Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/keUmBlAJjYBu50gLdd6scO5xxX8.roa
File: keUmBlAJjYBu50gLdd6scO5xxX8.roa (raw, json)
Hash identifier: vmHPHxr1vVswUXTKXNe3PGtg9/lpwShFDczoUZ/Wqlk=
Subject key identifier: 91:E5:26:06:50:09:8D:80:6E:E7:48:0B:75:DE:AC:70:EE:71:C5:7F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019C7B575878C0EDAAE7551FBC6265E4D861
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/keUmBlAJjYBu50gLdd6scO5xxX8.roa
Signing time: Fri 20 Feb 2026 13:57:27 +0000
ROA not before: Fri 20 Feb 2026 13:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a10:7403::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7b:57:58:78:c0:ed:aa:e7:55:1f:bc:62:65:e4:d8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 20 13:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91e5260650098d806ee7480b75deac70ee71c57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:7e:d6:a7:f1:56:e5:bd:ae:ce:25:3a:48:
d7:63:67:c9:12:22:1f:2b:dc:5c:bd:1a:d1:d4:ba:
21:d4:56:82:bb:a9:db:e1:b8:0e:3b:3c:17:18:b7:
6b:02:97:54:68:56:1f:83:5f:a6:bb:75:ca:71:b1:
27:15:0c:ec:3b:3f:51:57:a0:44:88:e5:19:4c:4c:
c8:0e:ca:43:ed:fc:3f:34:18:e3:37:62:83:7d:3d:
27:90:8e:4f:83:e2:6a:70:27:41:dd:41:04:a5:97:
91:4d:b0:2a:91:71:b6:82:55:42:44:c1:4e:a3:90:
b6:2f:b5:86:35:f1:49:df:3f:cd:5b:e2:27:1a:75:
b7:eb:68:a4:6c:1c:93:b6:2d:1d:27:61:ed:39:30:
84:4a:35:57:d3:92:96:fb:85:b7:f0:a0:2e:7f:c9:
0e:7a:ad:61:b9:ca:78:93:03:c6:37:9e:8a:3c:45:
9c:d6:2b:ff:2e:5a:c4:9c:5e:3e:4a:b4:a2:ba:7d:
18:bf:9e:a7:fc:71:79:b4:45:fb:e4:4a:f8:64:43:
69:c5:6d:a8:0f:25:59:cb:59:66:ac:8b:3a:04:79:
e1:b8:8f:18:1f:02:2d:40:0d:ef:c7:ca:74:b9:04:
6a:fe:ee:b4:cf:d0:54:64:0d:fa:ec:ee:48:40:b1:
f5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E5:26:06:50:09:8D:80:6E:E7:48:0B:75:DE:AC:70:EE:71:C5:7F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/keUmBlAJjYBu50gLdd6scO5xxX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:7403::/32
Signature Algorithm: sha256WithRSAEncryption
37:d7:e6:79:34:f5:73:5b:a3:71:cb:3c:53:f1:ce:05:78:ac:
e3:ae:2e:9d:da:be:a9:a6:c2:03:f9:b9:5c:77:58:90:4e:a1:
a2:d5:e8:f0:86:3d:84:6e:0a:72:4d:cf:31:18:ae:ba:13:05:
0e:c7:54:b0:1b:2f:8a:0a:dc:94:9a:14:ea:e3:76:16:98:ec:
5b:23:47:f3:9b:ef:4b:7b:72:21:41:22:3f:a3:ef:60:79:50:
86:39:b3:7f:35:8d:12:38:b3:d4:e6:c8:5b:f9:a9:6b:4b:bf:
82:da:38:9c:83:4b:34:ca:01:27:eb:8e:9d:7f:ce:d3:3e:a1:
df:f1:b4:e8:07:88:28:2d:e1:ea:2f:26:5d:a4:45:27:39:41:
48:03:c8:0d:46:02:2e:60:79:a2:59:8b:3c:ce:ca:b6:75:ac:
f3:3e:ce:1c:68:7d:69:35:f5:a4:ae:32:92:d6:a9:6e:02:d0:
49:5e:67:25:5b:f9:3d:d4:af:31:de:0f:7d:09:09:dc:55:f4:
ea:95:d0:1b:39:f9:a3:fc:ef:0a:e1:95:9d:fd:bb:cd:db:2e:
bd:d3:b6:6f:23:b3:36:e2:da:74:4d:39:be:33:3c:a1:5b:6f:
3d:9e:5b:a0:b5:4e:83:25:5c:0e:9e:20:dd:55:40:7a:51:94:
95:99:b7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:51:02 2026 by rpki-client