Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/n5lQStc7m-_-_zQ7umU0wUJyNFk.roa
File: n5lQStc7m-_-_zQ7umU0wUJyNFk.roa (raw, json)
Hash identifier: h6Zxfg/kCRb04oU4RBZA+cZb2VEeikXKo5vQmudYXfg=
Subject key identifier: 9F:99:50:4A:D7:3B:9B:EF:FE:FF:34:3B:BA:65:34:C1:42:72:34:59
Certificate issuer: /CN=d2f3f8686b617c5f91c9bdc1973ba29a1e4a0906
Certificate serial: 019F5F97AD357239B9BFB71753887709425D
Authority key identifier: D2:F3:F8:68:6B:61:7C:5F:91:C9:BD:C1:97:3B:A2:9A:1E:4A:09:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vP4aGthfF-Ryb3Blzuimh5KCQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/n5lQStc7m-_-_zQ7umU0wUJyNFk.roa
Signing time: Tue 14 Jul 2026 07:46:43 +0000
ROA not before: Tue 14 Jul 2026 07:46:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6939
IP address blocks: 2a12:72c0::/29 maxlen: 32
2a12:7440::/29 maxlen: 29
2a12:74c0::/29 maxlen: 32
2a12:7540::/29 maxlen: 32
2a12:9ec0::/29 maxlen: 32
2a12:9f40::/29 maxlen: 32
2a12:9fc0::/29 maxlen: 32
2a12:a140::/29 maxlen: 32
2a12:a1c0::/29 maxlen: 32
2a12:a240::/29 maxlen: 32
2a12:a2c0::/29 maxlen: 32
2a12:a540::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/0vP4aGthfF-Ryb3Blzuimh5KCQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/0vP4aGthfF-Ryb3Blzuimh5KCQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vP4aGthfF-Ryb3Blzuimh5KCQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:97:ad:35:72:39:b9:bf:b7:17:53:88:77:09:42:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f3f8686b617c5f91c9bdc1973ba29a1e4a0906
Validity
Not Before: Jul 14 07:46:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f99504ad73b9beffeff343bba6534c142723459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:98:96:d8:97:7f:17:02:68:c3:d1:29:f7:e7:
d7:83:74:b3:88:9d:a6:48:d4:ac:57:73:a9:dd:27:
6d:af:98:b6:c3:fe:3d:a6:03:61:70:9e:fc:c5:fc:
ba:e7:97:8d:04:ab:06:07:bd:d0:2a:ad:cc:93:b0:
b5:43:6f:15:83:e5:05:f5:89:c1:ef:22:d5:88:bf:
be:94:1f:39:5a:93:84:14:0d:44:ee:96:50:ca:15:
8f:91:6b:b3:92:1e:fe:a3:d1:d3:02:43:dc:c8:8a:
d3:a4:cb:ff:1b:d5:00:e8:c8:f0:e8:0a:12:a5:5f:
1a:85:20:28:b0:85:7f:54:cc:f2:ae:dd:e3:db:71:
0e:e9:75:c1:e7:12:fe:d1:21:c6:30:24:f2:18:b3:
b2:bd:69:db:b6:16:8f:1e:a1:44:71:a3:ae:b1:a8:
3f:65:f2:cc:06:72:8f:bb:f6:a0:ac:e7:8e:c7:22:
72:b8:af:4d:d1:93:35:0c:26:35:d9:b5:ff:6d:35:
9d:eb:f0:4b:2e:70:6d:6c:9b:a5:09:ea:db:92:c9:
81:21:76:6f:9d:fd:25:0e:04:fd:02:7c:dc:0f:1f:
57:9e:fc:df:ca:2e:bb:5b:6a:17:37:0c:61:2e:ac:
a1:f8:17:50:d4:8f:ed:03:f9:51:80:88:e1:5b:c9:
dc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:99:50:4A:D7:3B:9B:EF:FE:FF:34:3B:BA:65:34:C1:42:72:34:59
X509v3 Authority Key Identifier:
keyid:D2:F3:F8:68:6B:61:7C:5F:91:C9:BD:C1:97:3B:A2:9A:1E:4A:09:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vP4aGthfF-Ryb3Blzuimh5KCQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/n5lQStc7m-_-_zQ7umU0wUJyNFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/0vP4aGthfF-Ryb3Blzuimh5KCQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:72c0::/29
2a12:7440::/29
2a12:74c0::/29
2a12:7540::/29
2a12:9ec0::/29
2a12:9f40::/29
2a12:9fc0::/29
2a12:a140::/29
2a12:a1c0::/29
2a12:a240::/29
2a12:a2c0::/29
2a12:a540::/29
Signature Algorithm: sha256WithRSAEncryption
38:cd:42:7b:fa:d8:01:4f:2d:ef:81:3e:fe:36:d8:d3:7b:d7:
6d:46:51:ae:ff:e2:f5:6a:55:c3:f2:1c:12:d4:1c:bb:79:c4:
3a:02:80:70:ad:57:86:20:7d:79:c5:86:40:92:cb:87:8b:f2:
82:39:43:f4:cc:4d:4c:64:1d:4c:a4:19:5e:f5:2f:a4:d0:c4:
6a:f3:79:33:2a:bf:51:a5:38:3f:5c:dc:03:70:41:72:77:b2:
96:3c:67:ea:23:36:fa:b0:52:c9:ff:a5:7c:38:e5:e3:b2:ae:
1d:21:7c:6d:89:05:3d:8f:15:bf:80:a1:ed:8c:30:40:7f:be:
64:22:bc:fe:91:5b:86:55:50:18:18:4f:66:36:04:7c:74:5b:
5e:94:ef:1c:8b:17:32:fe:a8:9d:fc:2e:70:4b:77:42:b2:ad:
d5:ff:6b:5e:37:da:01:9e:10:89:b1:75:4d:98:af:00:c7:ad:
4d:0a:68:62:ea:d2:55:ab:4e:bf:2c:d0:9f:32:58:ce:7d:69:
f2:0a:58:8c:29:1e:0b:3b:54:ef:f4:8c:e2:be:5a:24:54:ac:
c5:af:5d:14:1d:85:1a:10:8c:20:14:4b:b2:c0:07:59:9a:72:
db:56:a0:0f:83:b8:8c:fa:67:65:8d:8b:c9:94:60:15:3c:3c:
c7:58:1c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 06:23:35 2026 by rpki-client