Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/v09PTIiTUZPph3Yi_kEPVgwcIZ4.roa
File: v09PTIiTUZPph3Yi_kEPVgwcIZ4.roa (raw, json)
Hash identifier: R9E1aPH0OjxDcZt8lCmTXLarXP9Buf8PvZxVyozlqEs=
Subject key identifier: BF:4F:4F:4C:88:93:51:93:E9:87:76:22:FE:41:0F:56:0C:1C:21:9E
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 019F47F5E28E6059C55A76052F3F0916BA44
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/v09PTIiTUZPph3Yi_kEPVgwcIZ4.roa
Signing time: Thu 09 Jul 2026 17:38:44 +0000
ROA not before: Thu 09 Jul 2026 17:38:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 2a11:5c00::/29 maxlen: 29
2a11:76c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e2:8e:60:59:c5:5a:76:05:2f:3f:09:16:ba:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jul 9 17:38:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf4f4f4c88935193e9877622fe410f560c1c219e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:13:91:31:e2:a7:2c:2e:bd:59:b5:7a:86:
73:43:32:ff:83:72:7f:1e:32:12:a6:12:b8:61:ea:
fd:65:ff:b7:43:d9:08:8e:83:74:cf:46:b2:d9:eb:
81:1b:89:d5:03:4d:56:d8:13:79:ee:74:55:a0:86:
bb:db:55:a7:e3:64:97:0c:d3:9a:c1:bf:db:21:da:
70:75:33:b5:1d:65:bb:c0:a2:98:fa:5c:10:a0:6b:
cf:ba:14:48:ff:74:b4:3b:86:e2:10:59:48:53:8f:
cc:05:d9:40:08:bd:e1:2b:11:8b:1f:f8:d7:6e:9c:
b3:79:66:83:8e:43:38:1e:62:a3:52:31:0b:09:8c:
ca:50:74:61:99:49:b1:ae:41:4c:3b:7f:70:a2:0b:
70:dd:96:24:69:05:c8:47:19:a2:cf:ec:e9:39:1e:
7b:58:20:0f:67:2b:ac:73:1a:3b:a9:5c:24:79:09:
f3:3c:73:37:1c:5e:77:8f:19:b5:dc:1a:96:ab:74:
2b:76:fe:cb:4b:a9:aa:3f:b6:5c:82:fb:7b:3c:cb:
80:84:70:1d:07:2e:74:ad:5f:b5:7c:fd:a8:0d:1c:
30:6a:1f:b6:83:f0:81:58:04:b6:5a:5d:6e:4b:b6:
49:39:28:3c:2a:d7:ac:b9:98:de:46:b1:9c:b2:b9:
12:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4F:4F:4C:88:93:51:93:E9:87:76:22:FE:41:0F:56:0C:1C:21:9E
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/v09PTIiTUZPph3Yi_kEPVgwcIZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5c00::/29
2a11:76c0::/29
Signature Algorithm: sha256WithRSAEncryption
0f:26:00:3b:3f:4e:05:c1:2d:30:b0:0b:4c:9a:55:13:07:b0:
05:47:ad:fd:96:d1:c5:e1:52:4c:47:8f:28:3d:55:8b:9c:f4:
a8:59:ad:4a:d3:9e:e1:10:82:55:0d:5f:20:20:ee:62:72:2d:
d0:36:dd:70:c1:9d:c7:87:76:03:0f:db:2a:ba:ff:72:c5:f6:
98:a9:ec:9c:c1:85:2e:c4:af:18:14:0f:55:f5:f0:f6:df:8f:
4c:81:1b:e4:94:7f:c8:ae:56:39:ba:99:70:6e:c8:a4:0f:48:
16:85:66:a9:f8:76:4a:31:8a:c1:8b:0b:d8:c0:07:97:ed:54:
f2:8f:b9:99:1c:da:38:c3:4c:ae:e8:ff:43:3f:9d:5b:36:b1:
27:c4:e0:ce:2a:da:b2:04:37:63:0d:29:b8:fb:a7:69:53:13:
1d:18:25:bb:4e:0e:98:d1:c4:7a:dc:75:53:f6:aa:ba:22:cd:
f0:82:8e:56:12:82:93:4e:9f:d0:23:09:7d:47:c6:ae:2f:c1:
93:b4:2d:58:36:67:ea:a2:90:09:0e:21:1b:20:e2:b4:15:e0:
20:db:c3:cb:d1:44:44:08:9c:1b:1c:a9:b8:32:d0:bc:09:e8:
12:b7:55:d5:0a:0a:95:38:db:e2:c9:26:2a:18:89:fd:b1:7d:
77:bb:f0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:17 2026 by rpki-client