Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/v9pwbh9b_ICBYEiDmRKcqdsS9lY.roa
File: v9pwbh9b_ICBYEiDmRKcqdsS9lY.roa (raw, json)
Hash identifier: a/XfqjpEbRh27omuGqi54/mQtYb1tWYbBVqtxdOHNUE=
Subject key identifier: BF:DA:70:6E:1F:5B:FC:80:81:60:48:83:99:12:9C:A9:DB:12:F6:56
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019FAD35D8DE6C847476E6F0A9A8FF967839
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/v9pwbh9b_ICBYEiDmRKcqdsS9lY.roa
Signing time: Wed 29 Jul 2026 09:30:15 +0000
ROA not before: Wed 29 Jul 2026 09:30:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57183
IP address blocks: 2a0e:46c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:35:d8:de:6c:84:74:76:e6:f0:a9:a8:ff:96:78:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jul 29 09:30:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfda706e1f5bfc808160488399129ca9db12f656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b8:6f:97:c7:8e:3c:4a:0f:fc:87:4d:62:97:
f6:d6:fa:af:6d:bb:0b:e5:92:61:3b:a2:73:ef:6e:
73:49:a5:bc:7d:08:ee:9c:69:ac:fe:32:1e:be:1a:
56:38:96:89:fc:fc:d5:c6:98:5d:18:d1:89:37:7d:
eb:09:3e:87:4b:7e:93:1e:20:ed:ae:68:f2:0d:37:
93:36:d0:e5:71:ae:fc:09:9c:5e:5d:57:2c:c2:c1:
a5:2e:cf:7b:6e:46:04:b7:e1:75:3c:83:59:a7:05:
c1:e4:c1:56:81:70:e9:70:3d:2b:73:ea:1a:2f:57:
79:9f:e0:51:12:4c:e0:0a:6e:9d:49:78:4f:87:0d:
56:42:23:d5:cf:4a:da:53:96:27:dc:4e:a1:b6:13:
e7:95:b8:2b:af:d0:2a:d5:bd:7f:9d:7e:47:29:fb:
5b:7c:b2:dd:6d:8f:33:48:02:67:21:e6:86:94:43:
c2:ad:29:5f:23:2b:42:ec:61:23:16:2f:70:2a:bc:
46:34:4f:f0:5d:41:31:a5:fe:1f:60:f4:12:46:b1:
a1:b2:db:5e:50:27:fe:28:23:fa:1c:83:e2:60:8e:
f6:b8:70:c1:cd:e3:f7:cd:4f:a7:80:86:0d:f4:4f:
f6:a9:2b:4f:79:c5:61:af:c2:90:02:c2:f2:d8:8b:
6c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DA:70:6E:1F:5B:FC:80:81:60:48:83:99:12:9C:A9:DB:12:F6:56
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/v9pwbh9b_ICBYEiDmRKcqdsS9lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c0::/48
Signature Algorithm: sha256WithRSAEncryption
2f:36:19:75:6a:2e:94:e3:33:91:1f:2b:a6:2c:8f:fa:8a:64:
df:4d:6a:39:0c:e9:9f:b0:bd:65:be:1c:e0:7e:06:d1:13:e9:
82:59:4c:ae:e9:1d:75:e3:06:a1:1f:68:4c:1a:ab:d3:11:02:
85:b3:fa:e4:31:15:c2:78:e1:78:8c:d0:c4:71:64:79:aa:06:
5a:1a:92:b0:ea:31:77:46:e4:9d:2b:5c:65:35:88:b7:df:72:
56:bb:85:df:2e:46:37:ad:d4:c2:5a:31:6c:9f:b1:a8:e9:3e:
2c:ed:9e:28:b2:61:92:37:66:91:70:d8:38:3a:43:af:6a:f9:
d6:f3:e8:b0:c2:39:d8:79:a2:62:cc:25:b8:54:dd:2a:bc:04:
27:9e:39:42:56:93:ba:b0:41:99:ff:f4:3a:6b:79:44:18:b1:
43:e6:b6:15:ea:a5:88:e6:6d:5d:f1:56:b2:d4:b2:bc:e3:62:
04:6d:40:f6:18:5e:39:9f:20:c3:f6:50:a1:9d:e7:3e:c8:7a:
5f:95:de:aa:a1:cd:bf:f5:c2:66:0b:e7:72:a2:52:fd:18:06:
ba:2c:1d:21:dc:1c:e2:68:00:ac:3c:19:18:30:30:3c:0d:20:
c4:4c:bd:39:74:44:7f:67:dd:c8:d9:c0:5e:81:dd:7b:1f:d8:
7f:a2:0b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:35 2026 by rpki-client