:f1:ae:d0:
73:74:70:41:d4:f8:dd:71:b0:a2:d5:c1:75:46:2f:
86:c6:78:c9:e8:c7:6b:b7:2d:dc:81:62:2f:02:91:
50:61:21:f8:29:df:dd:58:61:2a:3b:9b:6b:58:92:
83:4c:21:2b:6e:05:28:18:72:20:a2:20:bd:c5:ac:
da:34:29:dd:c4:2e:97:00:b2:76:97:51:e2:c1:cc:
2b:ec:18:90:46:32:b3:1f:2c:82:b7:ec:3b:94:77:
ec:5e:f1:93:f0:72:87:ad:cb:d5:2d:4b:e2:0f:58:
c1:5f:0f:19:1b:e7:1b:78:f1:d7:b4:ca:86:2d:e6:
37:f9:7e:65:be:12:d5:1a:1e:41:d6:0c:b4:75:3e:
6b:3b:6d:08:53:4a:9c:4f:97:41:32:d8:ec:a7:42:
36:6f:90:93:11:3e:38:d7:b2:b4:7f:9b:0c:54:cc:
1e:e1:fc:56:fa:f0:74:f9:7c:01:53:83:49:a8:9e:
ad:ba:ec:8c:f8:b6:2a:a9:9e:ef:e1:f7:a8:54:bc:
41:0a:05:c3:44:51:6a:57:76:d4:24:5d:36:10:ae:
a0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:92:EF:41:67:DB:63:6C:0D:9A:66:6D:D1:1C:E2:CA:4B:1A:9D:0F
X509v3 Authority Key Identifier:
keyid:87:78:55:94:82:4D:5B:1A:5B:24:5F:F8:73:7E:08:AE:AF:47:F3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3hVlIJNWxpbJF_4c34Irq9H8-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/kZLvQWfbY2wNmmZt0RziyksanQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/h3hVlIJNWxpbJF_4c34Irq9H8-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:f180::/29
Signature Algorithm: sha256WithRSAEncryption
a1:14:20:93:0e:15:c2:39:7f:09:01:b5:e4:fd:ff:8c:13:54:
a5:f9:33:c6:46:9b:4e:9e:f0:7b:04:4f:3c:cd:18:35:a0:1d:
7a:49:85:a6:c3:e3:6d:84:d5:71:6e:de:25:19:6c:a1:36:84:
a8:a9:b8:c0:39:20:31:a6:84:5e:01:d1:63:38:cb:5f:c7:11:
22:a1:19:84:b8:3b:0c:5b:f9:f8:50:33:1d:aa:7e:be:61:16:
ec:01:47:4e:3b:e6:69:4f:a2:7c:71:8f:1b:60:f9:38:d5:4b:
08:b5:e6:8f:85:22:cb:38:7a:05:14:e1:8d:7c:3d:8b:58:5f:
6a:78:d1:b9:a6:5e:3c:ff:8a:7d:7f:ee:07:1e:1f:79:0d:12:
ce:96:b3:6a:09:99:99:f0:39:ac:55:f4:fa:5a:ca:c8:5a:78:
8f:f4:c7:3b:b9:44:b7:0c:15:03:76:6c:e1:8e:69:05:83:e2:
e2:55:c5:35:f2:69:ea:19:e2:f7:23:5d:79:43:41:3c:d0:d2:
56:78:fd:d4:2a:ff:da:06:02:51:ed:2e:90:29:67:32:f2:42:
38:73:12:ce:08:99:aa:a9:3b:aa:2c:54:f5:47:fc:f5:80:45:
cf:df:ee:58:fa:04:b1:53:e1:d4:c5:98:9d:17:46:3b:47:b3:
b3:2b:54:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:01:32 2026 by rpki-client