Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/9Wp0yEODLyFtAabFmIGNXyJJH0M.roa
File: 9Wp0yEODLyFtAabFmIGNXyJJH0M.roa (raw, json)
Hash identifier: MDU9oyYCQf0/qP8XxFFcq2DKmq9IodMcE6wWVXgzdfk=
Subject key identifier: F5:6A:74:C8:43:83:2F:21:6D:01:A6:C5:98:81:8D:5F:22:49:1F:43
Certificate issuer: /CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Certificate serial: 019F236867F9E12D06063C93EA2554CF5E94
Authority key identifier: 6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/9Wp0yEODLyFtAabFmIGNXyJJH0M.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216091
IP address blocks: 2a0a:cd83::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:67:f9:e1:2d:06:06:3c:93:ea:25:54:cf:5e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f56a74c843832f216d01a6c598818d5f22491f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:23:1e:63:28:a0:c8:c1:d4:eb:56:9e:7a:db:
2c:a0:3d:4f:3b:da:ca:47:ff:91:67:93:fa:0b:34:
9a:b5:4c:97:bf:df:fc:e1:1a:6c:f7:b8:72:83:e4:
eb:65:09:97:e9:9d:58:ba:3c:34:21:d7:5c:e7:33:
40:c0:46:05:51:4a:25:86:97:4f:d7:e8:7c:7d:2a:
47:c3:e8:20:79:22:7b:89:fa:6c:98:ca:df:64:12:
a2:7c:cb:0a:9b:60:47:25:ff:40:53:59:c8:4d:74:
db:58:fa:18:80:32:4b:9e:bc:c1:f8:a7:ae:bd:b4:
36:ae:2d:e6:4d:2d:81:b6:44:72:36:d0:17:0d:53:
ef:cc:8e:55:4d:92:6f:2d:f6:ae:53:0b:04:19:68:
70:4b:5f:9a:1e:da:bb:8a:6a:c9:f5:ed:8a:9b:7e:
8f:b8:6f:e4:ae:fc:35:6e:7a:33:02:ef:ba:38:7b:
c2:88:94:b9:ee:fb:92:d6:20:09:67:c6:ed:9b:d3:
b4:91:08:ca:a6:45:16:f4:8a:17:ed:09:ae:ba:54:
9a:bb:16:1f:ac:22:70:55:b2:31:88:a2:09:25:52:
ae:a2:09:14:ea:ad:13:29:e3:87:f3:a1:39:cf:92:
18:40:3d:4a:df:22:ee:b3:2a:74:11:66:04:43:b6:
29:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6A:74:C8:43:83:2F:21:6D:01:A6:C5:98:81:8D:5F:22:49:1F:43
X509v3 Authority Key Identifier:
keyid:6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/9Wp0yEODLyFtAabFmIGNXyJJH0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:cd83::/32
Signature Algorithm: sha256WithRSAEncryption
30:03:9b:b4:d6:a5:a7:c4:ca:a8:6a:22:c5:c3:02:ad:92:ef:
15:d9:4b:50:38:41:33:19:b0:32:6b:c9:e2:74:d4:55:74:b6:
1c:3e:8e:34:2e:87:a8:da:69:81:76:11:e7:e9:af:a1:d0:9b:
47:40:37:56:e4:14:fe:78:fa:ec:78:53:74:a1:8e:b1:04:56:
b7:14:ef:f3:9d:50:21:f6:e9:56:3b:c5:54:15:17:fa:5c:d8:
58:e4:be:2c:d8:36:2c:d3:64:5c:b0:a7:55:4a:78:4a:fb:d5:
33:68:77:34:1e:1f:94:16:3e:55:29:4c:59:69:33:b2:a2:8e:
11:9c:11:5d:d4:55:04:5e:fa:d2:7d:28:dc:61:10:7b:8b:9f:
2a:c1:ab:9b:a0:22:05:cd:e7:92:e2:bb:a5:52:d8:5d:55:fb:
38:50:cb:df:58:95:9e:09:89:b8:f7:d1:13:8f:c3:b4:ea:a5:
e1:82:43:01:07:16:bd:24:57:71:ae:d6:bf:50:d7:ea:38:11:
86:8b:7a:d0:f3:f5:8b:e8:c4:36:21:21:74:1c:c8:13:bb:e4:
34:57:a7:9e:88:df:08:cd:48:7c:86:27:50:af:59:5e:89:b9:
73:cf:9f:dd:1b:37:38:02:3a:38:2b:fb:f8:4f:be:1c:46:1d:
11:a9:2d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:47:59 2026 by rpki-client