Route Origin Authorization
$ rpki-client -vvvf rsync.rp.ki/repo/clonoth/1/326131333a376134323a3330303a3a2f34302d3438203d3e20323134313031.roa
File: 326131333a376134323a3330303a3a2f34302d3438203d3e20323134313031.roa (raw, json)
Hash identifier: zn8KPwlraCXKX1sUbrFXBZG6SSmSyQCO8rHA1GatBSY=
Subject key identifier: 4F:71:2D:48:0C:08:73:D9:3A:71:8C:E6:F3:21:F0:3A:BC:7A:50:81
Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial: 36F8CBF7E3864A4434880F83ECC1BE929C40F557
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/326131333a376134323a3330303a3a2f34302d3438203d3e20323134313031.roa
Signing time: Sat 29 Aug 2026 11:21:25 +0000
ROA not before: Sat 29 Aug 2026 11:16:25 +0000
ROA not after: Sat 28 Aug 2027 11:21:25 +0000
asID: 214101
IP address blocks: 2a13:7a42:300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 15:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:f8:cb:f7:e3:86:4a:44:34:88:0f:83:ec:c1:be:92:9c:40:f5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Validity
Not Before: Aug 29 11:16:25 2026 GMT
Not After : Aug 28 11:21:25 2027 GMT
Subject: CN=4F712D480C0873D93A718CE6F321F03ABC7A5081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a6:c1:87:56:92:12:d4:13:6a:ac:d8:d7:f5:
56:5c:7a:00:c2:d2:9b:57:fd:c3:07:ed:a9:db:ea:
60:46:24:cf:d9:21:eb:c8:12:ae:42:3e:c1:28:c9:
b7:03:7e:e1:fc:26:40:93:32:9a:4f:b4:fb:d5:b9:
c7:8e:8b:55:3e:23:2a:e3:02:25:4e:d3:d2:09:6e:
58:c9:fc:ac:90:5f:cd:d9:1a:35:d6:77:89:ca:3e:
0a:cd:ba:81:2d:31:d0:34:d4:48:12:98:e9:c3:37:
b7:60:a1:f4:87:29:6d:c5:2e:fa:a3:c4:2c:bd:4f:
8c:26:67:83:5b:af:3c:6d:0e:4e:00:b5:50:0e:ae:
a6:13:d2:e6:c1:a1:44:35:c3:3f:30:41:f0:01:ec:
48:29:ba:3d:a4:53:62:d4:34:a1:c9:9d:fa:df:c3:
bc:94:b3:6a:2f:14:4b:53:f9:9d:12:fe:31:af:aa:
00:40:d3:11:ed:f8:be:bc:b3:2a:c0:fa:66:bd:12:
c6:d8:b1:af:62:52:69:bd:b3:56:23:5d:5b:ee:25:
2a:e9:12:0a:cb:53:e4:42:a7:33:96:6f:25:d8:f4:
15:78:1a:19:b7:b2:09:42:b8:8f:e5:d6:ef:d5:f7:
0e:81:28:e3:bd:e0:6e:df:9b:5d:50:3c:1c:c3:31:
df:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:71:2D:48:0C:08:73:D9:3A:71:8C:E6:F3:21:F0:3A:BC:7A:50:81
X509v3 Authority Key Identifier:
keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/326131333a376134323a3330303a3a2f34302d3438203d3e20323134313031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7a42:300::/40
Signature Algorithm: sha256WithRSAEncryption
a8:08:3d:fd:a4:b6:23:05:a7:2d:8a:64:67:5b:56:47:1c:d2:
8f:54:94:44:23:17:7e:1c:c5:6d:ec:03:af:f0:7b:d5:b5:98:
d3:2a:8b:ec:97:ac:ab:20:4c:04:68:61:f5:02:99:5c:04:50:
02:97:47:a7:d3:4b:16:89:49:fc:0e:45:3b:8a:4f:c8:9e:1c:
6e:8c:e2:51:b2:49:8f:15:0e:bd:c8:17:9e:61:e0:84:58:81:
89:b6:71:c4:c6:51:fa:7f:3d:ed:ad:09:1d:74:fb:40:36:1e:
50:fd:b5:3a:c2:85:23:3c:db:2a:80:b7:40:9b:1a:f7:0c:5f:
f3:33:b7:22:e0:78:6a:b5:23:45:bd:fc:ff:20:8f:b5:c3:3c:
2d:92:79:04:50:ff:fe:41:42:6e:eb:e0:0f:f1:40:b6:32:0c:
68:d0:07:0f:08:fc:e2:55:2f:c0:0a:33:67:69:34:f0:1f:7c:
de:54:78:db:7e:c3:10:6d:a2:17:57:e2:e9:37:4f:21:87:02:
b9:8c:a3:92:f1:b3:c0:1e:0a:26:9f:11:f7:32:9a:ef:59:5e:
4e:fa:b7:b6:89:c4:6e:a3:b6:30:b7:ac:9a:b1:02:38:fe:9b:
07:f6:a9:92:7a:41:b9:17:1b:9a:6c:ce:ce:41:db:b1:71:fc:
ab:13:e0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 19:10:17 2026 by rpki-client