Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/K7J8SU2ONJde1_XoPCAxg3_UhsY.roa
File: K7J8SU2ONJde1_XoPCAxg3_UhsY.roa (raw, json)
Hash identifier: IHipWsFTiehUckIWg3IwCtFkKfvzXuaM4MqoN3r8AzA=
Subject key identifier: 2B:B2:7C:49:4D:8E:34:97:5E:D7:F5:E8:3C:20:31:83:7F:D4:86:C6
Certificate issuer: /CN=6bf44071ba5a6778721519a1862212804e6034cc
Certificate serial: 019D8C19E734575810DC75E54784B88C0A52
Authority key identifier: 6B:F4:40:71:BA:5A:67:78:72:15:19:A1:86:22:12:80:4E:60:34:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/K7J8SU2ONJde1_XoPCAxg3_UhsY.roa
Signing time: Tue 14 Apr 2026 13:06:40 +0000
ROA not before: Tue 14 Apr 2026 13:06:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41960
IP address blocks: 45.10.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8c:19:e7:34:57:58:10:dc:75:e5:47:84:b8:8c:0a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf44071ba5a6778721519a1862212804e6034cc
Validity
Not Before: Apr 14 13:06:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bb27c494d8e34975ed7f5e83c2031837fd486c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:bd:ee:2f:f7:ac:5f:ad:da:40:0b:82:70:
07:0c:20:74:94:7f:75:10:64:55:b9:90:33:00:5e:
85:aa:b8:99:fa:a4:c3:13:d1:88:95:2a:83:55:44:
eb:ea:07:d3:4d:1c:b7:87:60:6e:9d:08:1d:19:a4:
63:20:1e:81:69:0c:82:30:db:0b:04:86:6c:6e:1a:
8e:77:a4:89:3f:e2:fc:74:e1:84:c9:47:17:f2:a0:
b6:f5:ab:42:7b:cd:e5:83:98:e1:5f:c4:b3:ad:40:
79:38:8c:7c:de:84:7d:1f:e9:7c:31:15:58:f2:09:
a3:99:eb:2d:ea:bf:4d:dd:73:70:8e:cf:8c:61:7d:
f1:79:89:af:e6:60:d4:ba:51:86:cf:9e:c1:36:8d:
0a:30:9b:6d:2c:79:3e:e0:5e:f8:96:d6:d9:d2:e9:
f6:f6:18:40:7d:5a:22:55:43:33:1e:28:5a:01:db:
e1:e6:29:75:b1:aa:ee:a2:2c:39:42:0b:7a:93:b3:
e6:1e:b9:e6:1c:6e:50:a9:5d:93:d0:ac:d6:09:83:
e6:b0:d6:67:40:82:1a:82:ed:97:79:70:ab:eb:2e:
43:f6:8a:23:7b:ae:a1:57:d3:04:ff:ef:07:a7:6a:
b2:91:94:e6:e8:b0:0c:50:9d:15:b7:fd:05:82:c6:
22:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B2:7C:49:4D:8E:34:97:5E:D7:F5:E8:3C:20:31:83:7F:D4:86:C6
X509v3 Authority Key Identifier:
keyid:6B:F4:40:71:BA:5A:67:78:72:15:19:A1:86:22:12:80:4E:60:34:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/K7J8SU2ONJde1_XoPCAxg3_UhsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.124.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:d5:2e:ac:ee:26:6c:33:f5:f7:2d:d5:ea:2f:63:70:dc:29:
1d:db:91:ad:83:63:b7:fd:58:72:5f:98:7d:90:06:4e:4e:f5:
5e:46:8e:25:3c:f6:31:2f:8a:d9:93:36:b1:c4:ba:f2:fb:d6:
73:8d:f6:ca:dc:50:7a:fd:e1:44:9b:27:b1:0e:e3:6b:a3:a5:
fa:2b:f4:4c:03:e8:7c:52:3e:c7:eb:65:c7:73:48:a3:20:e7:
53:42:ba:13:c2:6d:0c:6a:0c:6c:d3:03:4c:b7:cd:c8:f8:ef:
ab:f9:8f:c3:15:85:0f:33:0e:46:eb:09:09:99:6f:85:72:79:
3d:8e:e9:e2:f1:47:3a:4e:f3:48:8b:c1:06:49:93:0a:31:e5:
6d:11:cb:14:da:43:00:a1:bf:b9:0f:7c:c1:fc:b0:2f:19:d4:
db:49:9e:ff:a6:03:bd:ef:0e:7e:f3:bc:4c:fe:ee:40:07:78:
7d:0d:29:cd:cd:71:70:34:e9:41:d2:b4:a2:f3:cc:9d:d8:dd:
1e:45:05:e0:4e:83:d4:24:2b:9b:48:69:4e:0f:2d:7d:39:1d:
ba:a4:ed:de:98:a2:de:ae:98:18:25:ce:b7:a6:0a:85:79:fb:
12:fa:f0:36:d2:dd:b0:cc:a8:fd:2c:2a:52:58:77:e8:96:92:
4d:22:9b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:51:14 2026 by rpki-client