Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/76JojDPDDVBx3AuxRp9twSAwnYU.roa
File: 76JojDPDDVBx3AuxRp9twSAwnYU.roa (raw, json)
Hash identifier: Y90zSyp8Av5F/WBggyZ0nMT1EiSKCwa1eVOGqh4XM6E=
Subject key identifier: EF:A2:68:8C:33:C3:0D:50:71:DC:0B:B1:46:9F:6D:C1:20:30:9D:85
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 01A11B270CC97CA866CC4D811920045CFB58
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/76JojDPDDVBx3AuxRp9twSAwnYU.roa
Signing time: Thu 08 Oct 2026 10:55:06 +0000
ROA not before: Thu 08 Oct 2026 10:55:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218758
IP address blocks: 2a09:3f00:3c00::/48 maxlen: 48
2a09:3f00:3c01::/48 maxlen: 48
2a09:3f00:3c02::/48 maxlen: 48
2a09:3f00:3c03::/48 maxlen: 48
2a09:3f00:3c04::/48 maxlen: 48
2a09:3f00:3c05::/48 maxlen: 48
2a09:3f00:3c06::/48 maxlen: 48
2a09:3f00:3c07::/48 maxlen: 48
2a09:3f00:3c08::/48 maxlen: 48
2a09:3f00:3c09::/48 maxlen: 48
2a09:3f00:3c0a::/48 maxlen: 48
2a09:3f00:3c0b::/48 maxlen: 48
2a09:3f00:3c0c::/48 maxlen: 48
2a09:3f00:3c0d::/48 maxlen: 48
2a09:3f00:3c0e::/48 maxlen: 48
2a09:3f00:3c0f::/48 maxlen: 48
2a09:3f00:3c10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:27:0c:c9:7c:a8:66:cc:4d:81:19:20:04:5c:fb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Oct 8 10:55:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efa2688c33c30d5071dc0bb1469f6dc120309d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4d:a8:19:2a:25:94:ae:3e:df:5f:a8:3c:ee:
fe:80:55:48:8b:37:cb:4b:8e:d0:7e:da:d0:a3:bb:
36:1c:a5:1a:13:cc:41:6e:f8:e0:98:28:25:7a:50:
6b:e1:63:ab:06:b9:c1:d3:ae:4c:b8:89:d9:03:58:
b1:29:85:db:e7:85:cf:45:e3:7d:cb:83:74:95:fc:
c7:18:30:ff:e6:2c:ea:a3:27:69:c2:83:2d:e8:8e:
12:b1:46:cf:1f:45:7a:71:47:5b:0b:ab:7c:76:66:
02:b9:ec:b8:06:31:77:51:0f:61:ff:df:ad:bb:3e:
de:06:05:e9:3c:f5:c1:13:7f:86:b5:46:f1:96:32:
a5:cc:6b:16:4e:11:50:fa:d3:12:d9:e2:66:9f:9d:
05:cd:64:fe:0b:2c:0b:0c:88:02:5c:dd:6b:01:5e:
8f:0a:99:6f:c8:3b:ec:1d:2d:24:f6:ac:96:ca:7a:
85:4f:0a:1c:3f:04:a4:19:2a:4b:72:5b:c1:b2:16:
aa:0f:c6:50:2a:1b:2b:ef:fc:ae:97:eb:24:a4:89:
cd:2f:70:33:f5:33:11:41:01:df:99:d9:33:42:8a:
3c:e1:87:0c:da:fe:d0:c2:c0:4e:b2:97:81:11:1a:
0a:40:25:a3:f1:40:ee:89:51:ab:d1:c1:6b:ad:6f:
16:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A2:68:8C:33:C3:0D:50:71:DC:0B:B1:46:9F:6D:C1:20:30:9D:85
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/76JojDPDDVBx3AuxRp9twSAwnYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:3c00::/43
Signature Algorithm: sha256WithRSAEncryption
80:e5:b2:bb:38:08:d4:92:23:ee:07:6c:8f:f6:d6:90:e1:b1:
cb:5e:0b:b8:a9:5c:f8:98:6c:04:d3:4a:1d:57:b8:69:7c:a6:
df:1f:c4:d4:38:6e:d3:02:2c:6e:7d:01:98:ea:e3:19:b9:e6:
66:6a:65:3e:dc:5d:f7:24:61:d2:36:97:cc:1a:24:17:d7:83:
2e:9c:17:74:b2:36:90:ea:41:08:37:20:d0:a8:15:70:a5:20:
c2:dc:1a:d1:a4:d0:65:ce:2e:8e:9b:ad:b6:27:40:c4:cb:c3:
f3:ad:57:88:92:60:c9:91:c8:6b:26:ea:95:6e:b3:cb:60:7b:
86:05:d2:62:b9:bd:3d:cc:89:4a:75:3b:ac:b6:4f:3d:76:16:
c3:5d:da:6e:00:8f:84:98:c4:f4:66:a9:c3:da:98:5d:b1:60:
41:dd:8d:cf:80:9f:98:62:08:d1:da:99:14:73:ad:25:04:3b:
2c:ca:a4:8d:2c:fa:69:74:67:9d:d0:89:fd:a2:a5:b1:de:17:
f4:e0:21:6c:8d:ff:db:f2:2f:89:f8:df:54:51:b6:b0:d7:d0:
2f:54:27:c6:e6:cb:dc:42:fa:77:59:76:31:24:73:74:f3:f0:
58:ee:70:7d:7d:fc:c6:fd:46:0e:75:4e:5a:b7:21:17:bf:07:
23:59:b8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:12:39 2026 by rpki-client