Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/Sx3lD8t_1d5XN5YvVg5ooDUsYHY.roa
File: Sx3lD8t_1d5XN5YvVg5ooDUsYHY.roa (raw, json)
Hash identifier: MVIq2OMyU9/DCJe+SAOqCNWgxjau22pregso3ngLxcc=
Subject key identifier: 4B:1D:E5:0F:CB:7F:D5:DE:57:37:96:2F:56:0E:68:A0:35:2C:60:76
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019ED524052039E46A98A67622682A99BEDE
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/Sx3lD8t_1d5XN5YvVg5ooDUsYHY.roa
Signing time: Wed 17 Jun 2026 10:32:48 +0000
ROA not before: Wed 17 Jun 2026 10:32:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215365
IP address blocks: 2a09:3f00:1007::/48 maxlen: 48
2a09:3f00:1008::/48 maxlen: 48
2a09:3f00:1009::/48 maxlen: 48
2a09:3f00:3000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:24:05:20:39:e4:6a:98:a6:76:22:68:2a:99:be:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jun 17 10:32:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b1de50fcb7fd5de5737962f560e68a0352c6076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:10:24:c0:65:44:fb:b5:94:e7:4d:cc:9a:52:
3b:12:3e:d0:16:6b:61:19:18:53:de:eb:c2:c5:5f:
06:20:f2:ab:a7:ae:4a:ae:c8:1e:92:a8:b8:13:21:
be:06:f9:cd:27:d7:14:16:e3:d9:c8:88:f7:8a:6a:
24:6b:b2:65:9e:be:e4:5f:db:fb:2d:a6:3a:69:f8:
0e:d5:9d:fb:40:2d:bf:c0:e4:75:03:fc:a2:b7:5b:
10:d1:09:1d:80:39:ba:0e:09:28:32:36:3b:6f:6a:
48:fe:89:1b:46:45:53:9a:d0:62:ce:4d:6a:30:a9:
7a:c4:0d:97:e4:b2:25:bd:c5:ed:27:26:7f:70:4b:
a8:de:33:0c:22:bb:d2:95:62:cc:23:9d:79:22:a4:
4e:9d:2c:83:d0:2f:93:83:5f:76:4b:c4:94:28:fd:
b1:18:16:d5:a0:bd:17:e9:8d:20:fd:3b:3e:34:69:
03:dd:ff:24:fb:34:df:b8:cb:94:7a:fa:1c:dd:0e:
1e:d9:d1:a2:a7:bd:23:65:71:0b:93:b8:ad:51:c1:
36:90:6d:6f:46:5c:9c:87:ad:59:dd:5d:85:2d:a4:
17:93:4f:3c:ff:68:8c:78:d2:b7:cd:8b:10:ac:a7:
b8:4b:80:8c:77:ea:8a:ae:cc:9f:53:c9:09:69:cc:
09:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1D:E5:0F:CB:7F:D5:DE:57:37:96:2F:56:0E:68:A0:35:2C:60:76
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/Sx3lD8t_1d5XN5YvVg5ooDUsYHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:1007::-2a09:3f00:1009:ffff:ffff:ffff:ffff:ffff
2a09:3f00:3000::/40
Signature Algorithm: sha256WithRSAEncryption
03:a3:7f:fb:44:3d:6b:dd:7a:ad:d2:6f:c0:ec:21:07:e5:4f:
8d:61:9c:3c:32:3c:5c:9f:51:e1:6a:5d:f5:0e:0c:85:00:5c:
da:5d:aa:89:b8:7f:fa:c8:e3:29:57:90:d4:d5:46:a4:ff:2b:
e7:09:53:24:00:fb:85:24:21:9a:27:a5:c0:d9:b5:22:a5:e0:
0d:05:7f:5d:44:b4:c9:20:17:7d:91:9f:50:c2:44:33:43:e8:
85:cf:29:3a:3a:e5:c3:d7:5d:79:0a:9c:96:cb:53:4e:37:31:
ef:25:af:09:34:26:b8:7f:17:54:31:fd:d4:28:e9:c3:70:f6:
69:58:72:e3:06:15:96:64:61:36:44:df:1b:60:49:e7:71:60:
65:5d:eb:83:de:c7:93:55:e2:da:61:bd:80:0e:97:6e:42:e4:
03:63:b7:12:f1:e1:4f:38:75:0e:00:db:27:15:00:4c:ea:23:
5d:c6:19:b3:2b:26:f0:61:1e:47:9e:29:a0:71:d5:01:74:c7:
eb:9b:a7:c0:e3:64:ca:f1:de:6d:d9:1e:82:8e:d5:53:65:5a:
30:36:67:8b:fd:5f:eb:23:57:e7:2f:38:4e:18:37:59:2c:a3:
37:dc:ad:22:46:78:30:10:94:f0:cf:11:12:a1:50:4a:8a:c2:
8a:a2:c2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 01:59:48 2026 by rpki-client