Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/kh5yPFaKfgkZR8Qr1eXsjft9h9o.roa
File: kh5yPFaKfgkZR8Qr1eXsjft9h9o.roa (raw, json)
Hash identifier: XQrVcnGmhb+2tWmD6aom96wil57azJpyd6STapB4Vso=
Subject key identifier: 92:1E:72:3C:56:8A:7E:09:19:47:C4:2B:D5:E5:EC:8D:FB:7D:87:DA
Certificate issuer: /CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f
Certificate serial: 01A05BE77C2B8C9F389157AE6350D6BD39F1
Authority key identifier: C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/kh5yPFaKfgkZR8Qr1eXsjft9h9o.roa
Signing time: Tue 01 Sep 2026 07:38:12 +0000
ROA not before: Tue 01 Sep 2026 07:38:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34997
IP address blocks: 2a12:79c0:e000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:e7:7c:2b:8c:9f:38:91:57:ae:63:50:d6:bd:39:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f
Validity
Not Before: Sep 1 07:38:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=921e723c568a7e091947c42bd5e5ec8dfb7d87da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:13:0a:a6:94:c0:ba:b6:5f:e4:64:88:e7:f9:
f2:43:97:b2:a3:fd:de:a1:6b:71:c1:82:75:3e:78:
d3:a8:97:19:6d:c4:d5:d3:85:e8:aa:ab:83:26:06:
28:c6:bf:b8:56:45:45:80:42:ea:8f:6a:22:85:f1:
81:d8:a4:68:3c:2f:d8:fc:ed:a7:3f:81:69:04:27:
23:60:63:62:ff:6a:f4:f2:d5:96:43:73:ea:8d:11:
01:ba:c8:e2:cd:3a:8a:44:4d:4b:5b:31:d3:d2:6b:
d3:56:02:4f:13:b4:29:f1:29:fb:37:92:8b:c5:c6:
a1:c5:21:35:dc:da:e9:38:d5:8a:c6:f8:23:3b:3b:
fe:34:47:3e:28:1d:e2:5f:21:9d:fb:b1:5e:1f:f2:
31:fa:51:25:81:2f:36:b4:c2:64:55:e9:4e:d8:c7:
0e:a8:8d:58:5e:c7:ad:5d:3b:47:8e:de:da:0e:61:
64:aa:54:a1:f1:1b:dc:f6:02:df:cb:d7:6e:0c:de:
a8:e8:c8:9c:d2:99:75:15:8f:31:c5:37:d7:57:76:
96:a2:69:44:92:a2:6a:20:f6:68:6e:d9:10:9a:c4:
a6:b5:e2:92:1d:77:ad:86:22:07:97:51:47:68:ff:
2e:50:20:b0:4e:f6:81:fc:0c:65:24:17:53:a7:5f:
bd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1E:72:3C:56:8A:7E:09:19:47:C4:2B:D5:E5:EC:8D:FB:7D:87:DA
X509v3 Authority Key Identifier:
keyid:C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/kh5yPFaKfgkZR8Qr1eXsjft9h9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:79c0:e000::/36
Signature Algorithm: sha256WithRSAEncryption
57:d6:23:d9:d7:e3:5d:a3:a8:e8:13:5e:49:10:c4:2d:5f:82:
7a:f2:52:ed:6a:f3:a1:16:f9:8f:d2:2e:23:0b:9f:06:6f:3d:
58:11:1d:06:1c:99:9d:1c:4c:07:82:1a:fa:a9:38:d0:a6:c5:
cf:10:8c:c8:d3:f1:c9:8f:ae:30:ee:6e:ca:62:eb:84:4a:5e:
83:67:d2:ba:49:33:27:e5:0d:72:09:fe:0a:51:4d:fa:eb:81:
ea:c7:84:07:eb:f7:f8:51:84:14:e0:28:78:f1:b2:7b:79:e0:
33:a8:a4:6b:03:40:5e:4d:8f:6e:ce:ca:5c:d8:f4:1c:8c:29:
18:f4:bf:3a:c2:88:c8:d8:4c:7f:c3:fd:40:38:7a:f6:0b:f2:
67:ef:3f:2f:81:26:12:0e:fd:9a:fa:a8:42:5e:1a:f3:1b:7c:
ab:83:a0:80:f7:5d:78:95:70:12:60:48:4d:26:b2:fa:a7:a3:
09:20:7a:84:f6:41:d1:17:76:4a:0c:9d:ff:b7:0c:96:e2:87:
69:20:52:1f:a2:3e:d3:e6:67:ad:84:d5:c9:ca:3f:b6:1f:91:
56:f1:70:60:05:df:2d:74:7a:eb:98:18:bb:16:20:c8:8e:49:
b6:48:91:f8:5e:66:f0:a5:58:98:a0:a5:b6:31:13:36:55:a7:
f6:c5:25:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:59:29 2026 by rpki-client