Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/iHi0BEHjFrK2EzmFkwKcRhQAjbs.roa
File: iHi0BEHjFrK2EzmFkwKcRhQAjbs.roa (raw, json)
Hash identifier: 16kAl+YXLftIHjOf/MjbThr3Io/l6OxF/EMUwDV5Tsc=
Subject key identifier: 88:78:B4:04:41:E3:16:B2:B6:13:39:85:93:02:9C:46:14:00:8D:BB
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019F2A73DE145CE77CD15556AD77A5204DDB
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/iHi0BEHjFrK2EzmFkwKcRhQAjbs.roa
Signing time: Sat 04 Jul 2026 00:07:44 +0000
ROA not before: Sat 04 Jul 2026 00:07:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8126
IP address blocks: 2a0c:9a40:8aa3::/48 maxlen: 48
2a0c:9a40:8aa4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2a:73:de:14:5c:e7:7c:d1:55:56:ad:77:a5:20:4d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jul 4 00:07:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8878b40441e316b2b613398593029c4614008dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f0:00:a6:2b:be:92:6d:f9:99:95:16:b6:87:
24:36:6e:74:3c:f3:a8:15:ad:f7:b2:5f:ca:79:42:
d5:64:55:a4:32:1b:1d:f0:36:9f:17:ca:af:86:fe:
4a:4b:5f:19:b7:c6:99:8a:30:01:47:5f:91:93:91:
1b:6e:c4:61:a7:ab:dc:d0:5d:95:9b:fe:3a:75:cf:
17:ce:d8:a4:20:6e:d3:07:c5:54:a7:15:fe:d2:54:
06:e6:48:19:9d:1d:71:26:06:dc:4d:86:90:22:45:
30:e2:dc:55:b1:84:64:09:c8:bd:e6:d4:9d:7c:f2:
22:fb:f0:2b:cd:f1:81:2d:28:73:a1:ec:ef:9f:f1:
1f:6b:11:90:eb:57:74:d0:84:b7:5b:78:d8:79:29:
2f:5c:b7:2e:ca:f7:5d:16:c9:dd:7a:44:4d:64:95:
17:60:60:18:95:7a:4c:c1:b6:9f:66:3b:4f:77:de:
20:b0:11:72:f6:c4:15:cc:30:24:52:99:a9:71:ac:
fa:44:89:b7:70:10:16:4b:e6:ad:cd:73:1a:e4:a6:
33:ef:6d:10:f2:b6:5c:a0:13:79:e3:c9:a6:ed:59:
ed:84:48:17:04:8b:7a:3e:ef:61:ff:49:03:d7:85:
ee:a1:96:04:01:7d:fa:3c:05:4f:ca:7b:f9:bd:71:
8d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:78:B4:04:41:E3:16:B2:B6:13:39:85:93:02:9C:46:14:00:8D:BB
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/iHi0BEHjFrK2EzmFkwKcRhQAjbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8aa3::-2a0c:9a40:8aa4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
28:10:49:63:b6:be:5c:55:c4:92:e7:20:6f:d1:4c:43:f2:65:
ca:24:c0:6d:e7:98:2d:bb:f7:73:09:46:46:d5:a3:6f:08:23:
7b:aa:25:d3:5a:23:a6:4f:99:bf:ba:bd:1d:d6:41:41:09:1c:
77:f6:6d:09:d3:26:4c:67:ef:6c:e4:69:e7:0e:3f:c6:8a:46:
85:45:82:e7:0d:b8:7f:ec:d2:36:45:0d:ca:02:3f:20:df:93:
1d:0c:21:75:3f:f8:3e:eb:b2:0e:37:28:9e:f4:1d:a0:bb:2d:
6d:d7:3e:4b:03:f1:e3:67:6b:e8:74:7a:cd:c2:78:23:14:9f:
2c:70:23:45:96:25:fc:38:20:47:af:52:a2:6e:ef:95:55:f5:
0d:a3:08:55:a8:d0:6c:97:ad:75:37:d3:54:ec:09:7c:12:b4:
be:4c:b7:d9:5a:b8:78:b9:b0:9a:3f:09:79:19:1b:04:3d:55:
6d:e2:9d:81:da:8c:d3:00:d2:10:42:72:fc:b8:e9:0a:42:a5:
4e:49:50:47:c6:5b:f6:d3:ef:81:22:50:bd:d6:f7:1d:d7:6e:
d6:70:96:71:16:69:e0:c2:f2:33:f3:05:82:61:63:69:a4:42:
19:f8:58:2b:54:08:56:d1:65:47:b9:49:80:d1:9f:76:25:aa:
95:41:5f:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 13 13:47:05 2026 by rpki-client