Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/RlZmlF6K8MhCVJA88oaNzRa6L5M.roa
File: RlZmlF6K8MhCVJA88oaNzRa6L5M.roa (raw, json)
Hash identifier: VtvOBD0F4pmmWekBBfgPr0SbsQ+pp3W5Awsenjvc8AI=
Subject key identifier: 46:56:66:94:5E:8A:F0:C8:42:54:90:3C:F2:86:8D:CD:16:BA:2F:93
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019F52CF9A8AF02190EBA841E4ADADF7DEC8
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/RlZmlF6K8MhCVJA88oaNzRa6L5M.roa
Signing time: Sat 11 Jul 2026 20:12:44 +0000
ROA not before: Sat 11 Jul 2026 20:12:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219229
IP address blocks: 2a0c:9a40:8be0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:52:cf:9a:8a:f0:21:90:eb:a8:41:e4:ad:ad:f7:de:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jul 11 20:12:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=465666945e8af0c84254903cf2868dcd16ba2f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:ff:ee:ea:c6:ec:0f:22:4d:12:14:c7:9c:c1:
80:8c:78:ab:9c:bf:b7:7a:ed:dc:c7:81:3b:3d:a4:
a2:61:ff:f0:54:d5:90:fc:63:a3:41:b3:c2:e5:55:
8f:0c:d9:47:99:48:74:26:2a:99:18:be:97:27:0e:
2c:2d:52:90:eb:c2:8d:3f:be:87:7d:c9:1a:3f:ca:
d1:e9:6e:81:f9:62:0d:ed:3c:91:c1:ce:1e:09:84:
a0:0b:e3:ed:b6:93:1c:63:d0:58:6e:4e:f3:a0:95:
04:b5:31:e2:47:aa:85:97:e9:d5:90:d9:88:dd:b6:
b7:93:19:a6:08:83:ad:90:b4:94:cf:05:1b:ca:22:
4b:8b:3e:be:5f:29:7d:e4:a3:9f:4b:2d:97:f6:11:
c8:e6:3b:6e:cf:43:22:46:17:85:b0:76:25:09:e9:
15:25:a7:88:23:8d:00:de:cd:d2:59:21:61:85:de:
fb:d6:1e:9c:61:cc:fd:dc:91:ce:e5:92:2c:85:87:
51:28:de:74:6a:67:9a:ba:31:bd:07:0c:2b:65:ed:
4b:dd:91:ee:1d:10:ba:ae:d4:6a:cf:8c:5b:09:04:
64:fc:6f:c6:2b:98:9a:ef:4a:80:10:36:bd:58:b4:
39:35:91:00:1c:bc:11:ae:93:05:fe:0e:9f:56:59:
5e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:56:66:94:5E:8A:F0:C8:42:54:90:3C:F2:86:8D:CD:16:BA:2F:93
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/RlZmlF6K8MhCVJA88oaNzRa6L5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8be0::/44
Signature Algorithm: sha256WithRSAEncryption
7c:b3:c5:86:06:a9:9b:d4:0a:ae:7e:4c:e4:e7:14:01:51:3e:
64:2e:d4:15:70:78:46:5b:16:1b:83:59:c8:2c:ef:f2:ab:54:
29:82:14:cd:37:4e:48:35:f4:8a:93:03:af:81:b6:20:25:c3:
69:a7:88:2e:21:da:90:e0:2f:72:57:d1:a7:b4:6f:41:7a:06:
86:32:0e:4d:e7:e0:e7:47:4f:ba:1a:bb:04:b6:ac:79:2d:9e:
0c:eb:8a:56:bc:bf:51:c3:bc:a5:fc:97:f8:cd:db:c0:b6:9b:
55:83:a1:ae:8d:de:ee:8e:8f:19:a0:b5:68:61:5b:15:6e:5a:
44:5d:49:d3:d5:cb:05:56:33:51:6d:1e:5c:d9:c7:51:73:ea:
71:1b:fb:f5:37:05:bf:5d:02:cd:b7:84:0a:6f:2b:e4:f2:b6:
90:f8:79:ca:9a:10:86:33:cd:b2:4b:5d:2e:e7:81:2d:86:ed:
f1:0e:4d:81:eb:d7:23:5c:48:86:02:fb:0b:66:bb:f3:cc:de:
fe:ce:10:ef:6f:68:c0:de:46:ef:89:05:40:83:12:22:ad:ca:
45:26:4c:8e:73:c0:52:a5:1d:44:81:1c:d9:84:48:67:4d:74:
41:ef:be:6b:ea:f0:52:0e:ec:53:b9:09:a0:02:3b:9f:0a:cf:
09:26:d4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:20 2026 by rpki-client