Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/kZAgbSjcA3AUI27WYX_SLodgwxM.roa
File: kZAgbSjcA3AUI27WYX_SLodgwxM.roa (raw, json)
Hash identifier: a+GdP0YC4+kyyPVC2mzxcdiH+fxAgf7/mlxAOoguZs4=
Subject key identifier: 91:90:20:6D:28:DC:03:70:14:23:6E:D6:61:7F:D2:2E:87:60:C3:13
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019EB677E68ACD149873C6D6FFA2F5456662
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/kZAgbSjcA3AUI27WYX_SLodgwxM.roa
Signing time: Thu 11 Jun 2026 11:36:11 +0000
ROA not before: Thu 11 Jun 2026 11:36:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214266
IP address blocks: 2a05:b1c0::/29 maxlen: 29
2a11:3cc0::/29 maxlen: 29
2a11:5680::/29 maxlen: 29
2a11:5e00::/29 maxlen: 29
2a12:bd00::/29 maxlen: 29
2a12:dc80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:77:e6:8a:cd:14:98:73:c6:d6:ff:a2:f5:45:66:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jun 11 11:36:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9190206d28dc037014236ed6617fd22e8760c313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:86:5c:0d:28:62:ed:08:47:d8:6a:f6:ab:0a:
76:af:79:92:13:23:cd:10:04:19:c5:10:8a:0b:1b:
7f:03:61:43:78:86:51:53:26:23:17:43:f9:6e:d7:
d8:49:56:76:e3:dd:39:fd:f5:86:28:81:62:f2:df:
e8:3e:fe:4b:48:e1:a7:45:63:f8:69:cf:ae:ca:87:
29:8f:e0:4f:76:ba:8e:1d:d4:8e:0c:d1:63:b2:ef:
2b:cd:ec:7c:73:7d:c7:22:ec:78:2b:39:e3:4f:86:
39:4e:4c:6b:ba:4b:c1:c4:02:f6:e7:9a:71:af:9d:
e5:ed:a5:f4:c3:09:dd:ee:8f:80:e7:5c:30:e2:a4:
ec:fa:c0:5d:d3:fa:00:dc:f4:42:d9:5b:28:85:62:
65:e4:75:9a:64:d4:56:e6:06:1a:5d:f8:88:1a:5e:
3f:37:4a:6f:a9:f5:d9:fa:48:72:1c:20:1e:6d:01:
ee:b7:5c:3a:5a:14:37:d5:ab:5a:31:72:6c:e7:9e:
d1:a7:82:03:be:3c:bc:e3:12:aa:2e:b0:2c:13:1e:
46:3c:53:b2:b0:1f:bc:d2:65:61:35:04:dd:b9:22:
8c:39:08:03:f6:07:cf:f0:cc:fd:e1:05:89:d1:6f:
75:b1:70:7a:79:9c:4a:54:24:6f:22:73:25:0a:98:
27:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:90:20:6D:28:DC:03:70:14:23:6E:D6:61:7F:D2:2E:87:60:C3:13
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/kZAgbSjcA3AUI27WYX_SLodgwxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b1c0::/29
2a11:3cc0::/29
2a11:5680::/29
2a11:5e00::/29
2a12:bd00::/29
2a12:dc80::/29
Signature Algorithm: sha256WithRSAEncryption
2f:6b:26:92:3c:bb:de:77:85:f9:f5:09:20:e6:6b:dc:a6:51:
68:c7:61:5c:72:b9:70:2e:03:1f:a4:b0:ca:31:a8:17:11:61:
45:56:6d:4a:37:e7:6a:de:c6:24:35:5d:12:a8:06:59:50:5e:
0a:c9:77:26:7a:29:b6:5d:6d:1e:c7:72:cd:04:fa:11:7c:49:
a9:f2:c8:d6:f8:28:f4:e6:0e:e7:c9:35:ec:0f:56:e3:c7:24:
cd:5a:0a:11:13:89:c9:72:4e:56:6b:82:2b:68:03:af:df:f3:
cb:cb:5d:13:11:4f:95:76:dd:63:a6:0d:d4:19:91:69:6c:8d:
9f:9e:cb:84:4c:ec:d0:81:ac:1c:8b:85:b8:28:3b:75:6b:44:
58:ea:66:20:8d:5d:d8:ca:22:fd:c9:5f:3f:a8:05:1f:2d:30:
4a:7f:a0:21:55:b6:3c:e4:43:8b:bd:9e:53:25:2f:57:69:fa:
ba:44:29:23:de:3e:ee:e5:2a:7b:91:22:50:5f:e4:c9:fd:89:
c5:37:55:0e:46:db:c3:08:08:36:89:19:77:e7:e8:d4:ca:69:
6f:77:2a:f7:3b:0b:27:1c:4a:34:ee:34:ec:eb:ce:8b:4b:4c:
38:5c:7c:ee:67:53:71:a7:91:e9:91:50:76:5f:fc:fa:eb:9a:
8f:ae:9e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:39:38 2026 by rpki-client