Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/6Y9aK5zEFS0X_p3tftAQ9zOuyOs.roa
File: 6Y9aK5zEFS0X_p3tftAQ9zOuyOs.roa (raw, json)
Hash identifier: bfzfnfrpIqZOFXaAH3C9tM4iUoBkP0SG4crDCxGdL1g=
Subject key identifier: E9:8F:5A:2B:9C:C4:15:2D:17:FE:9D:ED:7E:D0:10:F7:33:AE:C8:EB
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019F674CB02EDD4BC7DB0A90F2867D5478C8
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/6Y9aK5zEFS0X_p3tftAQ9zOuyOs.roa
Signing time: Wed 15 Jul 2026 19:41:46 +0000
ROA not before: Wed 15 Jul 2026 19:41:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215290
IP address blocks: 2a0d:ad44::/32 maxlen: 32
2a11:b4c0::/32 maxlen: 32
2a12:6482::/32 maxlen: 32
2a12:bc80::/32 maxlen: 32
2a12:bc84::/32 maxlen: 32
2a12:d801::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:67:4c:b0:2e:dd:4b:c7:db:0a:90:f2:86:7d:54:78:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 15 19:41:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e98f5a2b9cc4152d17fe9ded7ed010f733aec8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:74:f9:a3:20:66:27:19:12:b5:a2:9a:1e:3f:
59:ba:9e:56:6e:4b:54:54:3c:d5:cb:0c:e9:e4:91:
6e:3c:66:05:9a:f0:ae:a0:74:7b:f0:a6:3c:48:67:
3d:1d:5a:12:34:68:e7:43:74:a0:37:0f:3c:01:9b:
9f:45:ef:4d:6f:84:5e:da:b1:26:4d:f4:95:a6:4c:
a8:a7:29:f5:85:ed:69:62:ca:bc:d5:55:81:e8:a4:
a6:1b:8c:3b:63:b2:d0:a5:5e:c9:6a:49:5d:b0:2d:
47:d3:29:c0:c2:91:75:fe:1c:28:c7:6d:82:29:1a:
ee:d7:cb:ce:b8:f7:a3:e8:46:33:61:b0:0d:d6:b8:
2b:cb:26:bc:3c:b1:b9:c1:3d:ce:c3:3c:91:aa:5f:
f6:ad:e2:6a:2e:60:2c:7a:be:b6:00:94:fa:e0:3c:
c7:ce:37:2e:0c:3a:d3:f9:92:62:a1:bb:04:b6:8a:
bb:38:24:67:41:c3:fa:54:a6:92:dc:b4:e1:40:02:
b4:11:5a:9b:d4:d3:a7:1d:6a:39:7e:09:88:c3:2f:
7e:c3:93:d1:29:cb:a8:bb:9e:a2:4e:54:3f:c8:53:
39:13:2e:35:f4:df:c5:b2:71:eb:6e:99:8b:bb:9d:
e1:ae:a6:2e:35:d5:29:1a:d8:81:54:e5:bc:11:79:
3e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8F:5A:2B:9C:C4:15:2D:17:FE:9D:ED:7E:D0:10:F7:33:AE:C8:EB
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/6Y9aK5zEFS0X_p3tftAQ9zOuyOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:ad44::/32
2a11:b4c0::/32
2a12:6482::/32
2a12:bc80::/32
2a12:bc84::/32
2a12:d801::/32
Signature Algorithm: sha256WithRSAEncryption
77:c6:55:d4:4d:52:f4:2c:eb:2b:74:4c:c7:13:1d:77:ca:59:
55:b0:8c:4b:11:08:0c:19:61:07:d7:2f:10:6e:a1:b1:cd:74:
8d:47:3a:1a:56:dd:f8:bd:c5:46:1e:1b:29:3f:48:0c:4f:eb:
90:63:be:60:2c:70:65:2f:99:78:e3:be:17:15:7a:f1:7b:52:
65:e1:95:22:76:48:44:3c:e2:95:95:30:55:8a:3a:c8:f7:43:
91:b1:06:1a:b7:2e:d0:a5:3a:b5:74:58:c7:9a:53:01:50:a1:
64:a1:0d:70:8d:ed:ed:eb:dc:d9:e7:4d:45:43:cc:77:c5:aa:
06:b4:7c:dc:d9:8b:b4:c7:f3:89:86:15:2d:0a:87:d8:3c:db:
55:ff:3d:f2:79:5b:89:6e:3d:a8:c4:ef:a2:58:cc:d2:62:8d:
20:7a:0b:51:12:3b:96:ea:a9:43:77:06:04:3d:16:80:cf:7b:
e4:f9:c7:88:a3:14:b5:b3:88:5c:68:3b:6c:ef:3e:b7:0b:f1:
26:45:f6:37:67:30:ff:4c:5a:1f:e8:86:54:ce:0b:4b:7e:15:
4c:d2:b4:a0:65:ea:94:79:0d:66:06:3e:3e:92:32:16:9b:79:
06:30:40:61:39:39:5f:1e:e1:83:b9:de:4c:f2:8e:b8:47:71:
b9:64:84:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:23 2026 by rpki-client