Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/ky6aEM3QS8sYnRUJTuZ6SDwhAAg.roa
File: ky6aEM3QS8sYnRUJTuZ6SDwhAAg.roa (raw, json)
Hash identifier: fxV90Eu9cbxWk8vMXSQhqbwJr0KJjyMYtXo9QWz1xhA=
Subject key identifier: 93:2E:9A:10:CD:D0:4B:CB:18:9D:15:09:4E:E6:7A:48:3C:21:00:08
Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial: 01A0E6FDE6C5742445A09C80D56BB85F2B90
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/ky6aEM3QS8sYnRUJTuZ6SDwhAAg.roa
Signing time: Mon 28 Sep 2026 07:49:54 +0000
ROA not before: Mon 28 Sep 2026 07:49:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218582
IP address blocks: 2a13:cc82:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:fd:e6:c5:74:24:45:a0:9c:80:d5:6b:b8:5f:2b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Validity
Not Before: Sep 28 07:49:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=932e9a10cdd04bcb189d15094ee67a483c210008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:5c:93:d8:97:88:6c:d0:72:d0:62:ca:e1:
7c:49:a4:1c:a6:9a:30:83:76:d4:28:01:ed:bc:f4:
f0:f1:44:a9:7e:8e:01:bf:19:54:c3:6f:bd:40:38:
8d:5e:bc:63:ec:82:2d:8f:df:63:f1:04:d5:a9:77:
6b:bc:d6:37:86:f8:8b:03:26:09:57:aa:e5:05:69:
e6:82:5a:91:57:6f:bd:99:02:9b:0d:ed:f7:57:29:
43:70:ca:c2:ee:cb:2e:4e:e2:02:c0:2e:bb:06:4b:
30:b9:84:71:0e:89:62:ef:96:d5:50:82:d0:cf:ec:
95:1b:6a:dd:48:be:f4:e3:6a:a3:85:5f:b9:94:e8:
10:fc:dc:a9:55:35:00:00:80:9a:57:96:93:8d:95:
90:05:66:1e:51:30:96:08:3d:da:69:99:27:71:c2:
d3:ac:e4:59:3e:0c:f2:3a:35:7e:c9:16:00:0b:c0:
f4:91:98:80:66:18:5e:94:2f:9b:ab:3d:8e:01:78:
92:36:6a:1c:f2:ba:03:3b:a0:f7:e0:01:c0:41:2e:
1d:98:01:b9:31:6f:e6:62:b6:5d:5a:12:66:34:a4:
3a:1d:94:2d:a9:1a:b6:53:7b:6b:1b:28:83:c0:c9:
21:3e:86:d8:2b:14:a7:20:9c:ff:b9:57:c1:89:5a:
f0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2E:9A:10:CD:D0:4B:CB:18:9D:15:09:4E:E6:7A:48:3C:21:00:08
X509v3 Authority Key Identifier:
keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/ky6aEM3QS8sYnRUJTuZ6SDwhAAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:cc82:4::/48
Signature Algorithm: sha256WithRSAEncryption
cd:e9:90:78:cf:68:3f:da:bd:f1:7d:1f:cf:a3:52:62:84:7a:
c6:c7:01:00:54:d6:0a:a3:f2:2e:e2:7d:9c:a6:d0:a9:7d:06:
55:5f:dd:54:cc:8d:78:5b:f9:84:75:63:31:c3:aa:fd:99:ce:
f5:a7:a1:0c:7b:61:16:61:d4:0c:08:cd:02:d2:6e:53:61:ba:
40:75:6d:36:2d:28:22:3b:e7:ed:46:f1:9f:0b:81:df:07:19:
bd:b5:1c:2f:ba:47:4f:8b:77:77:f8:17:0e:f0:38:aa:23:fc:
9a:e3:e0:3a:40:ec:52:7d:fd:e5:d4:88:01:90:e2:70:a8:4b:
95:a2:87:ee:5b:9c:6e:51:39:4e:16:d6:9d:e8:fd:71:d7:0d:
97:91:6e:d5:2d:16:21:84:c4:81:84:51:90:28:48:45:8c:17:
a3:ae:81:63:55:d7:62:e2:c6:e7:d6:c3:32:f1:ac:f2:31:82:
71:49:33:18:50:32:13:cb:37:92:e6:07:4e:55:61:a3:bb:f8:
e2:ff:13:3d:39:12:28:65:c1:f7:b4:45:04:f3:8b:a5:f2:d9:
bf:7a:2b:5a:d0:58:fc:b8:ab:f2:5d:53:07:69:77:fb:1d:17:
74:2f:40:d4:28:bf:b1:75:5b:8b:8a:7a:a6:88:22:d4:49:45:
dd:51:c8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:24:40 2026 by rpki-client