Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/kp3rQVio_wxzdoQuYn_o5s4JV5U.roa
File: kp3rQVio_wxzdoQuYn_o5s4JV5U.roa (raw, json)
Hash identifier: WeixqXV6FFvVVkJXopjUZ+JBXrZ1TjFUnSfk7pUIbcA=
Subject key identifier: 92:9D:EB:41:58:A8:FF:0C:73:76:84:2E:62:7F:E8:E6:CE:09:57:95
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019ED18E7EAFF18800EAB227707C41FA58F1
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/kp3rQVio_wxzdoQuYn_o5s4JV5U.roa
Signing time: Tue 16 Jun 2026 17:50:37 +0000
ROA not before: Tue 16 Jun 2026 17:50:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205828
IP address blocks: 2a0d:b844::/32 maxlen: 32
2a0d:e245::/32 maxlen: 32
2a11:ec4::/32 maxlen: 32
2a11:9042::/32 maxlen: 32
2a11:b4c3::/32 maxlen: 32
2a11:b4c6::/32 maxlen: 32
2a12:647::/32 maxlen: 32
2a12:cf85::/32 maxlen: 32
2a12:cf86::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d1:8e:7e:af:f1:88:00:ea:b2:27:70:7c:41:fa:58:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jun 16 17:50:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=929deb4158a8ff0c7376842e627fe8e6ce095795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4c:ab:cf:91:58:75:c3:48:d5:72:97:f7:6d:
67:d4:9d:e2:65:43:0e:cf:db:e5:af:a4:ba:91:d9:
c0:d8:48:26:c9:34:97:da:58:d6:43:55:e0:24:24:
95:d1:1a:f9:f8:b4:0b:1e:1b:c1:44:b1:d7:2b:58:
c8:d8:79:30:c2:d8:98:06:c6:45:2a:dd:62:32:bf:
be:45:80:89:e1:17:03:f3:8a:ef:c5:04:4d:1b:a4:
a3:ee:a0:07:a8:a9:19:6e:47:e7:4c:f6:3d:94:64:
c0:54:ac:23:b1:9f:60:e9:1b:d2:41:6a:57:7c:fa:
7c:90:98:c6:d3:df:17:5f:6a:7f:1b:dc:f9:6c:d2:
92:f6:e5:09:32:98:3c:56:13:54:8b:b5:a0:ce:89:
fa:48:cf:91:9d:ab:36:30:48:f3:84:4e:e1:55:82:
44:6e:7d:3c:40:09:81:19:fc:b2:73:97:0e:61:c7:
93:1d:61:6d:88:ed:7c:e7:af:c0:9b:38:94:d5:bb:
cc:c4:74:a6:d0:27:9b:99:06:d4:d6:76:bb:c6:c7:
89:7d:dd:f8:29:3f:d7:2f:ca:e2:e3:d4:2f:32:fe:
1e:06:b4:0e:d0:e7:f4:d9:d1:a1:f4:66:40:8a:1e:
49:c5:33:73:42:3b:8a:54:34:20:46:df:25:1c:28:
d7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9D:EB:41:58:A8:FF:0C:73:76:84:2E:62:7F:E8:E6:CE:09:57:95
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/kp3rQVio_wxzdoQuYn_o5s4JV5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b844::/32
2a0d:e245::/32
2a11:ec4::/32
2a11:9042::/32
2a11:b4c3::/32
2a11:b4c6::/32
2a12:647::/32
2a12:cf85::-2a12:cf86:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7a:44:44:25:ad:b2:bf:c8:55:e6:59:4d:ed:de:49:df:4d:24:
3b:5e:6d:4a:b2:5e:c2:c6:aa:04:45:20:18:35:67:e9:0f:45:
a2:b3:48:aa:6e:67:10:b0:c9:8b:97:5b:25:0d:7b:e9:ea:1d:
64:1f:b8:30:f7:05:5a:35:03:5e:63:32:17:e0:c2:b4:56:45:
6b:fd:39:01:c8:dc:04:c0:ff:42:0d:e9:d1:c0:ff:57:c9:f9:
e4:af:f5:6b:8f:5f:7a:ef:7f:f9:ab:f3:58:0a:c8:4b:b9:e7:
70:3c:36:fa:86:72:1c:1d:5c:d2:36:05:21:51:8c:a3:62:d8:
72:50:67:dc:32:ff:a2:3a:08:a0:3d:a5:1c:0c:30:0e:06:7d:
6a:ae:36:56:a4:b6:e6:9d:73:23:5b:a7:1b:ca:1c:25:b2:9d:
b7:63:8f:82:78:38:7d:02:64:9a:ec:ef:d9:81:90:36:74:c8:
39:55:dc:d5:aa:bd:14:85:e0:fa:a7:f2:10:89:2d:6b:c0:ff:
3b:36:27:6d:07:32:30:6f:8c:11:86:d0:6a:39:4a:66:8c:f2:
64:84:81:99:6e:18:3e:61:dd:57:2a:7d:93:8e:be:99:53:1f:
e2:35:fd:28:1b:10:eb:d8:3e:13:d7:6e:68:61:89:09:2d:e0:
27:0c:5e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:40:19 2026 by rpki-client