Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/KYIOb7iz6nFpO-VncG2SvHnAuoA.roa
File: KYIOb7iz6nFpO-VncG2SvHnAuoA.roa (raw, json)
Hash identifier: 23ReOjB4kGN1q/sNfdaF2PaXOtnQc0L4ZtZOtPEv92k=
Subject key identifier: 29:82:0E:6F:B8:B3:EA:71:69:3B:E5:67:70:6D:92:BC:79:C0:BA:80
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 01A0A4665F88064A702C90B8268606F40E42
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/KYIOb7iz6nFpO-VncG2SvHnAuoA.roa
Signing time: Tue 15 Sep 2026 09:29:27 +0000
ROA not before: Tue 15 Sep 2026 09:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207695
IP address blocks: 2a09:3f00:3800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:66:5f:88:06:4a:70:2c:90:b8:26:86:06:f4:0e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Sep 15 09:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29820e6fb8b3ea71693be567706d92bc79c0ba80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:54:4c:13:2d:d9:c5:3a:59:26:2a:bb:6a:
13:d1:0b:f2:5e:e8:6a:d9:e6:73:62:fb:6b:64:75:
74:ed:e6:15:8d:f1:dd:18:96:07:33:4a:4b:fe:cd:
a4:29:8a:31:eb:a6:12:b0:6c:2a:9f:98:6f:9b:91:
5e:d7:6b:46:4f:4f:d7:76:91:ea:ee:15:85:8b:25:
e2:39:4d:81:28:5f:48:37:9b:df:89:26:1c:e4:6a:
5b:d3:12:ca:3b:01:71:67:21:9b:d1:1b:48:74:e6:
be:b7:ce:a6:d6:0f:a4:ca:12:0c:11:9e:46:c0:25:
d5:ad:fb:22:f3:1e:c5:78:8c:dd:a1:58:6c:6e:dc:
0b:04:9d:f4:ae:87:b7:2d:55:b8:21:41:04:2f:bc:
7d:33:b6:07:38:ae:3b:c2:48:11:d0:ed:d7:a0:71:
0d:0e:79:d6:93:e1:ff:17:bc:d3:1b:37:4b:52:22:
04:25:5a:ff:de:a0:38:56:f8:8d:2f:fa:63:af:d7:
da:33:c6:8d:ad:78:fe:45:e6:c6:9d:6e:89:11:8c:
df:6a:fd:69:5f:2a:8e:a8:bc:90:d6:6d:94:90:7f:
20:a2:24:52:c8:79:e4:f0:51:8b:47:37:d5:a8:c2:
f3:d0:ef:38:b5:4d:62:a8:97:16:ba:de:90:d9:a4:
11:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:82:0E:6F:B8:B3:EA:71:69:3B:E5:67:70:6D:92:BC:79:C0:BA:80
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/KYIOb7iz6nFpO-VncG2SvHnAuoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:3800::/40
Signature Algorithm: sha256WithRSAEncryption
9d:7c:72:ae:59:13:a3:5d:7d:72:5b:a8:47:bf:85:c4:b4:5c:
4b:80:8c:84:1d:1e:92:55:a6:c7:47:93:7f:a1:91:36:d6:0f:
f1:cd:6d:94:bc:4c:14:d3:3a:5a:8d:61:02:4e:8e:5f:b7:1a:
b1:f3:34:ee:01:da:b2:54:11:16:67:0c:f2:11:81:31:b7:a8:
05:91:e8:33:e2:ed:6a:b3:63:64:72:67:1f:9f:94:33:62:86:
02:ad:a2:a4:e6:34:ce:e6:fe:b0:be:65:93:08:fe:44:6d:70:
30:4d:39:5f:d5:38:96:5d:80:09:1a:3a:e5:7f:c8:f9:b6:ba:
74:30:f7:0b:04:53:95:44:a4:15:cb:08:db:95:59:46:a9:31:
a2:4d:6b:8a:9c:4d:dd:9e:cb:a7:36:e2:26:3a:35:c6:84:fe:
75:6a:ee:12:fa:e8:e9:5e:78:15:b4:db:5e:b7:c2:64:5a:ab:
48:78:00:fb:17:76:9c:24:10:d4:2f:3a:85:66:24:df:5c:f6:
4e:1c:42:df:1f:b1:f2:02:39:dc:b5:e4:ef:b1:8d:fc:f4:85:
21:2a:2e:82:df:ba:90:cc:7d:e8:af:81:a0:b7:16:31:c4:ec:
2f:8a:63:5f:08:0f:33:87:2f:cb:da:88:f5:a6:11:82:2b:b2:
00:77:44:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:35:11 2026 by rpki-client