Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/n8RPpYp2SC7-QwFIBiyrmqcaiTw.roa
File: n8RPpYp2SC7-QwFIBiyrmqcaiTw.roa (raw, json)
Hash identifier: 2N0fnJoQYNGM53DuCo+w8gMkKVjFMXvGmIR74HDkp8U=
Subject key identifier: 9F:C4:4F:A5:8A:76:48:2E:FE:43:01:48:06:2C:AB:9A:A7:1A:89:3C
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01A18E1690A191B5861079B3048FDDF83323
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/n8RPpYp2SC7-QwFIBiyrmqcaiTw.roa
Signing time: Fri 30 Oct 2026 18:33:25 +0000
ROA not before: Fri 30 Oct 2026 18:33:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214891
IP address blocks: 2a0d:d940:c0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:16:90:a1:91:b5:86:10:79:b3:04:8f:dd:f8:33:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Oct 30 18:33:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fc44fa58a76482efe430148062cab9aa71a893c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:32:b3:64:fe:12:9d:8b:1e:5d:01:73:b2:
c8:e4:51:be:2f:c8:26:32:70:1e:ae:9f:4f:9e:a5:
54:b4:a6:40:31:e9:d7:04:0b:ad:06:c8:75:99:16:
fd:ac:20:6c:86:ba:14:b8:27:4a:52:6d:e7:0b:11:
ba:b9:71:b2:0a:63:a5:0f:72:32:40:14:48:4a:56:
86:b0:a1:68:bd:2d:9d:61:c9:e7:4d:d8:65:94:26:
57:23:5c:80:ed:5d:6e:ae:38:76:84:ef:89:5c:01:
32:a8:74:cd:a4:a7:bf:f0:ec:42:de:ee:1c:db:1d:
a5:12:ab:b8:0f:3d:7a:a2:bc:7a:45:37:1a:0f:19:
8e:49:d7:4e:19:ce:62:02:8f:85:b9:2a:46:f0:2b:
e8:02:40:80:db:29:65:4b:c4:c9:c9:23:71:27:9a:
5f:5c:4b:37:2c:a4:18:c4:8a:a7:65:91:ee:24:11:
7a:1f:2c:32:d0:c1:4d:67:bc:7e:ab:89:41:56:0e:
1b:26:c5:0e:15:a2:06:7a:c4:2d:7a:ab:62:2e:06:
16:f6:19:9d:07:50:e0:69:37:52:15:2c:c2:d6:23:
ad:72:d5:74:b6:8f:58:c6:8d:c3:f4:e7:63:3b:2a:
1d:2e:68:3c:fe:93:09:ae:a8:27:bd:e4:6d:8c:82:
bb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C4:4F:A5:8A:76:48:2E:FE:43:01:48:06:2C:AB:9A:A7:1A:89:3C
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/n8RPpYp2SC7-QwFIBiyrmqcaiTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:c0::/44
Signature Algorithm: sha256WithRSAEncryption
61:a3:b4:c6:f6:73:c2:69:30:6b:2c:97:5e:ff:b8:0d:72:f8:
7c:5e:09:21:ba:69:72:88:c2:7d:40:54:c0:dd:f3:93:1f:48:
69:97:ec:19:9e:b7:5c:fb:78:5a:26:1c:50:3f:1c:55:9c:d5:
c7:30:77:46:5c:9a:a6:25:1c:b9:5f:0c:30:19:5a:cf:31:14:
00:4c:69:ad:9e:cc:77:8e:12:11:c7:89:02:ab:a3:b1:a9:44:
a1:a2:d3:32:01:d5:30:87:13:f0:f6:2b:6d:9a:6f:da:3b:2e:
5d:d9:85:d3:53:9f:62:08:ce:09:e5:42:60:88:03:cb:3a:f4:
59:cf:b2:09:29:4f:cd:2f:94:2c:14:a0:da:b2:a3:5d:f7:61:
09:40:b0:71:a4:59:eb:bd:23:df:c3:44:57:31:e0:31:80:c2:
58:f8:e1:da:e0:70:55:36:17:be:d0:67:3c:08:e0:5b:e3:0f:
10:85:0a:44:d6:08:c0:0f:a2:68:d3:a7:c6:b2:d3:59:7f:5e:
6d:b8:81:78:b3:0b:0c:ea:b6:f6:a2:c2:6d:31:11:16:84:e3:
42:f1:34:f2:1c:b7:9a:0a:a9:2a:72:9e:4c:82:69:55:cd:47:
8d:78:b2:82:bb:cc:38:44:85:74:9c:d7:ba:cf:d3:df:7c:f9:
f0:4b:ca:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:07:18 2026 by rpki-client