Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/k4UjBMhNQbPGGmHnVoiBgJBmSf0.roa
File: k4UjBMhNQbPGGmHnVoiBgJBmSf0.roa (raw, json)
Hash identifier: VIQo5uhjjTbtUBi5ti8/TlUnmadL+OWUvZa3u0tyfm0=
Subject key identifier: 93:85:23:04:C8:4D:41:B3:C6:1A:61:E7:56:88:81:80:90:66:49:FD
Certificate issuer: /CN=aabc9f64a48eea5521e1e9faa810798f089546b6
Certificate serial: 019F945BD5545DE266EFDF6F170C4D87194C
Authority key identifier: AA:BC:9F:64:A4:8E:EA:55:21:E1:E9:FA:A8:10:79:8F:08:95:46:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qryfZKSO6lUh4en6qBB5jwiVRrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/k4UjBMhNQbPGGmHnVoiBgJBmSf0.roa
Signing time: Fri 24 Jul 2026 13:41:14 +0000
ROA not before: Fri 24 Jul 2026 13:41:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25330
IP address blocks: 2a0f:41c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qryfZKSO6lUh4en6qBB5jwiVRrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:5b:d5:54:5d:e2:66:ef:df:6f:17:0c:4d:87:19:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aabc9f64a48eea5521e1e9faa810798f089546b6
Validity
Not Before: Jul 24 13:41:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93852304c84d41b3c61a61e756888180906649fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d0:33:13:c0:ca:97:df:22:1e:05:a5:bd:f4:
fe:69:ef:2d:bb:4a:83:96:29:9c:c8:1a:ce:c2:1b:
00:2d:f1:a5:bc:e9:59:f2:26:a9:c2:2a:29:6c:8e:
1d:95:bb:b8:82:00:fb:28:ae:91:63:b1:7f:cd:b0:
ee:4a:7d:5f:64:4f:68:1f:fc:e5:ac:b9:11:a2:26:
13:6a:45:6e:32:3b:0c:25:c4:46:86:36:b7:2b:36:
ca:94:33:51:f7:f0:e7:2f:c2:cb:84:29:1f:36:ed:
ae:62:12:0d:6a:cc:21:fe:be:db:b6:e9:dd:21:46:
69:26:7f:8d:bc:3f:fa:4c:0b:19:8b:58:86:7c:95:
b0:82:6a:86:f7:43:83:d9:51:ff:5b:a9:c2:7e:7e:
05:c0:b5:67:ab:99:be:0b:c6:2f:24:23:c2:83:8c:
3c:ca:08:17:39:5f:b3:83:08:01:74:83:9c:96:66:
ac:af:9b:9a:d3:a0:4b:37:0a:68:6d:25:9b:5b:2b:
93:68:02:5d:be:3e:f4:50:f2:68:63:76:0b:c0:41:
c8:cc:7e:b2:a4:f8:16:32:9d:4c:06:91:2b:13:5a:
03:5a:7f:4f:4f:e0:a5:a1:4d:a4:d1:21:ef:5f:f5:
12:04:43:a9:bd:9e:1f:0a:ca:95:ac:21:4f:11:c2:
12:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:85:23:04:C8:4D:41:B3:C6:1A:61:E7:56:88:81:80:90:66:49:FD
X509v3 Authority Key Identifier:
keyid:AA:BC:9F:64:A4:8E:EA:55:21:E1:E9:FA:A8:10:79:8F:08:95:46:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qryfZKSO6lUh4en6qBB5jwiVRrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/k4UjBMhNQbPGGmHnVoiBgJBmSf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:41c0::/29
Signature Algorithm: sha256WithRSAEncryption
31:55:7b:b7:39:c0:6c:39:65:59:44:e7:86:e7:f0:66:7a:b6:
d6:2d:21:f9:91:b8:08:50:50:de:84:c6:e2:ec:e0:a4:64:22:
dc:12:65:37:f1:cd:1c:7d:25:7c:fb:b7:14:bf:39:44:42:ee:
9b:5c:42:45:69:8c:e0:d8:83:f2:51:6f:95:f0:ad:54:ec:a2:
39:c3:7f:64:66:18:21:fc:ce:ad:10:a5:f3:af:4b:39:71:e0:
a3:dc:ef:f2:3a:64:fc:41:8f:39:d9:6b:1b:3d:19:c8:1a:fd:
43:05:0f:d3:7f:b9:7a:2c:04:3b:13:bd:6d:7d:9d:c1:6c:78:
e3:98:be:30:85:67:5d:4f:68:46:52:c8:3f:37:6b:41:94:12:
38:79:63:45:fb:b1:2b:4a:5d:52:4b:1a:f4:d3:73:3f:98:38:
11:0a:09:70:dc:b9:04:9f:85:4c:1e:7f:68:f6:10:29:5f:5d:
69:ec:41:7c:e4:d0:b0:f4:40:da:9a:cc:af:24:4b:ab:79:73:
14:90:8b:3f:ac:e5:04:2d:25:b3:37:6e:b7:1a:a7:99:22:2a:
7c:bf:ea:59:a4:cd:bf:af:85:c0:69:27:de:ae:5f:f0:0c:13:
ce:19:3a:bf:83:81:68:4e:ae:a3:95:1a:ef:83:1f:23:f7:9b:
4d:9b:6c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:42:41 2026 by rpki-client