Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/kytiEyPOTNxoyxv7iDaW14Uab-k.roa
File: kytiEyPOTNxoyxv7iDaW14Uab-k.roa (raw, json)
Hash identifier: VLcPlrBY56CKBxyx/Qz83bxCnFzKYB2bg7VmMk4A5ds=
Subject key identifier: 93:2B:62:13:23:CE:4C:DC:68:CB:1B:FB:88:36:96:D7:85:1A:6F:E9
Certificate issuer: /CN=7beef5e16c1467da7a02f19237653ae42b109652
Certificate serial: 01A085FDA3B4344C51E68668315FC45C96CC
Authority key identifier: 7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/kytiEyPOTNxoyxv7iDaW14Uab-k.roa
Signing time: Wed 09 Sep 2026 11:46:27 +0000
ROA not before: Wed 09 Sep 2026 11:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12859
IP address blocks: 2001:67c:9ac::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:fd:a3:b4:34:4c:51:e6:86:68:31:5f:c4:5c:96:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7beef5e16c1467da7a02f19237653ae42b109652
Validity
Not Before: Sep 9 11:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=932b621323ce4cdc68cb1bfb883696d7851a6fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c0:a7:6f:58:87:53:b8:53:e6:66:5d:86:69:
92:81:46:d7:6f:97:89:c4:19:cb:f1:48:40:46:50:
04:d4:7f:97:12:4b:df:99:c4:95:29:7f:fb:4c:a1:
4c:9d:67:a8:16:83:36:a0:3f:4d:11:ca:c2:2a:42:
0c:a7:0f:00:db:fa:dc:f7:1b:25:d2:42:34:01:f5:
07:2e:de:f9:f9:73:4c:8b:c6:48:9f:05:29:a8:f5:
c3:31:1a:06:38:2e:a1:9c:12:f7:3f:e2:67:64:be:
2f:70:94:bc:b7:31:4b:4e:c7:4a:7a:45:3e:e5:e5:
74:3c:48:9e:bb:60:51:36:7c:12:d6:c1:a9:26:51:
51:8b:af:50:9e:da:08:58:d4:5a:24:5a:77:73:c2:
00:ea:1b:82:93:41:aa:51:e2:3f:db:23:bb:3a:54:
bd:06:6a:4a:31:ba:ea:d7:07:6b:fe:b6:b8:56:78:
6d:02:00:92:2d:9e:7c:e1:d8:07:8c:05:03:39:ab:
2b:95:0a:f6:85:49:9a:84:8e:49:27:c4:3e:9f:4d:
c8:0d:22:4f:96:7e:76:8c:be:bb:0c:cf:75:55:39:
81:65:50:4d:1d:b7:25:59:6a:bf:b7:91:05:ba:e7:
6c:66:bf:ff:1c:89:54:d3:a4:04:66:66:a3:2c:85:
f2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2B:62:13:23:CE:4C:DC:68:CB:1B:FB:88:36:96:D7:85:1A:6F:E9
X509v3 Authority Key Identifier:
keyid:7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/kytiEyPOTNxoyxv7iDaW14Uab-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:9ac::/48
Signature Algorithm: sha256WithRSAEncryption
58:ae:9c:c8:be:c8:c5:e7:61:39:6f:e2:28:bc:97:ec:6b:fe:
0d:9a:44:90:a2:bc:1a:58:ee:42:2d:7e:02:d1:c1:8b:e7:f3:
5c:56:dc:65:4b:b6:35:70:e7:42:83:bb:da:6b:8f:43:ab:3b:
ee:46:ad:3d:49:26:9d:7b:1a:12:f7:b0:73:0e:bb:a1:64:40:
a8:42:2b:32:d7:c9:b8:95:a0:b1:82:c5:57:82:4f:a0:87:3e:
c5:e9:a8:ad:b8:1c:8c:5f:70:e2:24:e3:1f:fb:36:f3:04:f7:
e8:d1:fe:79:b4:14:20:31:81:12:72:0d:d1:09:0f:6d:ba:25:
5e:93:57:34:98:62:80:3d:45:a7:79:65:85:b8:3d:5a:4f:98:
f6:a8:43:36:d1:c1:23:af:65:7b:a4:1d:d6:5f:5b:3c:3b:aa:
8f:26:00:7e:35:8a:6c:e1:47:dc:40:91:b1:c9:0d:aa:1d:10:
c1:59:ec:62:9e:f3:1e:39:0c:30:9a:59:ee:5f:86:ec:18:20:
88:f8:fd:9d:1c:3f:52:6e:41:06:8f:4f:1b:aa:6d:82:ba:5c:
e6:6e:70:46:2b:5b:d7:6d:82:8f:b5:1b:7d:80:4f:0e:f8:29:
be:90:92:ab:6d:da:61:f8:55:ba:34:5c:94:ee:17:9b:92:c2:
2f:ef:9d:ae
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaCF/aO0NExR5oZoMV/EXJbMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZWVmNWUxNmMxNDY3ZGE3YTAyZjE5MjM3NjUzYWU0MmIx
MDk2NTIwHhcNMjYwOTA5MTE0NjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzJiNjIxMzIzY2U0Y2RjNjhjYjFiZmI4ODM2OTZkNzg1MWE2ZmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8Cnb1iHU7hT5mZdhmmSgUbXb5eJ
xBnL8UhARlAE1H+XEkvfmcSVKX/7TKFMnWeoFoM2oD9NEcrCKkIMpw8A2/rc9xsl
0kI0AfUHLt75+XNMi8ZInwUpqPXDMRoGOC6hnBL3P+JnZL4vcJS8tzFLTsdKekU+
5eV0PEieu2BRNnwS1sGpJlFRi69QntoIWNRaJFp3c8IA6huCk0GqUeI/2yO7OlS9
BmpKMbrq1wdr/ra4VnhtAgCSLZ584dgHjAUDOasrlQr2hUmahI5JJ8Q+n03IDSJP
ln52jL67DM91VTmBZVBNHbclWWq/t5EFuudsZr//HIlU06QEZmajLIXyCwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJMrYhMjzkzcaMsb+4g2lteFGm/pMB8GA1UdIwQY
MBaAFHvu9eFsFGfaegLxkjdlOuQrEJZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZS03MTRXd1VaOXA2QXZHU04yVTY1Q3NRbGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hMmI5ODMtNTUzOC00ODVlLWIxMGYt
MTdhNjliNzAyZTFiLzEva3l0aUV5UE9UTnhveXh2N2lEYVcxNFVhYi1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9hMmI5ODMtNTUzOC00ODVlLWIxMGYtMTdhNjliNzAyZTFi
LzEvZS03MTRXd1VaOXA2QXZHU04yVTY1Q3NRbGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAms
MA0GCSqGSIb3DQEBCwUAA4IBAQBYrpzIvsjF52E5b+IovJfsa/4NmkSQorwaWO5C
LX4C0cGL5/NcVtxlS7Y1cOdCg7vaa49DqzvuRq09SSadexoS97BzDruhZECoQisy
18m4laCxgsVXgk+ghz7F6aituByMX3DiJOMf+zbzBPfo0f55tBQgMYEScg3RCQ9t
uiVek1c0mGKAPUWneWWFuD1aT5j2qEM20cEjr2V7pB3WX1s8O6qPJgB+NYps4Ufc
QJGxyQ2qHRDBWexinvMeOQwwmlnuX4bsGCCI+P2dHD9SbkEGj08bqm2CulzmbnBG
K1vXbYKPtRt9gE8O+Cm+kJKrbdph+FW6NFyU7hebksIv752u
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:14:02 2026 by rpki-client