Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cRd1JatFk48j5O1wSzuKlAUYRSc.roa
File: cRd1JatFk48j5O1wSzuKlAUYRSc.roa (raw, json)
Hash identifier: K9+KQuwR0rL95k//MTFs8NyIb/H+keKTYWzrfH8TemI=
Subject key identifier: 71:17:75:25:AB:45:93:8F:23:E4:ED:70:4B:3B:8A:94:05:18:45:27
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A14E53381A72B028E4B2E91C5A9E7EE1DD
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cRd1JatFk48j5O1wSzuKlAUYRSc.roa
Signing time: Sun 18 Oct 2026 09:23:59 +0000
ROA not before: Sun 18 Oct 2026 09:23:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218810
IP address blocks: 2a0c:9a40:e040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:53:38:1a:72:b0:28:e4:b2:e9:1c:5a:9e:7e:e1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Oct 18 09:23:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71177525ab45938f23e4ed704b3b8a9405184527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:42:00:a6:1e:38:2b:57:30:15:ee:b7:95:9f:
dd:13:0d:e6:7c:b2:e1:83:4c:bb:21:c4:65:47:55:
23:07:9a:48:e0:f6:ca:ca:90:09:d2:d5:19:d8:91:
0f:ea:68:58:68:04:55:3f:98:ab:d6:d3:11:50:25:
fe:8f:1a:f5:5f:05:2d:17:47:9d:54:f0:05:4e:16:
82:f8:d4:36:50:9a:7f:ee:8e:f6:79:b4:b7:27:de:
05:67:6a:57:10:1b:73:0e:e4:3d:14:85:9a:2b:f7:
12:2d:75:e7:a8:a9:47:0e:47:57:de:12:4f:03:fe:
48:5b:6f:b4:a7:ef:51:1a:55:a7:cf:0a:05:dc:f8:
a6:e3:0b:51:d3:4e:38:e3:95:55:7f:16:cf:a6:ef:
c2:ca:b3:12:34:64:6d:15:b2:10:91:94:24:ae:e7:
05:4b:c4:4f:08:6d:e1:a3:fe:18:ee:65:f1:91:9c:
37:b6:bf:14:df:10:6c:1c:f4:d4:27:40:9f:98:f3:
ac:fd:19:6d:c7:9e:92:93:e8:65:e0:66:35:bf:24:
3a:21:1a:e0:a8:97:f7:7c:a9:47:e0:bb:95:15:de:
6a:40:6d:40:51:19:94:87:f4:2b:43:d8:e4:c2:86:
bb:a3:66:7f:7f:4b:8b:e2:f9:99:ab:0c:27:55:b9:
d1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:17:75:25:AB:45:93:8F:23:E4:ED:70:4B:3B:8A:94:05:18:45:27
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cRd1JatFk48j5O1wSzuKlAUYRSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:e040::/48
Signature Algorithm: sha256WithRSAEncryption
34:42:77:9c:5b:b1:81:36:20:e2:09:46:b5:ee:c7:7c:34:81:
c6:8b:fa:b9:7d:c9:aa:60:83:90:37:dc:17:a1:38:d2:07:f6:
96:f4:5d:84:21:1b:00:17:6e:d8:91:4e:c5:b7:82:ab:e2:36:
2d:56:fb:8a:bf:cd:37:9a:64:28:de:64:00:5c:7d:1c:10:3d:
e3:1d:4b:cd:84:7d:29:59:22:57:d9:d0:2e:16:a0:8c:0f:d6:
be:0c:55:09:a7:7d:19:dc:61:d8:88:f5:ec:45:ab:e9:47:94:
a9:30:7c:fc:d9:7f:5b:68:2f:ce:4d:b9:18:75:b2:df:5c:d5:
ed:f6:42:44:dc:d6:e3:4f:1d:0a:87:3e:8b:49:68:bd:b5:2f:
cf:09:fa:55:96:07:9f:c0:ca:94:3f:66:e4:bc:f9:d3:38:0a:
17:9c:2c:05:27:62:70:99:85:73:29:b2:7a:3a:e7:e6:c2:11:
90:ad:a7:59:38:20:cb:ee:5f:a8:f9:51:35:21:06:51:54:03:
9b:0d:ce:f0:28:a4:12:48:0d:6a:08:52:aa:f3:aa:40:7b:76:
30:d1:17:35:a9:73:09:ac:44:3b:0f:be:ba:ce:4d:a6:74:67:
2f:69:c4:7c:ae:8c:75:84:2b:d5:d0:61:36:e0:e7:2a:1d:c1:
9d:4d:b1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:48:31 2026 by rpki-client