Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/D_JQP0Wo2ULTx36dKyUpzWQNI7Y.roa
File: D_JQP0Wo2ULTx36dKyUpzWQNI7Y.roa (raw, json)
Hash identifier: BVwDFymRRLbdNQ5kCT0ZG5q8sA/T7zT5M8vX9KW8lPs=
Subject key identifier: 0F:F2:50:3F:45:A8:D9:42:D3:C7:7E:9D:2B:25:29:CD:64:0D:23:B6
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A042FCACCCDB3E951CDCB0DEDC4D4EC347
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/D_JQP0Wo2ULTx36dKyUpzWQNI7Y.roa
Signing time: Thu 27 Aug 2026 11:30:50 +0000
ROA not before: Thu 27 Aug 2026 11:30:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201439
IP address blocks: 2a0c:9a40:80f0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:fc:ac:cc:db:3e:95:1c:dc:b0:de:dc:4d:4e:c3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Aug 27 11:30:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ff2503f45a8d942d3c77e9d2b2529cd640d23b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f0:7f:f2:2e:94:e0:f4:92:b1:b6:c3:be:86:
e6:5d:e7:32:d1:cd:cc:88:a7:52:7b:ca:88:bc:07:
ec:9a:ae:bf:51:21:63:f9:59:4f:69:fb:70:71:90:
7f:47:45:1e:19:be:a6:b5:58:23:3e:a4:f3:1f:2c:
5b:45:eb:43:48:f0:81:fd:a4:f0:66:92:ce:a7:a2:
78:46:d4:94:f5:6b:bb:88:05:ac:ef:2e:d0:80:9d:
5c:54:6f:a8:66:81:2d:12:f5:25:81:6e:38:dd:cf:
c5:8f:7e:84:03:11:e3:e4:c6:f1:cb:db:72:20:68:
dd:ed:31:c3:ac:25:ef:0d:5f:d3:56:dc:ab:99:a5:
ab:04:3a:34:c1:d3:1d:b0:88:bb:56:d2:78:57:2a:
ff:d2:75:28:03:21:a0:c9:33:bb:3f:dc:0d:5c:e1:
77:f0:42:ba:3d:fb:7a:32:e3:ad:da:f6:aa:9a:64:
80:51:7c:47:30:ed:a3:c9:b2:e4:ed:be:91:be:5c:
b6:63:54:cf:37:75:d2:f2:e4:b5:c7:61:4d:93:7e:
8c:00:9d:37:cd:77:21:b0:ce:57:15:4f:60:51:89:
b7:36:0f:2a:7a:fd:b0:73:d0:2c:9e:38:23:c2:28:
29:af:90:1e:d0:b2:53:0e:b6:0f:5a:71:24:7c:23:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F2:50:3F:45:A8:D9:42:D3:C7:7E:9D:2B:25:29:CD:64:0D:23:B6
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/D_JQP0Wo2ULTx36dKyUpzWQNI7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:80f0::/48
Signature Algorithm: sha256WithRSAEncryption
d2:c7:1d:ed:ad:a7:44:40:4b:34:a6:ad:ff:81:07:86:9c:6e:
5b:6d:53:6c:12:44:00:ff:2b:ca:cc:dc:42:02:68:41:93:f9:
53:37:9b:f9:1b:c0:4b:ec:69:74:89:5a:6b:cc:fc:31:2b:33:
de:7a:54:9d:32:da:5b:4f:b3:2f:e1:8c:1b:b7:7e:59:a8:a7:
2c:59:82:b5:3c:37:18:4f:f6:22:71:8b:19:bd:18:dc:94:59:
74:29:cc:73:8a:0b:8f:a3:ed:25:65:77:f2:49:66:43:74:12:
03:a2:27:c6:96:d5:dd:68:ae:4d:ee:1e:ae:f2:19:d6:46:32:
5a:c3:39:b4:88:7c:65:26:ac:c0:fe:47:f0:ab:28:5e:a6:e7:
5d:4a:3d:53:6e:49:59:14:9c:39:13:ea:74:b1:51:08:c1:3e:
50:5e:df:58:06:c0:e4:f2:bc:26:e3:3f:06:b9:e3:33:37:7d:
10:f6:fb:0e:6b:24:47:7b:1a:77:ab:1b:0e:45:13:b2:dd:29:
8a:c7:b1:26:52:ab:af:bb:fb:03:7a:a1:e8:12:9c:2f:cd:c1:
2e:9c:6f:c9:13:f8:fa:2c:de:64:7e:8e:bd:61:91:e8:99:18:
90:c2:70:19:42:f6:f9:68:4d:29:6e:47:3d:61:96:3b:85:b5:
59:b9:6d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:14 2026 by rpki-client