Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kySLNgnOMFjHgXP3sgaITW47jZU.roa
File: kySLNgnOMFjHgXP3sgaITW47jZU.roa (raw, json)
Hash identifier: b3wb6kUjEKplQzXvCGEgp5SxnOq/vmD6nKzCCX4i0lg=
Subject key identifier: 93:24:8B:36:09:CE:30:58:C7:81:73:F7:B2:06:88:4D:6E:3B:8D:95
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A01A53692FEB7701AE9CDEC7FD998AD55D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kySLNgnOMFjHgXP3sgaITW47jZU.roa
Signing time: Wed 19 Aug 2026 14:01:09 +0000
ROA not before: Wed 19 Aug 2026 14:01:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200489
IP address blocks: 2a13:d44::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:53:69:2f:eb:77:01:ae:9c:de:c7:fd:99:8a:d5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 19 14:01:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93248b3609ce3058c78173f7b206884d6e3b8d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:12:14:b9:ff:83:1e:bd:a7:50:e7:16:f0:62:
40:e6:7d:ce:37:e3:90:47:71:4f:9a:2c:c2:cd:02:
36:e9:53:1e:cf:5e:1e:46:e1:59:a0:44:74:2d:2d:
e8:d2:89:f3:e9:b7:e0:65:6e:70:0c:7b:ed:8a:fc:
45:b4:a5:ed:04:aa:28:58:0d:4c:87:11:a0:fc:41:
59:85:b5:bd:36:a8:d4:de:dd:4c:f7:59:cf:cb:cf:
5b:d1:4e:f2:ae:11:f6:02:91:b4:f2:0b:a0:17:6c:
a8:8e:a6:ab:27:e1:1f:c4:91:67:20:b4:b8:7b:bd:
6e:75:7b:06:f8:02:d6:ea:4d:98:d2:fd:86:77:52:
36:c2:ce:f4:9b:f9:d1:76:de:8d:a6:af:c8:c0:1c:
95:27:7c:93:34:57:9a:82:6e:26:c3:b2:30:c3:d6:
6c:ac:4b:57:48:48:8b:ac:a0:bf:c9:10:d9:4c:06:
ee:b6:77:be:aa:0f:0b:09:7c:3d:4b:fd:c0:6a:3f:
3d:f3:8f:14:d0:23:65:3a:53:a7:cd:76:dd:90:4d:
79:a9:11:6c:92:0f:7a:d5:d1:92:55:d4:00:58:09:
9c:d3:90:f9:56:74:73:b4:9b:3b:56:65:4e:ec:bd:
95:18:d2:5f:b2:7f:85:d6:5d:10:01:ee:89:2a:10:
70:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:24:8B:36:09:CE:30:58:C7:81:73:F7:B2:06:88:4D:6E:3B:8D:95
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kySLNgnOMFjHgXP3sgaITW47jZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d44::/32
Signature Algorithm: sha256WithRSAEncryption
81:03:84:0d:f3:a7:6a:e2:6f:e1:51:47:a8:12:8b:d8:3e:03:
bb:e5:e7:c5:3d:01:f7:39:d8:59:ad:88:41:36:b6:f4:f9:ed:
e7:ac:32:f3:85:9f:e6:b0:b6:bc:03:bd:00:93:9a:0b:ac:b7:
de:2a:a5:ca:09:d2:e3:a4:52:e0:21:68:a6:78:5b:7e:17:41:
c4:74:b4:51:ee:1e:b7:4c:d6:a3:1c:36:43:e0:f4:99:5d:eb:
33:2f:1d:5a:c6:f6:a1:ec:5e:27:fc:c3:73:c4:51:13:fe:f1:
fb:73:15:d1:81:44:87:74:a1:c8:a1:d9:61:db:21:17:12:15:
12:26:b5:1d:a6:de:7d:79:77:90:3c:97:61:a9:c7:ba:4c:8f:
71:bb:07:ab:24:66:e1:60:01:19:65:ea:cf:60:92:4b:78:7e:
b6:86:2c:64:51:93:20:9b:f6:43:cf:8a:bd:e6:11:e3:56:86:
c5:55:b3:05:a8:64:0a:5f:8d:67:fe:c8:e8:1d:81:37:82:77:
63:fd:09:aa:d2:6e:8a:de:8e:a6:cd:4a:a3:89:cc:33:cc:3e:
04:6f:00:88:c3:21:a2:5a:1c:2b:7f:b4:17:54:6b:5f:a6:cc:
13:79:d0:a9:9f:3c:e3:92:cb:7c:a0:ce:5a:6b:f6:60:aa:95:
1d:13:0d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:58 2026 by rpki-client