Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/2T9DSo-2hRMwyDKTpHRU9HH1lcA.roa
File: 2T9DSo-2hRMwyDKTpHRU9HH1lcA.roa (raw, json)
Hash identifier: vonCqw177EY9ahz7nhLL3PHk00YExusXDppCrL4dwlY=
Subject key identifier: D9:3F:43:4A:8F:B6:85:13:30:C8:32:93:A4:74:54:F4:71:F5:95:C0
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01A13A5B2302720383300E79BA837F55DE8A
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/2T9DSo-2hRMwyDKTpHRU9HH1lcA.roa
Signing time: Wed 14 Oct 2026 12:20:13 +0000
ROA not before: Wed 14 Oct 2026 12:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197200
IP address blocks: 2a06:b3c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:5b:23:02:72:03:83:30:0e:79:ba:83:7f:55:de:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Oct 14 12:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d93f434a8fb6851330c83293a47454f471f595c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:7a:e0:49:0a:a2:e0:64:7f:2a:02:91:80:
d6:14:a8:43:40:2f:9d:c0:2e:d7:6a:00:b9:db:f7:
a2:5d:32:70:37:c8:f3:a4:a6:c2:ac:ae:74:09:8c:
1e:5f:3e:4d:a3:06:46:22:ef:ac:95:7e:78:ac:38:
50:64:98:d2:fc:cb:a1:e0:97:de:92:71:14:cc:b8:
91:d5:1e:72:e4:ad:d4:94:42:7c:b4:35:b5:ce:eb:
36:d3:bc:99:b5:c9:7b:ef:ed:53:93:b8:ce:fc:1f:
23:f1:f0:de:b3:dc:7c:47:d2:2c:7d:67:80:8f:f9:
fd:97:df:5b:2e:62:48:4f:ea:be:9d:ea:38:52:6a:
82:1d:77:0f:67:79:b4:d7:2b:a8:bb:37:7c:e5:77:
b6:87:7b:45:24:97:9a:5c:52:13:cc:b9:84:f9:3b:
9b:92:f7:bc:83:87:b7:ad:e3:a3:fb:84:28:c7:96:
d2:32:66:68:7d:2b:88:be:18:d8:f3:65:c5:fd:4b:
f8:38:b7:48:39:15:ec:ee:bf:54:9d:06:9f:a5:fe:
57:8f:21:fe:2f:87:7e:f5:54:38:ee:dc:0e:d8:6d:
ba:91:2d:d9:cb:54:05:61:a0:5b:5a:60:94:a2:df:
3a:75:93:71:a6:d6:d6:56:3e:51:2b:67:6f:84:11:
2d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3F:43:4A:8F:B6:85:13:30:C8:32:93:A4:74:54:F4:71:F5:95:C0
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/2T9DSo-2hRMwyDKTpHRU9HH1lcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b3c0::/29
Signature Algorithm: sha256WithRSAEncryption
68:46:8c:24:07:c1:93:55:99:46:bd:62:e0:ce:6f:5f:ac:32:
49:19:2c:1f:13:a6:d6:b5:d4:e0:7f:c1:b3:e5:48:3e:81:14:
97:21:22:ff:ea:3d:25:18:e0:55:c2:ee:7a:5a:2b:9c:02:7b:
8c:57:7b:c2:3e:69:ac:a4:1c:5a:7d:88:1c:2f:e6:d1:ad:fa:
6c:db:33:b7:11:c9:e2:52:f3:9d:f8:2a:2e:3b:5f:64:25:05:
1e:48:e7:98:45:b3:c8:65:83:50:f9:55:ca:ea:e0:71:4e:b9:
eb:01:8b:d7:c5:06:c5:e1:b8:45:c9:d6:7d:31:44:30:52:21:
f5:16:bf:b5:eb:2d:7e:ae:19:76:2b:f0:75:ca:46:61:d2:df:
f3:33:cd:41:81:81:86:00:78:fc:cf:05:d2:87:2b:04:66:f9:
4d:89:fc:23:dc:2d:0d:a7:62:9d:43:e6:70:95:65:08:5c:f0:
b8:be:4e:7e:58:6f:bd:b7:fb:6e:12:27:44:a0:f8:c3:bc:00:
f0:4b:78:f7:bd:23:db:2f:d4:ce:c5:98:56:b9:5b:c7:01:70:
bd:35:9f:2c:87:50:07:54:33:06:a9:9d:30:c6:98:89:25:7a:
df:bc:e3:99:3e:60:56:a6:c5:bb:93:67:b5:c3:12:dd:c4:b4:
fd:a6:ce:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:29 2026 by rpki-client