Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/9tdGg_wRsrLEHk-K0gn1crH9W2c.roa
File: 9tdGg_wRsrLEHk-K0gn1crH9W2c.roa (raw, json)
Hash identifier: lAIzCZY5QV1Z/tw2ZFhpX6cAlyWjA6D6tsvELwyOfYE=
Subject key identifier: F6:D7:46:83:FC:11:B2:B2:C4:1E:4F:8A:D2:09:F5:72:B1:FD:5B:67
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019F46496B81A23A6573600B98BEEBC99E37
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/9tdGg_wRsrLEHk-K0gn1crH9W2c.roa
Signing time: Thu 09 Jul 2026 09:50:44 +0000
ROA not before: Thu 09 Jul 2026 09:50:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219235
IP address blocks: 2a0c:9a40:85f0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:49:6b:81:a2:3a:65:73:60:0b:98:be:eb:c9:9e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jul 9 09:50:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6d74683fc11b2b2c41e4f8ad209f572b1fd5b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:da:50:3d:07:8f:52:d4:2f:21:ba:65:d7:
77:b0:16:4e:50:d4:d5:41:92:56:98:53:22:40:8e:
9d:f0:3e:3a:7e:c1:10:7b:20:1f:52:98:cb:89:1c:
4b:da:0b:a5:89:3a:d5:8d:2d:61:4b:4b:36:a5:be:
71:d2:1d:50:ec:09:70:55:95:5b:9c:6a:b9:aa:e1:
7c:69:3a:b5:02:98:09:e5:aa:11:99:d5:bc:e0:12:
2a:f3:55:db:24:ea:46:bf:c1:1a:61:c4:c7:f4:af:
da:f7:07:11:16:d0:34:c1:71:82:1a:7d:12:68:55:
2c:90:96:dc:c4:93:67:30:e9:9b:63:8c:42:79:87:
65:01:51:77:cd:bc:37:d4:ed:6e:52:b1:87:0e:2a:
a6:2a:cb:19:e1:52:9c:0d:89:5b:f0:bf:93:51:bc:
0a:07:b5:97:78:47:19:7b:8a:6e:c7:8b:8a:c3:30:
c5:16:73:06:61:d5:0c:e1:16:db:a3:4b:2e:91:5c:
4c:ea:74:0b:f9:3d:01:9b:c4:48:d3:8d:a0:93:c1:
8f:23:c2:50:ba:85:0a:d8:3a:dd:a0:22:eb:3c:56:
db:77:7c:78:18:77:8c:0c:55:a2:e4:3a:49:1e:ad:
91:7a:8d:fd:5e:9f:a8:75:87:a1:66:1d:3b:a6:f9:
02:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D7:46:83:FC:11:B2:B2:C4:1E:4F:8A:D2:09:F5:72:B1:FD:5B:67
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/9tdGg_wRsrLEHk-K0gn1crH9W2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:85f0::/48
Signature Algorithm: sha256WithRSAEncryption
5a:15:25:4f:30:0b:f1:03:08:38:28:77:f1:b3:c4:58:42:29:
db:f7:72:bf:4f:34:bb:80:74:f6:bb:04:e0:42:89:f2:ed:1b:
dc:2e:97:81:4a:2a:58:8a:72:1e:ba:27:c7:3c:2e:df:c7:fa:
99:eb:c2:70:08:ea:79:d6:02:c7:d5:9a:cf:e8:c4:7c:47:65:
84:85:12:0f:99:0c:23:4f:d1:9f:f1:2f:98:a0:84:dc:1f:68:
18:7f:2e:ea:72:43:87:21:99:7c:d8:26:0b:7b:36:99:78:bb:
34:fa:4b:17:27:60:98:42:59:0e:ee:f3:cc:49:94:80:ba:c2:
f3:71:7e:1f:30:00:6e:a1:cd:5b:05:c1:1f:c9:30:a5:67:bb:
20:4a:b6:92:21:91:3f:db:04:33:92:ce:aa:b0:ce:63:e1:59:
42:2f:63:00:2c:e1:3d:19:02:73:37:fa:0e:48:c5:d0:4c:ad:
3e:ab:f3:3a:8b:f5:e6:a9:1f:11:08:0c:13:5a:d1:8a:a0:43:
40:8f:36:d5:22:3d:c6:03:61:23:a7:3a:1b:ce:c6:d9:8f:cc:
87:06:a5:ae:ce:f1:a6:9f:bd:e9:f0:74:de:b2:b5:cc:c7:3b:
5c:0a:7a:03:7b:49:72:0c:04:16:3f:d6:25:5b:f8:01:27:01:
5c:e7:f2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 18:03:51 2026 by rpki-client