Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/KoGo-mB59s9Ncml95FxYYC8Js6Y.roa
File: KoGo-mB59s9Ncml95FxYYC8Js6Y.roa (raw, json)
Hash identifier: 7n0NTC+DK8dztmjzPvkzkvxEC1p/0yngOEcum3WWtPA=
Subject key identifier: 2A:81:A8:FA:60:79:F6:CF:4D:72:69:7D:E4:5C:58:60:2F:09:B3:A6
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A057BEBB13258A2157632E4AEB6DEBBCCF
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/KoGo-mB59s9Ncml95FxYYC8Js6Y.roa
Signing time: Mon 31 Aug 2026 12:15:12 +0000
ROA not before: Mon 31 Aug 2026 12:15:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207208
IP address blocks: 2a10:fa81:1b00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:be:bb:13:25:8a:21:57:63:2e:4a:eb:6d:eb:bc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Aug 31 12:15:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a81a8fa6079f6cf4d72697de45c58602f09b3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4f:84:31:71:e9:3b:33:3f:b2:f2:01:b5:20:
73:a7:93:36:2a:cc:41:be:5c:c0:e6:18:0e:84:0d:
8f:6e:f6:b6:8b:02:75:12:d1:84:82:d1:6f:c2:bd:
ab:09:eb:5c:1e:4d:31:cf:e4:a3:8a:e2:87:31:6f:
0d:19:41:ce:77:e0:91:38:d4:be:4c:0c:1f:15:ee:
fd:a1:d1:b6:6d:02:93:6b:34:63:56:b5:2d:50:21:
8e:2b:fa:61:65:c9:f0:40:7b:59:10:bb:d5:f3:7e:
d0:c5:5e:bd:7e:76:94:2b:d3:e6:e8:48:38:ed:fe:
d9:e9:b2:13:40:fc:72:17:97:fb:32:43:b6:d9:e9:
0c:b3:db:50:4a:86:5b:fa:82:04:21:79:80:10:e5:
a3:d9:36:83:e7:f1:c4:4b:74:f1:27:49:de:ed:c1:
8f:8a:0d:2c:fe:cd:d2:04:a9:98:79:be:28:6a:6e:
56:f7:1d:cc:c4:a4:3c:3f:75:f2:ee:e6:f0:64:d9:
08:80:39:6f:36:9c:e8:5d:0b:50:97:79:84:a9:5a:
2a:fb:8c:e3:85:fa:f6:94:d3:a6:5c:45:0f:b3:a0:
71:00:a1:e6:e8:46:98:a8:dd:19:c7:0d:48:b6:65:
da:4a:16:95:08:83:6b:67:f4:51:88:62:05:5a:3c:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:81:A8:FA:60:79:F6:CF:4D:72:69:7D:E4:5C:58:60:2F:09:B3:A6
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/KoGo-mB59s9Ncml95FxYYC8Js6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:1b00::/48
Signature Algorithm: sha256WithRSAEncryption
2e:a1:60:f4:b5:0c:6c:41:b5:55:ae:ef:68:fa:70:68:1c:d2:
4a:ff:96:f2:62:6a:76:76:2c:fe:74:43:80:dc:ae:ab:4f:1b:
ed:93:00:0d:67:8b:e5:75:f5:41:5a:ed:9e:66:9a:1f:74:cf:
1f:f6:e2:5e:42:1b:6e:37:b2:21:42:1a:59:00:39:80:4e:80:
8c:26:44:be:67:19:79:76:a2:af:03:85:86:61:83:4a:97:e4:
6a:15:22:8e:2c:6c:de:36:94:10:19:68:08:41:7e:75:a0:7d:
56:af:a5:50:ec:46:d6:8c:bd:f8:4f:b9:13:3f:48:7c:bd:93:
27:1f:d2:1d:8a:92:c8:85:41:b3:44:5e:41:5e:7e:54:00:d9:
f1:7d:e0:c8:32:8a:b5:2b:67:56:56:7f:d0:9e:d7:a8:d0:04:
b4:10:ac:a7:3b:3c:c3:d5:c8:2e:f5:ab:97:ea:5c:a1:2b:95:
2c:ef:ba:a1:c4:f5:f7:d7:40:21:0c:a7:fe:3a:ec:37:27:a4:
80:9c:ba:64:62:9a:7b:71:87:69:24:62:82:ac:8b:a0:4f:e4:
18:aa:fe:f0:b4:2b:0e:b3:91:51:0b:b1:41:ac:80:52:19:0f:
12:10:38:82:39:37:a5:91:00:8d:b6:8c:cd:01:12:80:11:37:
dc:fc:50:f7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaBXvrsTJYohV2MuSutt67zPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj
NjA0NmMwHhcNMjYwODMxMTIxNTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTgxYThmYTYwNzlmNmNmNGQ3MjY5N2RlNDVjNTg2MDJmMDliM2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3k+EMXHpOzM/svIBtSBzp5M2KsxB
vlzA5hgOhA2Pbva2iwJ1EtGEgtFvwr2rCetcHk0xz+SjiuKHMW8NGUHOd+CRONS+
TAwfFe79odG2bQKTazRjVrUtUCGOK/phZcnwQHtZELvV837QxV69fnaUK9Pm6Eg4
7f7Z6bITQPxyF5f7MkO22ekMs9tQSoZb+oIEIXmAEOWj2TaD5/HES3TxJ0ne7cGP
ig0s/s3SBKmYeb4oam5W9x3MxKQ8P3Xy7ubwZNkIgDlvNpzoXQtQl3mEqVoq+4zj
hfr2lNOmXEUPs6BxAKHm6EaYqN0Zxw1ItmXaShaVCINrZ/RRiGIFWjwbuQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCqBqPpgefbPTXJpfeRcWGAvCbOmMB8GA1UdIwQY
MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt
MjM5NGM2NjAwMDIyLzEvS29Hby1tQjU5czlOY21sOTVGeFlZQzhKczZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy
LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhD6gRsA
MA0GCSqGSIb3DQEBCwUAA4IBAQAuoWD0tQxsQbVVru9o+nBoHNJK/5byYmp2diz+
dEOA3K6rTxvtkwANZ4vldfVBWu2eZpofdM8f9uJeQhtuN7IhQhpZADmAToCMJkS+
Zxl5dqKvA4WGYYNKl+RqFSKOLGzeNpQQGWgIQX51oH1Wr6VQ7EbWjL34T7kTP0h8
vZMnH9IdipLIhUGzRF5BXn5UANnxfeDIMoq1K2dWVn/Qnteo0AS0EKynOzzD1cgu
9auX6lyhK5Us77qhxPX310AhDKf+Ouw3J6SAnLpkYpp7cYdpJGKCrIugT+QYqv7w
tCsOs5FRC7FBrIBSGQ8SEDiCOTelkQCNtozNARKAETfc/FD3
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:40:48 2026 by rpki-client