Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/ckbcDFbXQ_D_r0FvuvTBC3YST_A.roa
File: ckbcDFbXQ_D_r0FvuvTBC3YST_A.roa (raw, json)
Hash identifier: ia28peo9JVpalJlQDWZm1vV64sOxx5oD1TBAmvUfeLo=
Subject key identifier: 72:46:DC:0C:56:D7:43:F0:FF:AF:41:6F:BA:F4:C1:0B:76:12:4F:F0
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01A110955BC9BCF18B98E8CF7A8EFF77E61A
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/ckbcDFbXQ_D_r0FvuvTBC3YST_A.roa
Signing time: Tue 06 Oct 2026 09:39:46 +0000
ROA not before: Tue 06 Oct 2026 09:39:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214963
IP address blocks: 2a0d:2684::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:95:5b:c9:bc:f1:8b:98:e8:cf:7a:8e:ff:77:e6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Oct 6 09:39:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7246dc0c56d743f0ffaf416fbaf4c10b76124ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fc:02:1b:96:99:28:50:b9:46:6c:a9:3c:99:
5b:24:b4:79:aa:4a:f8:2d:15:67:80:5f:62:2b:e2:
c3:1d:ec:13:a3:4b:fc:b9:4a:93:e1:63:3e:7d:f8:
5a:15:33:6d:7f:1c:1a:55:85:39:c5:62:b7:27:86:
9e:f1:70:12:f2:ed:1d:4f:7e:73:4c:83:92:ff:99:
b5:fa:cd:34:cc:ca:7f:79:25:6d:d9:f1:d9:d6:ea:
53:2d:4a:98:60:a2:d4:39:04:30:f7:b3:e6:bd:af:
81:16:db:1e:1d:68:43:72:9f:07:48:fa:f6:14:c2:
89:c1:29:bf:b1:1a:b2:fa:43:4a:e5:cf:2d:1a:8b:
46:3b:89:58:e1:c5:b5:dc:5e:c1:67:92:8a:ac:f8:
ec:d4:fc:0a:91:a1:98:8b:ac:dd:7a:c2:81:2b:ed:
f6:a7:a2:4b:ed:22:de:97:e8:eb:de:a8:68:7a:96:
d4:47:a4:35:ed:b0:38:1c:95:da:0f:1a:29:5c:7a:
d8:52:f6:f2:19:03:15:fb:bb:72:20:96:bb:71:76:
d9:e7:f4:92:9d:03:eb:0b:1b:3d:58:dd:4b:95:52:
f6:d9:33:48:6d:8a:81:9b:e7:ce:08:92:49:76:cb:
19:df:1a:d3:f3:dc:5b:e3:47:08:ea:c0:75:82:47:
83:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:46:DC:0C:56:D7:43:F0:FF:AF:41:6F:BA:F4:C1:0B:76:12:4F:F0
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/ckbcDFbXQ_D_r0FvuvTBC3YST_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2684::/32
Signature Algorithm: sha256WithRSAEncryption
10:4d:77:25:d8:cb:12:99:dc:5d:f7:c9:56:40:6d:8a:09:1d:
cf:6d:f7:c9:17:22:b4:e0:34:8e:36:16:5a:a4:88:98:b6:78:
77:c2:30:e0:94:ad:aa:f5:4b:09:79:3a:d9:22:32:d5:19:79:
7a:35:83:fb:b5:8d:6e:2f:66:33:15:75:c8:16:b8:46:0e:7d:
2f:91:46:bd:68:1d:6b:27:45:df:ab:87:bb:e5:33:55:83:78:
77:83:9a:7b:23:ac:c3:f9:b1:05:f2:ac:17:20:7b:3c:31:e8:
d6:a3:c1:9e:e6:b8:12:40:f3:5f:7f:6e:69:cc:97:b6:34:55:
8f:85:fa:56:f3:c6:a4:7b:15:77:0c:68:cb:17:d8:25:4f:84:
34:8b:76:c1:5b:74:75:e7:db:d2:08:6c:51:52:7c:75:61:28:
bd:0f:1e:c5:60:56:0a:a5:ce:1c:09:eb:09:fc:5b:4e:26:d7:
6c:6e:7b:bf:99:03:22:3a:f4:b9:d0:93:8b:b3:ee:f2:37:b0:
16:ef:5f:bf:66:ff:3e:69:c3:c0:d4:01:56:d6:fb:b5:d4:44:
d6:6d:5e:14:2f:f6:6b:9e:d3:06:b4:a8:ff:d4:93:4c:ab:22:
25:bb:a1:6f:73:3c:bd:0d:4e:2d:d9:a0:e2:d4:f4:18:62:04:
48:0e:15:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 02:02:29 2026 by rpki-client