Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/9bd2LKn8XCQKvN2LMDzf8_9A0sI.roa
File: 9bd2LKn8XCQKvN2LMDzf8_9A0sI.roa (raw, json)
Hash identifier: TbUpkh62Q6DCQx4wcGP/0x2T9DL2M0Cq6VM3i1VEMz8=
Subject key identifier: F5:B7:76:2C:A9:FC:5C:24:0A:BC:DD:8B:30:3C:DF:F3:FF:40:D2:C2
Certificate issuer: /CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Certificate serial: 019F236898D22FBB82825F28A955E846FD30
Authority key identifier: EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/9bd2LKn8XCQKvN2LMDzf8_9A0sI.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208249
IP address blocks: 2a06:1e81::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:98:d2:2f:bb:82:82:5f:28:a9:55:e8:46:fd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5b7762ca9fc5c240abcdd8b303cdff3ff40d2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:91:ea:07:93:38:49:4c:83:1f:a3:12:a4:
2f:cc:7a:71:c6:6e:fd:00:5b:ef:41:74:69:8c:33:
d5:fd:ca:ad:f8:16:db:6b:99:ae:45:55:f5:4d:eb:
97:da:11:9d:65:49:3b:10:12:59:8b:00:be:f1:5b:
22:c8:04:35:6d:e2:80:25:f9:42:d3:15:f7:04:d9:
8d:2f:62:71:48:c9:db:a1:3b:8b:4d:37:3c:2c:1f:
3a:bb:78:3c:4b:8c:33:8b:fb:3b:30:5b:99:1b:05:
3a:44:91:ac:70:cd:f0:27:e7:65:5d:bb:4f:a9:98:
c2:ed:09:12:75:eb:93:f5:c7:96:03:c9:ce:50:54:
69:2b:0a:16:be:6a:88:6d:a1:01:56:94:df:99:57:
34:c3:7b:6e:28:e7:77:fd:7f:50:ff:87:5f:43:d8:
ff:82:64:74:1d:56:a4:eb:90:ef:48:1d:da:21:9c:
b8:f2:35:e7:18:c0:99:b0:b6:7d:06:34:bc:32:2e:
16:ab:c3:4e:99:58:7a:97:86:75:8c:3c:de:36:7d:
90:18:10:6e:0f:2f:b4:b9:f0:ba:f2:81:34:9e:b8:
44:5a:e0:6c:8f:6e:46:83:38:58:7b:7a:55:a5:2e:
8d:43:e2:15:12:06:ee:ce:f8:39:22:97:24:4c:0a:
eb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B7:76:2C:A9:FC:5C:24:0A:BC:DD:8B:30:3C:DF:F3:FF:40:D2:C2
X509v3 Authority Key Identifier:
keyid:EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/9bd2LKn8XCQKvN2LMDzf8_9A0sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1e81::/32
Signature Algorithm: sha256WithRSAEncryption
c8:ac:0a:ac:c0:0a:b1:cb:82:c5:df:0d:72:84:17:17:90:01:
85:4c:6e:35:b0:ff:9b:33:d5:20:67:2a:7b:d2:f5:16:8c:89:
00:85:d8:65:9a:60:d7:53:98:c9:65:3e:51:d7:70:91:e8:6e:
dc:b9:7a:92:a9:3a:58:96:b7:66:fc:36:e2:07:21:ab:c5:ea:
05:7b:d0:51:01:43:59:13:34:41:e9:3e:85:9f:2f:19:68:91:
9b:01:1b:c2:30:91:70:44:0e:ae:4d:0d:57:1c:aa:3e:81:8e:
35:92:29:bb:f8:40:40:fe:f9:ff:95:ea:23:6c:ab:04:93:33:
1b:f0:6e:29:9c:eb:44:1c:d2:29:42:fb:17:df:e9:48:e1:49:
0e:a3:c0:85:cd:38:9a:35:29:df:15:f4:42:61:aa:01:6b:37:
60:07:6b:b0:02:20:b5:9f:13:ba:18:aa:7a:ac:9e:01:90:a6:
5f:7c:78:09:79:da:eb:8e:a1:8f:29:2e:54:b2:c3:7c:a2:ca:
fb:bd:07:92:4b:82:3b:f1:cc:2c:9c:b2:ba:5e:c4:fb:00:53:
0d:08:d8:15:44:91:ba:e6:6c:e5:93:ad:5a:79:02:0c:a3:8a:
aa:d4:5e:24:e3:b6:97:ae:d8:3e:35:e9:52:e0:62:32:7e:0c:
5c:a8:ac:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:41:21 2026 by rpki-client