Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/9DmpQ_Juweu1BZdx3tjV6zPjugg.roa
File: 9DmpQ_Juweu1BZdx3tjV6zPjugg.roa (raw, json)
Hash identifier: gMh4ta7wRF/U6uev/ygIyJ7YDMmQlbagLyS95pCBUDk=
Subject key identifier: F4:39:A9:43:F2:6E:C1:EB:B5:05:97:71:DE:D8:D5:EB:33:E3:BA:08
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A1182D5758ED0A4509BC0ABC40042AC2A9
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/9DmpQ_Juweu1BZdx3tjV6zPjugg.roa
Signing time: Wed 07 Oct 2026 21:03:07 +0000
ROA not before: Wed 07 Oct 2026 21:03:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218908
IP address blocks: 2a0c:9a46:2e00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:2d:57:58:ed:0a:45:09:bc:0a:bc:40:04:2a:c2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Oct 7 21:03:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f439a943f26ec1ebb5059771ded8d5eb33e3ba08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c0:de:f0:fb:25:05:9b:7b:55:99:4b:9f:f4:
11:e9:df:3b:f5:79:c2:26:1a:bb:30:ae:f5:85:df:
60:7a:48:e3:65:6c:16:ba:15:ca:95:16:a7:e0:bc:
83:8e:04:bb:35:f8:35:fb:76:9d:1b:dd:74:fb:bc:
51:bd:29:ac:4c:e6:ac:ac:40:e8:81:d4:fe:8d:ae:
d9:c3:8f:27:79:d6:c1:e0:23:11:ab:36:18:14:cf:
09:41:64:5d:39:99:a9:1c:0c:08:60:ee:fa:3a:ce:
c9:7b:bb:9d:ae:2b:07:71:7b:1b:e1:94:c3:db:69:
17:e1:26:80:57:d0:1c:a6:02:78:c2:86:ee:0e:bd:
a8:f6:d8:78:8e:f9:a3:0b:ca:03:f8:73:1f:35:13:
5c:83:f9:e9:af:88:c8:5e:3e:01:49:33:fb:34:c0:
bb:4f:b4:6f:b4:6a:61:52:a2:ca:53:58:f0:19:1f:
2f:20:1b:59:d8:c7:ef:24:5a:12:2a:8a:17:96:ba:
90:01:34:ff:01:23:aa:fa:80:8e:da:9c:2b:af:92:
36:cf:94:e7:a3:66:8f:3c:2c:e0:f6:78:97:d8:af:
6e:4a:d7:ec:9f:a6:70:ff:90:66:b1:a4:34:1d:75:
7c:f5:d6:1f:0a:7d:30:58:d6:31:2c:fa:da:57:6f:
6e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:39:A9:43:F2:6E:C1:EB:B5:05:97:71:DE:D8:D5:EB:33:E3:BA:08
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/9DmpQ_Juweu1BZdx3tjV6zPjugg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a46:2e00::/40
Signature Algorithm: sha256WithRSAEncryption
b0:e0:b3:5a:ed:78:d5:e6:a3:fe:13:4c:16:37:c9:d1:9c:df:
8d:44:e0:01:a7:d6:73:8a:23:25:df:04:08:d5:70:45:e8:f7:
76:85:7a:4b:bb:29:f7:b7:2d:2e:ea:18:1b:4d:a9:ab:b2:42:
e4:de:ce:20:8a:78:c5:05:2e:a4:d0:77:18:f3:15:06:2f:47:
f6:b7:aa:99:76:44:30:ea:25:48:1e:e5:2e:45:58:8c:6a:91:
af:11:8b:a0:aa:19:02:02:04:ef:bb:5b:56:39:7f:fd:f9:04:
07:c7:10:5b:0e:25:34:04:10:a5:e8:eb:68:56:1e:94:35:00:
59:38:9d:a5:22:62:f3:37:15:72:0f:d1:8e:d9:f3:91:bd:02:
6d:9e:b5:1b:56:49:b5:56:f1:70:e1:1c:d3:6d:91:1c:da:84:
07:87:c0:c8:35:16:ed:97:48:5e:a7:1d:da:a6:89:69:70:80:
8b:28:23:c9:7b:39:2b:a9:88:4a:0a:a2:7b:1b:d4:b6:18:0e:
27:11:f6:22:be:a1:8f:e1:05:1c:f5:aa:8c:ff:a0:39:b7:9c:
62:d0:13:89:c5:72:74:7a:1f:03:f1:fd:9b:ff:ac:3a:b9:cc:
eb:bc:fb:61:1c:d0:dc:7b:0d:83:cc:56:52:6e:ca:9a:5c:b1:
6a:cb:80:8c
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaEYLVdY7QpFCbwKvEAEKsKpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjYxMDA3MjEwMzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDM5YTk0M2YyNmVjMWViYjUwNTk3NzFkZWQ4ZDVlYjMzZTNiYTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8De8PslBZt7VZlLn/QR6d879XnC
Jhq7MK71hd9gekjjZWwWuhXKlRan4LyDjgS7Nfg1+3adG910+7xRvSmsTOasrEDo
gdT+ja7Zw48nedbB4CMRqzYYFM8JQWRdOZmpHAwIYO76Os7Je7udrisHcXsb4ZTD
22kX4SaAV9AcpgJ4wobuDr2o9th4jvmjC8oD+HMfNRNcg/npr4jIXj4BSTP7NMC7
T7RvtGphUqLKU1jwGR8vIBtZ2MfvJFoSKooXlrqQATT/ASOq+oCO2pwrr5I2z5Tn
o2aPPCzg9niX2K9uStfsn6Zw/5BmsaQ0HXV89dYfCn0wWNYxLPraV29udwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFPQ5qUPybsHrtQWXcd7Y1esz47oIMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvOURtcFFfSnV3ZXUxQlpkeDN0alY2elBqdWdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgyaRi4w
DQYJKoZIhvcNAQELBQADggEBALDgs1rteNXmo/4TTBY3ydGc341E4AGn1nOKIyXf
BAjVcEXo93aFeku7Kfe3LS7qGBtNqauyQuTeziCKeMUFLqTQdxjzFQYvR/a3qpl2
RDDqJUge5S5FWIxqka8Ri6CqGQICBO+7W1Y5f/35BAfHEFsOJTQEEKXo62hWHpQ1
AFk4naUiYvM3FXIP0Y7Z85G9Am2etRtWSbVW8XDhHNNtkRzahAeHwMg1Fu2XSF6n
HdqmiWlwgIsoI8l7OSupiEoKonsb1LYYDicR9iK+oY/hBRz1qoz/oDm3nGLQE4nF
cnR6HwPx/Zv/rDq5zOu8+2Ec0Nx7DYPMVlJuyppcsWrLgIw=
-----END CERTIFICATE-----
Generated at Wed Oct 21 20:19:11 2026 by rpki-client