Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/kp_i2pjZWCStZ6J6pQgyDWR7Sqg.roa
File: kp_i2pjZWCStZ6J6pQgyDWR7Sqg.roa (raw, json)
Hash identifier: LLIB6t+pAw1QpuEvAEpebhxvws4LvkK/fY8SsOFrje8=
Subject key identifier: 92:9F:E2:DA:98:D9:58:24:AD:67:A2:7A:A5:08:32:0D:64:7B:4A:A8
Certificate issuer: /CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Certificate serial: 019D726959A88EA9618037822F777FAD5F30
Authority key identifier: A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/kp_i2pjZWCStZ6J6pQgyDWR7Sqg.roa
Signing time: Thu 09 Apr 2026 13:23:20 +0000
ROA not before: Thu 09 Apr 2026 13:23:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8434
IP address blocks: 2001:67c:21dc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:69:59:a8:8e:a9:61:80:37:82:2f:77:7f:ad:5f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Validity
Not Before: Apr 9 13:23:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=929fe2da98d95824ad67a27aa508320d647b4aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:13:23:b7:cb:34:f1:e6:93:3c:df:90:7c:
67:e8:60:06:be:b7:b4:c6:b3:11:e6:69:c9:1c:08:
e7:6d:ec:b8:fe:75:eb:76:ab:4b:6b:0e:ce:5a:dc:
db:65:58:84:67:18:40:ea:63:23:3d:77:62:d7:85:
5c:6f:50:75:1d:ca:57:10:6c:6d:99:16:35:16:10:
50:2f:e3:45:f1:e7:20:0d:6f:3e:28:1f:a6:ae:bb:
53:ff:6d:fe:eb:00:9e:a9:b6:d1:0a:88:5f:dd:8e:
8c:38:86:e4:bd:9b:e9:6b:80:37:db:a1:50:f9:ee:
44:44:65:8d:db:12:1f:88:16:38:25:ba:4b:cf:43:
75:26:ff:5b:ba:59:a4:3e:f5:f5:1a:a6:24:c7:5f:
c6:da:31:5b:64:19:ce:51:85:c3:61:55:46:fe:d2:
a7:9b:c1:c6:35:08:f2:90:d1:6e:1b:67:02:af:a9:
24:2b:6e:b2:b7:fe:5b:4f:29:62:b1:2d:61:fb:7f:
55:7f:f2:1b:61:46:f0:21:06:c8:c4:26:20:fb:d2:
a1:10:74:12:e1:8c:e4:18:8f:e5:5c:a4:04:5d:68:
25:e1:90:98:f6:28:80:57:5d:9b:0a:25:1e:f0:a0:
21:31:b3:a3:91:6f:c9:d8:9f:e7:47:f3:e5:76:d5:
d9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9F:E2:DA:98:D9:58:24:AD:67:A2:7A:A5:08:32:0D:64:7B:4A:A8
X509v3 Authority Key Identifier:
keyid:A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/kp_i2pjZWCStZ6J6pQgyDWR7Sqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:21dc::/48
Signature Algorithm: sha256WithRSAEncryption
00:b0:9c:55:78:02:a3:91:db:89:2e:fb:01:89:82:44:9c:88:
93:c3:6f:e5:3a:6e:97:97:bb:e1:cc:b0:af:52:63:fc:65:67:
a5:40:1c:b6:17:fa:a2:ee:c2:7b:3c:38:68:d8:34:1b:1b:5b:
41:92:b0:0f:b2:21:89:1a:3c:a9:6c:a2:6a:33:3c:ca:4c:82:
8e:2a:e2:59:2b:31:be:b7:55:fe:7e:b5:e1:2d:a1:8c:76:c8:
c0:10:30:ad:8d:1d:fb:f6:84:02:1a:17:73:82:8f:50:5b:c9:
6d:17:d6:38:69:0a:04:a7:49:96:eb:0a:ac:a7:67:f2:2d:4e:
10:28:55:46:aa:58:61:6f:f7:46:2a:a3:ef:4d:09:09:e1:e9:
e8:0d:8c:0f:9b:d2:42:be:77:e0:f9:24:66:7c:c4:a4:99:1b:
b0:d5:d1:04:28:33:5e:ff:3e:7b:29:ec:ee:1f:a1:fa:04:5f:
5d:40:bd:ed:48:7a:90:6d:c3:21:21:f5:36:cb:65:4b:d0:6a:
8f:72:b8:a9:0c:46:ff:a8:84:bd:eb:65:88:c2:7a:84:1d:3c:
2f:fe:f7:f4:a9:7e:7b:a3:6e:d7:aa:b1:62:b2:f2:ff:81:bb:
c8:c9:8e:63:19:c1:4d:78:2a:cb:03:be:0b:fd:32:8d:96:1f:
9d:c3:81:dd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ1yaVmojqlhgDeCL3d/rV8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzY2Y5YjY0NjUxNjkyOGI1ZDA2YzJhODE5ZWIyZGJjMGZl
OTkyMGEwHhcNMjYwNDA5MTMyMzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjlmZTJkYTk4ZDk1ODI0YWQ2N2EyN2FhNTA4MzIwZDY0N2I0YWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWgTI7fLNPHmkzzfkHxn6GAGvre0
xrMR5mnJHAjnbey4/nXrdqtLaw7OWtzbZViEZxhA6mMjPXdi14Vcb1B1HcpXEGxt
mRY1FhBQL+NF8ecgDW8+KB+mrrtT/23+6wCeqbbRCohf3Y6MOIbkvZvpa4A326FQ
+e5ERGWN2xIfiBY4JbpLz0N1Jv9bulmkPvX1GqYkx1/G2jFbZBnOUYXDYVVG/tKn
m8HGNQjykNFuG2cCr6kkK26yt/5bTylisS1h+39Vf/IbYUbwIQbIxCYg+9KhEHQS
4YzkGI/lXKQEXWgl4ZCY9iiAV12bCiUe8KAhMbOjkW/J2J/nR/PldtXZAQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJKf4tqY2VgkrWeieqUIMg1ke0qoMB8GA1UdIwQY
MBaAFKPPm2RlFpKLXQbCqBnrLbwP6ZIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzgtYlpHVVdrb3RkQnNLb0dlc3R2QV9wa2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zOTRkMDctMDVjYy00ZjcyLWJkNDYt
Mjg5Njk2Y2M5OWI5LzEva3BfaTJwalpXQ1N0WjZKNnBRZ3lEV1I3U3FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zOTRkMDctMDVjYy00ZjcyLWJkNDYtMjg5Njk2Y2M5OWI5
LzEvbzgtYlpHVVdrb3RkQnNLb0dlc3R2QV9wa2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCHc
MA0GCSqGSIb3DQEBCwUAA4IBAQAAsJxVeAKjkduJLvsBiYJEnIiTw2/lOm6Xl7vh
zLCvUmP8ZWelQBy2F/qi7sJ7PDho2DQbG1tBkrAPsiGJGjypbKJqMzzKTIKOKuJZ
KzG+t1X+frXhLaGMdsjAEDCtjR379oQCGhdzgo9QW8ltF9Y4aQoEp0mW6wqsp2fy
LU4QKFVGqlhhb/dGKqPvTQkJ4enoDYwPm9JCvnfg+SRmfMSkmRuw1dEEKDNe/z57
KezuH6H6BF9dQL3tSHqQbcMhIfU2y2VL0GqPcripDEb/qIS962WIwnqEHTwv/vf0
qX57o27XqrFisvL/gbvIyY5jGcFNeCrLA74L/TKNlh+dw4Hd
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:01:20 2026 by rpki-client