Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0uYEl61EgSrOtFU-mWmoG7_B7K0.roa
File: 0uYEl61EgSrOtFU-mWmoG7_B7K0.roa (raw, json)
Hash identifier: 4nMtyfXfeQc1AYTl28qb2hlZZ4wRG7XKe6XfmoZWedU=
Subject key identifier: D2:E6:04:97:AD:44:81:2A:CE:B4:55:3E:99:69:A8:1B:BF:C1:EC:AD
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A162EAC7DC91BA997979B232EFB278DE57
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0uYEl61EgSrOtFU-mWmoG7_B7K0.roa
Signing time: Thu 22 Oct 2026 09:21:55 +0000
ROA not before: Thu 22 Oct 2026 09:21:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218347
IP address blocks: 2a0c:9a40:e150::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:ea:c7:dc:91:ba:99:79:79:b2:32:ef:b2:78:de:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Oct 22 09:21:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2e60497ad44812aceb4553e9969a81bbfc1ecad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:9f:4f:c4:dd:df:dd:18:bf:b5:74:a6:81:
c6:99:5d:dc:0b:ff:b5:fd:fc:4e:a0:1b:50:44:68:
f1:19:dc:a8:09:9e:90:8c:d8:fe:8d:ab:7f:a2:6a:
34:e8:84:9f:67:12:19:b0:59:52:ec:06:23:03:10:
8a:41:3b:da:3d:f4:9f:56:a0:02:ef:ce:3b:0b:51:
53:e4:3a:5b:77:42:2f:2f:10:13:dc:ed:9c:90:23:
60:aa:6a:1f:9a:2b:0d:d7:37:a3:4c:5a:53:b4:76:
14:98:da:58:5e:b9:8a:91:d6:71:3e:6f:8e:30:f3:
1c:46:c7:98:e3:8c:e0:fe:3e:40:5c:62:da:a7:20:
bb:89:7d:94:70:0e:13:d3:9c:27:22:50:db:aa:5b:
c1:b8:f9:b4:fe:ad:14:46:a7:cb:7a:f8:1f:31:d4:
62:93:e1:da:b5:43:48:a8:de:d6:5b:6a:04:74:97:
f8:32:ac:26:97:95:ae:30:a5:57:4c:00:68:e4:e1:
3e:1b:98:5c:c0:4c:43:07:d7:f7:d3:ec:73:f3:6f:
da:55:7d:3c:22:5d:f9:87:50:98:da:a3:f6:43:65:
40:eb:f5:5f:b3:cc:6c:29:1d:d2:4f:b9:b8:4e:33:
d4:20:3a:0f:7f:f7:de:c1:63:dc:f8:bf:c9:d5:c2:
b6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E6:04:97:AD:44:81:2A:CE:B4:55:3E:99:69:A8:1B:BF:C1:EC:AD
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0uYEl61EgSrOtFU-mWmoG7_B7K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:e150::/48
Signature Algorithm: sha256WithRSAEncryption
22:9a:41:6e:79:95:5a:f7:0b:91:e7:96:7a:c1:91:1c:aa:dc:
da:bd:51:16:00:9e:8e:0d:69:63:fa:da:0c:a8:dd:40:47:5c:
01:f8:a0:15:8d:c9:87:a8:8d:50:6e:d6:76:13:8d:59:fa:c1:
92:32:d9:26:eb:d1:6f:40:f9:22:0f:03:c9:26:fe:13:df:14:
ca:bf:11:5a:1c:b3:67:47:52:7d:f7:7c:0b:de:6b:0f:16:80:
1c:75:9a:f3:e9:b1:8f:e9:dd:f3:22:fa:7b:f3:db:a0:35:6c:
1c:bd:4e:df:e7:e8:bf:62:61:d6:b6:d4:23:a2:59:6b:d0:5a:
2f:48:fe:67:a3:e3:2e:d3:55:fc:66:e8:2f:68:4f:e5:39:f0:
d2:92:a8:6c:6f:5a:7a:42:6f:4d:33:09:c0:c9:30:d2:6c:08:
c2:f9:57:de:9a:fc:ea:65:5f:50:b0:54:b4:74:7a:66:9b:4e:
00:8f:f5:0d:69:ea:1b:b1:4a:31:6f:6c:9a:bf:f2:eb:5c:55:
3c:1c:64:f3:65:ed:45:82:cb:e5:85:34:c9:e3:a8:bf:a3:5e:
2c:5a:b3:3f:d0:ee:2a:d3:2f:04:e9:2f:ec:d5:89:ec:b5:30:
1c:c2:22:73:65:ea:11:05:e1:38:2c:1e:21:09:0c:5a:88:70:
15:a4:52:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:15:21 2026 by rpki-client