Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/kumhSEMAZhrrF0EjsYPhjIqKEW0.roa
File: kumhSEMAZhrrF0EjsYPhjIqKEW0.roa (raw, json)
Hash identifier: 9jfM0YNmjKH5LVTGmWzr2lOFjfPBtzQjG/XbdHJ2fLQ=
Subject key identifier: 92:E9:A1:48:43:00:66:1A:EB:17:41:23:B1:83:E1:8C:8A:8A:11:6D
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 01A0FC1949100660505C313F93B0D8A09939
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/kumhSEMAZhrrF0EjsYPhjIqKEW0.roa
Signing time: Fri 02 Oct 2026 10:11:50 +0000
ROA not before: Fri 02 Oct 2026 10:11:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41740
IP address blocks: 2a09:bd00:2::/48 maxlen: 48
2a09:bd00:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:19:49:10:06:60:50:5c:31:3f:93:b0:d8:a0:99:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Oct 2 10:11:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92e9a1484300661aeb174123b183e18c8a8a116d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:4a:65:82:9a:3e:06:51:37:be:92:8f:14:
ad:17:a8:7a:94:29:e7:8b:7e:cf:3e:c5:6c:f7:f3:
c6:48:42:d9:8c:a5:ee:db:ce:bd:2e:19:95:28:a3:
0a:8e:28:bc:b6:03:ae:8c:27:31:29:0d:74:0a:3a:
e6:4f:7b:f3:3e:0c:9e:57:ac:b5:b8:10:2f:d7:f9:
d3:ea:9a:0a:ed:5a:48:cb:99:a7:b9:ba:49:9b:69:
3b:14:15:02:67:ce:2d:db:43:5c:59:13:83:21:8b:
7d:79:5e:cc:23:6d:12:39:80:87:7e:89:5b:c8:90:
41:d8:ea:ee:25:3e:85:f6:a8:9b:e9:c7:32:16:a0:
a8:7f:9f:d5:a8:89:cf:89:12:58:85:33:5e:ea:ed:
c1:69:d0:ee:00:b9:39:4e:5d:d1:a8:23:1a:79:a9:
06:52:8a:e6:cb:8e:46:f5:b6:c2:c5:1e:09:0c:49:
01:e6:88:b0:e3:48:94:e9:25:ef:1f:b7:41:81:ef:
5b:2f:7e:14:ec:57:a8:f0:8a:b8:1d:72:dd:0b:e5:
ca:0e:28:ec:d8:09:e9:09:96:4a:e6:31:0a:d8:e0:
93:da:9c:df:20:d2:de:4c:af:89:85:1d:6c:ce:a3:
89:5d:c7:26:71:e3:42:7f:17:87:14:90:73:bd:39:
13:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E9:A1:48:43:00:66:1A:EB:17:41:23:B1:83:E1:8C:8A:8A:11:6D
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/kumhSEMAZhrrF0EjsYPhjIqKEW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:bd00:2::/47
Signature Algorithm: sha256WithRSAEncryption
2d:cd:fd:a0:c0:f6:55:b2:f2:f5:d8:69:bb:b5:00:ee:1b:0b:
86:70:25:92:ae:a1:25:0f:c4:57:c0:cc:58:9f:10:83:99:48:
ed:9d:18:64:c9:98:f1:db:67:41:b0:93:d9:02:35:e5:f5:fd:
33:eb:10:d9:f1:0f:9d:16:b6:34:f8:5c:f9:4b:7c:18:20:19:
e3:40:90:47:db:14:d6:08:33:06:93:67:e5:1d:f9:67:3e:15:
09:29:3b:a0:d1:87:c0:0a:98:88:70:89:3d:e6:9f:2a:5f:b4:
ee:3a:92:88:19:3f:ec:1e:c3:7f:9c:18:7e:a6:21:37:d4:99:
1d:3b:dc:75:8b:58:36:a2:c4:6d:e1:1b:c9:ec:36:a7:4b:87:
c7:d7:4d:13:05:71:4c:c0:02:55:49:71:17:f9:0d:f6:26:f1:
7a:26:87:80:9f:df:2d:28:7c:80:7f:35:51:08:28:a1:5a:4e:
d2:5f:7d:17:32:2b:0e:1c:ca:80:f5:69:fb:c4:0c:b6:84:37:
4f:36:6e:d9:bd:3d:2c:7c:35:77:4f:7e:cb:2f:47:8f:a8:31:
fb:60:49:f8:a9:7b:0a:f6:69:cb:7b:36:2e:10:95:7c:2b:af:
30:76:b0:e2:2a:4e:cd:92:7b:87:7f:4b:42:42:00:cc:18:3f:
21:a4:40:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:31 2026 by rpki-client