Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/KqbQhkdZxzpCNnx1oWr4fisphrk.roa
File: KqbQhkdZxzpCNnx1oWr4fisphrk.roa (raw, json)
Hash identifier: Wd6NpR+WA7JLVkZVqwEuj4FqkYVnQ8Ba2vJsRl6/8ck=
Subject key identifier: 2A:A6:D0:86:47:59:C7:3A:42:36:7C:75:A1:6A:F8:7E:2B:29:86:B9
Certificate issuer: /CN=36368aac0f4a28c8a31760f06b578dae453146f0
Certificate serial: 019E5F1D9D9D829F5D713BA8DEA2E7602C68
Authority key identifier: 36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/KqbQhkdZxzpCNnx1oWr4fisphrk.roa
Signing time: Mon 25 May 2026 12:30:36 +0000
ROA not before: Mon 25 May 2026 12:30:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12301
IP address blocks: 185.8.72.0/22 maxlen: 22
217.21.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5f:1d:9d:9d:82:9f:5d:71:3b:a8:de:a2:e7:60:2c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36368aac0f4a28c8a31760f06b578dae453146f0
Validity
Not Before: May 25 12:30:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2aa6d0864759c73a42367c75a16af87e2b2986b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:26:58:25:72:9c:40:73:16:02:17:19:ed:
76:51:f7:4e:f8:49:94:47:87:b7:59:48:28:e1:2c:
97:bb:8d:9c:a5:e1:e2:53:7f:20:51:05:e5:32:bb:
d0:58:1e:0c:51:16:0e:43:8b:8e:6d:d4:12:1e:72:
d6:4a:8a:9e:f6:6c:7b:ec:6f:c0:30:ba:0a:ed:7e:
dd:8e:d2:cc:a8:b5:af:9c:c8:7e:c2:07:73:09:25:
c2:26:fa:45:ff:eb:38:46:bb:62:32:35:5a:ad:fc:
7f:64:e8:78:3b:43:c7:48:33:a8:26:68:cf:67:ba:
27:de:4f:d1:8e:48:f9:a7:c6:08:d5:be:f4:07:ea:
ac:e3:ca:a8:08:78:b7:08:30:10:14:8b:8e:5e:49:
ca:be:99:79:10:fb:90:8f:f2:ab:01:72:b9:86:e0:
86:8e:5a:3d:a0:11:a3:6e:fb:34:93:89:a0:44:68:
9c:3b:49:e7:73:be:6a:cd:4b:95:63:50:d4:ae:04:
48:9e:68:f4:c1:c4:8f:7f:0f:ed:6e:24:81:72:6e:
fc:c3:20:9f:37:23:00:d2:ae:00:eb:2b:f4:ca:0f:
ba:c6:64:c2:4d:e4:b5:ec:9e:c3:19:32:75:f8:33:
a9:fa:4a:ba:25:12:bd:71:5e:cb:6f:30:91:94:b8:
6f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A6:D0:86:47:59:C7:3A:42:36:7C:75:A1:6A:F8:7E:2B:29:86:B9
X509v3 Authority Key Identifier:
keyid:36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/KqbQhkdZxzpCNnx1oWr4fisphrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.72.0/22
217.21.16.0/20
Signature Algorithm: sha256WithRSAEncryption
80:95:96:39:83:3f:31:08:fb:b7:22:1e:2d:f5:d6:03:8d:e6:
56:f5:27:ce:f2:db:75:20:79:48:e7:e6:fa:a2:99:0e:50:e4:
a7:a7:b1:8e:19:b7:c7:9e:10:28:92:06:99:95:a0:c9:bd:95:
be:e8:dd:6c:77:b2:da:47:62:91:96:6f:83:ef:5f:db:1e:6a:
2e:4f:c6:72:5c:f9:55:30:e8:05:d0:ce:0f:aa:92:97:a9:cf:
44:cd:64:3e:c1:b4:06:93:6f:06:2b:e9:da:65:a3:1e:3a:8b:
4c:e3:1d:dc:d2:79:7d:72:54:10:71:5a:76:b0:79:86:14:95:
f4:e0:75:fb:d8:e2:12:8a:b7:86:54:c3:af:70:2c:8e:4a:bb:
bf:88:9d:d2:0f:47:42:c7:63:12:dd:fa:ae:e3:f0:06:db:3d:
e0:64:b8:d9:5f:80:f0:a2:cb:27:a0:f5:03:79:eb:a1:ee:18:
dc:09:96:d3:ce:08:74:8a:73:45:80:e6:2a:41:0e:69:8b:c8:
06:7c:73:de:13:b7:63:90:4b:32:cc:55:20:f2:cb:ea:64:c9:
f9:48:d8:dc:0d:0d:c2:08:be:60:d5:87:04:61:26:2d:45:60:
0f:8f:b9:ee:28:2c:01:9d:07:3d:e6:af:1f:27:f9:fa:9f:dd:
15:be:81:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:58:56 2026 by rpki-client