Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/KFPTzEg4Y0L6aJGjreTB0eGWtcY.roa
File: KFPTzEg4Y0L6aJGjreTB0eGWtcY.roa (raw, json)
Hash identifier: 8tieHB2/IwsPF3XmJYABOmkTWjKNGkzX0/aPiwcDseA=
Subject key identifier: 28:53:D3:CC:48:38:63:42:FA:68:91:A3:AD:E4:C1:D1:E1:96:B5:C6
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 019C95D4A4A9CFF1F75B4645068C776E8D79
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/KFPTzEg4Y0L6aJGjreTB0eGWtcY.roa
Signing time: Wed 25 Feb 2026 17:24:26 +0000
ROA not before: Wed 25 Feb 2026 17:24:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204491
IP address blocks: 2a0c:ac0::/29 maxlen: 29
2a0e:8540::/29 maxlen: 29
2a11:640::/29 maxlen: 29
2a11:1340::/29 maxlen: 29
2a11:21c0::/29 maxlen: 29
2a11:3080::/29 maxlen: 29
2a11:35c0::/29 maxlen: 29
2a11:4340::/29 maxlen: 29
2a11:5a40::/29 maxlen: 29
2a11:6340::/29 maxlen: 29
2a11:7080::/29 maxlen: 29
2a11:d380::/29 maxlen: 29
2a11:d700::/29 maxlen: 29
2a12:24c0::/29 maxlen: 29
2a12:7300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:d4:a4:a9:cf:f1:f7:5b:46:45:06:8c:77:6e:8d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Feb 25 17:24:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2853d3cc48386342fa6891a3ade4c1d1e196b5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:ab:a8:d8:2d:29:f9:bc:f6:c7:ab:17:63:
d9:49:b6:9d:31:95:b6:ee:f8:1c:9e:e0:57:9a:4c:
fd:2a:68:05:ba:0c:d4:23:d5:32:65:c8:82:e0:a0:
ec:48:4c:a0:c2:ec:c1:db:d1:a2:df:7f:d9:6e:b6:
c2:6f:9f:1a:76:05:79:e0:77:80:74:4d:cb:45:3d:
44:df:5f:8a:83:c2:4e:65:78:8e:fc:12:a6:96:22:
e2:20:10:48:0c:23:8d:97:c6:be:10:72:1f:b5:03:
1d:96:17:68:48:8f:bc:48:33:1a:e6:87:de:93:41:
bc:c3:00:2b:4e:9f:ce:b8:4a:ce:0f:7b:65:51:7c:
e0:7b:0b:2a:6c:42:9b:fb:b5:57:13:ce:e0:22:fc:
49:19:ff:59:0d:36:91:10:e1:cc:40:a2:39:5d:42:
75:a7:21:f9:33:06:b9:4b:a0:4b:93:99:d5:fd:54:
5d:d6:5c:fc:e0:90:60:45:89:1f:2f:f2:ce:d4:ce:
a4:13:b3:3b:6d:73:01:57:77:0d:1b:7e:3d:db:ec:
dc:73:93:47:61:75:88:3a:25:d5:b2:43:b1:e0:f0:
b4:93:2b:73:2f:73:8c:0c:ae:c6:78:91:94:88:0d:
d9:b5:98:be:bf:5a:c0:4c:bc:05:18:fe:2d:5b:b2:
f5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:53:D3:CC:48:38:63:42:FA:68:91:A3:AD:E4:C1:D1:E1:96:B5:C6
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/KFPTzEg4Y0L6aJGjreTB0eGWtcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:ac0::/29
2a0e:8540::/29
2a11:640::/29
2a11:1340::/29
2a11:21c0::/29
2a11:3080::/29
2a11:35c0::/29
2a11:4340::/29
2a11:5a40::/29
2a11:6340::/29
2a11:7080::/29
2a11:d380::/29
2a11:d700::/29
2a12:24c0::/29
2a12:7300::/29
Signature Algorithm: sha256WithRSAEncryption
67:9d:ea:32:fa:a5:d1:c3:e7:e2:3d:bf:5f:e3:41:3e:25:e8:
51:b8:1f:43:59:01:32:a8:a9:75:b3:97:4b:96:c4:9e:0f:a2:
c8:3c:49:76:15:d6:44:cf:63:3f:95:dd:91:95:ee:0e:d3:ac:
2d:cf:b0:ae:08:76:8d:e5:de:47:3f:43:fb:6a:d0:e7:5e:62:
ce:75:2f:38:ed:de:a5:14:99:9d:6e:26:66:34:e4:ed:4f:90:
36:31:50:2f:8d:8e:07:16:79:4f:81:c3:61:6c:a8:5e:63:5a:
72:ec:af:5b:d6:43:4c:b4:1f:e2:f2:12:cb:e2:8b:4b:8c:df:
7f:6c:c0:c3:96:03:1f:bf:19:86:1e:4c:f5:c7:93:f3:73:3d:
f1:b5:ba:f3:2b:18:0d:75:8c:e9:14:c0:6f:df:05:82:21:64:
7e:84:fd:20:81:9b:13:60:e4:40:5d:f0:51:56:ec:32:dc:c1:
65:a6:be:3b:f5:af:16:33:12:3c:01:70:61:e8:dc:fa:74:50:
4a:9d:08:70:e9:bb:0b:38:c6:a2:f7:54:43:be:95:bf:ff:d5:
e9:19:8a:f9:ae:1a:41:7c:90:a4:34:fc:c7:2a:49:5a:79:c6:
b1:67:c5:db:0b:63:e9:78:88:a1:16:03:82:88:02:e2:2a:bd:
0f:6b:f1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 01:55:50 2026 by rpki-client