Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/kr_rKZMDlngfdptIt_JyXLrXMBY.roa
File: kr_rKZMDlngfdptIt_JyXLrXMBY.roa (raw, json)
Hash identifier: hYZ/s6a6PDIEq2XHtllS3+bhWDGAxpUpxRwC132Bjmc=
Subject key identifier: 92:BF:EB:29:93:03:96:78:1F:76:9B:48:B7:F2:72:5C:BA:D7:30:16
Certificate issuer: /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Certificate serial: 01A10C19BF03CFFBB9FF782EF7EF58A5AADE
Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/kr_rKZMDlngfdptIt_JyXLrXMBY.roa
Signing time: Mon 05 Oct 2026 12:46:16 +0000
ROA not before: Mon 05 Oct 2026 12:46:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207598
IP address blocks: 2a04:2dc0:1d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:19:bf:03:cf:fb:b9:ff:78:2e:f7:ef:58:a5:aa:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Validity
Not Before: Oct 5 12:46:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92bfeb29930396781f769b48b7f2725cbad73016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:58:2e:bf:70:06:ad:6e:02:e0:2b:ce:ee:
c7:ac:c8:37:5a:a1:c1:bd:63:43:ae:e2:f9:fd:0b:
0e:b1:b8:b0:da:5b:c0:26:2c:b7:8f:d2:f8:ce:87:
19:d6:53:39:9b:ae:53:ee:7b:4d:05:eb:43:3d:07:
a1:b7:16:11:da:93:92:36:d9:1e:4e:95:bf:f2:08:
b1:b2:84:31:58:96:71:18:da:1a:70:75:86:f2:b5:
df:21:56:60:2f:55:6c:7b:09:b9:27:9a:99:ea:16:
41:9e:23:50:ba:bd:ba:e1:93:de:00:b3:d3:78:84:
7c:62:c1:04:47:39:ea:1a:24:c9:64:54:25:b8:3a:
9e:83:2b:8f:b0:a0:fb:a8:55:b0:8e:fb:ee:95:3b:
cd:a8:ff:75:7b:60:03:da:f8:2d:30:d3:75:89:48:
d1:d0:17:64:35:6c:c7:aa:f6:33:42:5b:ba:2a:36:
67:db:7b:56:2c:4c:04:01:51:5f:c9:ef:e1:68:e9:
3c:48:cd:a5:fa:a8:ca:52:d1:e4:d6:cf:25:8b:8f:
0a:f1:e8:35:4d:dc:33:2c:42:9c:0f:8b:6d:17:6a:
6a:06:fc:57:83:d6:4a:93:64:ec:0d:1c:76:95:a2:
e5:27:f7:31:21:ce:e4:8f:ab:b6:92:db:a8:69:13:
bf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BF:EB:29:93:03:96:78:1F:76:9B:48:B7:F2:72:5C:BA:D7:30:16
X509v3 Authority Key Identifier:
keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/kr_rKZMDlngfdptIt_JyXLrXMBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:2dc0:1d::/48
Signature Algorithm: sha256WithRSAEncryption
62:4c:14:39:c5:f1:58:8e:1d:d7:bc:19:02:02:26:7f:19:64:
9d:b9:09:59:e6:78:97:70:03:55:63:98:a1:53:8b:23:a1:3c:
12:03:94:17:03:f5:d8:d3:85:35:1b:33:77:15:42:ca:86:73:
24:03:c8:0d:03:16:87:df:41:aa:bb:9a:51:0e:02:d4:fc:b3:
2e:d3:6f:98:70:36:a5:42:9a:11:71:9e:3d:d0:ff:4e:b5:99:
21:3d:5d:d8:42:58:64:cb:24:23:6c:8c:0b:6e:89:21:38:9d:
73:9a:52:6d:d6:13:74:97:51:59:76:62:bd:23:a6:ca:5f:9f:
65:03:35:99:4f:93:51:c7:54:4e:2f:ad:09:e0:3a:7c:72:46:
8c:a8:a3:81:b6:1a:0d:a1:ec:92:5e:02:73:2f:34:7f:25:ce:
c9:ee:0b:0d:3c:a2:91:5d:d7:bc:93:f4:a3:35:f4:d2:b1:4f:
b4:45:b5:50:b2:2f:1b:25:ad:a4:99:2f:18:e6:0b:5b:2f:0f:
56:5a:df:e5:85:58:fb:17:68:97:8a:e2:78:9d:be:02:e8:5a:
90:ea:ca:d8:75:cd:1c:62:55:82:68:5e:d5:f1:44:2e:c9:9a:
f6:a5:b7:7c:c9:31:17:2c:67:a0:12:f3:4d:c4:8e:75:08:9b:
0e:7d:d9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:50:41 2026 by rpki-client