Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/kkdrwvtIm67mYRzUq0YY24XrUnQ.roa
File: kkdrwvtIm67mYRzUq0YY24XrUnQ.roa (raw, json)
Hash identifier: RflwSuE6iPYXKTGfn+ZXNNVA1p+hYP+EDtyv0xx/9xg=
Subject key identifier: 92:47:6B:C2:FB:48:9B:AE:E6:61:1C:D4:AB:46:18:DB:85:EB:52:74
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019C532BEB75692475DE5B43169D87BAC9D4
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/kkdrwvtIm67mYRzUq0YY24XrUnQ.roa
Signing time: Thu 12 Feb 2026 18:45:13 +0000
ROA not before: Thu 12 Feb 2026 18:45:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56434
IP address blocks: 2a0f:4041::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:53:2b:eb:75:69:24:75:de:5b:43:16:9d:87:ba:c9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Feb 12 18:45:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92476bc2fb489baee6611cd4ab4618db85eb5274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:8d:33:b0:1b:d3:bb:7e:a9:a5:6b:64:d3:
1f:74:8b:29:cc:7d:0d:c2:f4:05:cc:01:3d:42:6b:
fb:18:6d:97:cf:c7:f7:91:b3:b7:a8:da:ea:29:2b:
82:a5:ba:3d:3b:22:2e:28:98:db:e6:17:3b:2b:cc:
b1:1f:48:1b:6b:21:ae:15:59:4c:71:c4:c4:66:8b:
a1:51:7c:cc:de:1e:ac:52:34:9c:01:4b:fc:fd:58:
79:e2:33:0b:c4:59:5c:37:e5:fe:2a:0f:b6:c0:68:
0c:dc:c5:56:21:73:af:4c:5d:4c:9d:e0:19:04:7f:
fa:07:d2:60:d5:f0:0a:ba:4e:02:4e:63:f3:0b:e0:
a0:d4:85:30:9a:c6:19:8a:60:98:7e:a8:83:64:ec:
a2:37:c1:1a:b0:0c:ee:e6:7e:85:21:d4:1c:67:0f:
7f:5b:8d:8c:6a:dd:c0:bc:77:6e:50:0b:68:77:3b:
e3:b4:ae:b0:93:ba:fe:e7:c6:b9:3a:07:1d:10:4b:
d0:f3:37:46:8f:48:eb:25:5b:d6:12:ab:52:0d:b2:
0c:6a:05:af:da:bb:70:b6:f2:19:94:59:bd:cf:61:
48:eb:4a:19:7b:0f:e1:46:d2:e8:8f:45:ed:a4:f1:
30:c3:be:7a:b7:d6:a1:f3:dd:3e:7d:7e:b1:9f:a7:
e7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:47:6B:C2:FB:48:9B:AE:E6:61:1C:D4:AB:46:18:DB:85:EB:52:74
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/kkdrwvtIm67mYRzUq0YY24XrUnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:4041::/32
Signature Algorithm: sha256WithRSAEncryption
8a:0b:9f:99:75:29:1c:30:de:36:a3:bd:cd:ee:9a:16:4f:d2:
b6:2a:42:1d:ac:40:16:75:3d:dc:61:ea:f4:fb:15:f9:99:c5:
69:9e:2e:d8:c1:ee:6f:c4:6c:11:a5:df:1d:e6:f1:c8:fc:ec:
15:f1:7c:b2:15:b2:48:ad:ff:d7:09:d0:a4:4a:95:55:96:8c:
03:ee:8c:e6:e4:a4:f2:88:df:52:54:de:c8:f6:8b:0f:fd:87:
00:b7:6b:ef:95:20:a4:a9:b0:05:af:5f:62:12:14:2d:62:25:
7f:f5:00:9b:5d:0e:bb:19:05:3f:a9:e9:f6:52:94:fc:12:f7:
1a:97:90:a6:3e:a8:db:4f:9a:08:ba:75:ad:96:8c:95:83:dd:
e9:62:51:63:10:3e:7d:5a:d6:e5:22:e2:50:31:5e:2b:8d:7a:
86:a5:8e:39:06:97:84:a5:94:58:99:e5:ad:1f:31:18:4a:30:
64:6f:01:4b:8b:c1:8e:14:a3:70:73:35:57:56:f1:25:e8:b0:
29:74:a3:8c:de:73:8e:c6:36:db:29:5f:32:63:6a:db:cc:9f:
0e:0f:35:ed:ac:a8:91:4e:e9:9c:ba:52:96:ee:6e:5f:e6:7d:
95:0c:df:a5:80:08:93:c1:ce:fa:7d:fb:8a:d4:26:b1:2e:f3:
33:4e:c7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:03:33 2026 by rpki-client