Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/9P0_uQ9PiRWmZc_maEYyWbMW7lE.roa
File: 9P0_uQ9PiRWmZc_maEYyWbMW7lE.roa (raw, json)
Hash identifier: xH+2A3aP3ny6AN/qjM0x91L6v7H5jOztfLlqeuWe2mI=
Subject key identifier: F4:FD:3F:B9:0F:4F:89:15:A6:65:CF:E6:68:46:32:59:B3:16:EE:51
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 019C0F1DB3E9A4F4530EB66BDCB6B57A6E1B
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/9P0_uQ9PiRWmZc_maEYyWbMW7lE.roa
Signing time: Fri 30 Jan 2026 13:35:30 +0000
ROA not before: Fri 30 Jan 2026 13:35:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139803
IP address blocks: 2a06:cac0::/29 maxlen: 48
2a11:9600::/29 maxlen: 48
2a12:ec0::/29 maxlen: 48
2a12:1900::/29 maxlen: 48
2a12:28c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0f:1d:b3:e9:a4:f4:53:0e:b6:6b:dc:b6:b5:7a:6e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jan 30 13:35:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4fd3fb90f4f8915a665cfe668463259b316ee51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:28:bd:ef:34:95:96:4a:d9:5c:b8:3e:a8:
9d:98:84:f7:3c:c2:5b:45:59:96:47:2b:a1:68:84:
f1:0e:70:ff:23:8e:ad:48:42:82:18:f3:91:fd:8f:
39:31:43:62:09:7e:b8:34:af:6f:34:25:35:3a:bf:
ed:28:ae:4a:84:33:21:80:56:b4:f2:a9:ae:c3:d5:
f4:6c:16:ec:cb:0c:2d:f3:f4:df:33:8f:4d:08:24:
f3:f3:b4:88:34:17:45:9d:da:7d:ee:19:29:56:37:
3a:eb:aa:05:50:ce:e3:5b:73:5d:d7:98:20:e0:27:
15:03:15:2a:68:b3:9e:23:7f:df:36:78:2e:2f:8d:
aa:e8:fd:d0:37:f6:d0:4c:97:fd:1d:13:e6:7f:24:
6d:89:44:3a:a1:92:65:6a:0d:47:03:40:eb:a1:ed:
be:90:0c:63:62:4c:90:53:b0:2e:0b:ab:b5:f0:c7:
d0:cf:c7:64:90:7f:aa:2f:14:f0:2e:b0:d0:48:5d:
08:71:db:3a:82:a1:2f:35:77:ca:63:a6:6b:8c:0b:
be:fe:a4:e1:df:15:90:84:b3:5d:78:39:41:ff:3e:
50:5b:35:78:6e:af:20:85:ec:74:57:05:b0:03:aa:
ac:01:d4:74:1f:fe:c8:34:ba:47:80:9d:08:32:e8:
2d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FD:3F:B9:0F:4F:89:15:A6:65:CF:E6:68:46:32:59:B3:16:EE:51
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/9P0_uQ9PiRWmZc_maEYyWbMW7lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:cac0::/29
2a11:9600::/29
2a12:ec0::/29
2a12:1900::/29
2a12:28c0::/29
Signature Algorithm: sha256WithRSAEncryption
68:29:da:23:8b:03:7e:b9:2b:6b:3b:c4:94:5e:33:35:91:20:
1a:7c:24:6c:86:14:3b:a2:0c:c3:b0:3e:04:f7:55:ba:64:6f:
47:ab:1c:ec:c6:5a:ec:2c:6f:80:ad:36:36:ce:c1:55:3e:b0:
25:05:04:af:fd:8a:a2:2b:3d:eb:29:54:6b:9f:47:a5:87:00:
ec:d8:d5:0b:46:14:bd:50:a6:93:06:96:5c:da:f8:05:86:6f:
b6:eb:57:1e:d1:cd:51:e5:4f:43:26:1f:58:5e:de:5d:95:3c:
e8:3c:70:97:3a:0e:f4:7d:2d:ba:58:20:3b:3d:7f:62:46:3c:
fc:24:35:31:4b:5e:39:48:16:3a:2c:38:03:12:c1:00:63:61:
40:24:83:ab:0a:16:2c:e8:56:75:49:08:1a:5a:1c:dd:cb:39:
74:e4:ce:97:f0:37:2f:39:80:27:52:f1:9a:ff:31:29:4c:72:
27:86:7e:70:1b:33:62:b9:36:66:15:84:1e:91:ec:a1:4f:b4:
8d:94:0f:c5:5b:4b:98:b1:82:b9:e2:00:bd:64:7b:f0:b4:4a:
7f:af:87:8a:bd:4a:28:e8:00:7a:e4:b0:d8:a6:af:1e:90:b3:
49:03:10:8f:fe:1a:fb:14:23:2e:7a:05:13:27:e0:02:9e:95:
7d:64:0b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 05:55:43 2026 by rpki-client