Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DOagJtsfKB1HahHMzmqDBfGxYhA.roa
File: DOagJtsfKB1HahHMzmqDBfGxYhA.roa (raw, json)
Hash identifier: 9DVBrUFCpHnDX1EBfcF7hOCk4x3tA7z1vWHn4R4RWN8=
Subject key identifier: 0C:E6:A0:26:DB:1F:28:1D:47:6A:11:CC:CE:6A:83:05:F1:B1:62:10
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019F75BB42EC4B703B9494D199EB1B2B3734
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DOagJtsfKB1HahHMzmqDBfGxYhA.roa
Signing time: Sat 18 Jul 2026 14:57:14 +0000
ROA not before: Sat 18 Jul 2026 14:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401293
IP address blocks: 2a09:340::/29 maxlen: 29
2a10:dfc0::/29 maxlen: 29
2a11:2a80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:bb:42:ec:4b:70:3b:94:94:d1:99:eb:1b:2b:37:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jul 18 14:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ce6a026db1f281d476a11ccce6a8305f1b16210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8a:f9:0f:0b:dd:34:01:75:98:5b:5e:28:78:
ed:d2:2a:ae:b5:08:48:a3:f2:11:9f:01:06:60:c3:
25:8a:07:d3:da:31:dd:41:67:d7:e4:7f:32:77:d9:
f4:a4:fc:24:e0:6d:69:ae:d3:6d:4c:b0:26:82:f1:
72:87:09:a0:33:32:2e:7d:e3:72:76:22:8d:7f:86:
b4:03:03:ba:bc:da:5a:68:07:11:53:63:8b:53:51:
d0:da:c2:a9:a6:60:d0:fe:53:b4:9e:21:76:a1:bd:
45:aa:0a:d6:ce:30:a2:98:d6:1e:ef:68:db:6c:64:
8d:04:87:9f:c5:56:cb:8b:50:e4:81:79:81:63:15:
25:63:4f:25:d2:0e:a9:54:b0:07:b4:7c:35:9d:ad:
6d:9f:f5:9e:79:ec:9e:fa:28:5d:0f:46:b1:6e:3c:
00:93:c7:4a:2a:69:28:16:35:f5:60:9e:19:ba:55:
23:7f:1b:98:56:d9:70:67:b9:13:c6:91:23:90:6a:
fa:fa:bc:cd:59:d1:e3:2b:2b:ea:f9:96:85:11:64:
14:8d:95:e3:27:c3:5e:67:41:c2:18:24:0e:09:34:
a8:f3:9a:f0:9b:b2:4f:e4:c0:38:03:ff:c5:01:5d:
7a:9a:62:ad:5c:3a:af:89:5e:9c:6a:05:81:91:53:
6a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E6:A0:26:DB:1F:28:1D:47:6A:11:CC:CE:6A:83:05:F1:B1:62:10
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DOagJtsfKB1HahHMzmqDBfGxYhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:340::/29
2a10:dfc0::/29
2a11:2a80::/29
Signature Algorithm: sha256WithRSAEncryption
4d:0d:24:4f:6b:13:9b:c0:67:30:2e:38:63:a8:b3:ae:79:29:
61:a6:4c:f8:d5:8f:e1:79:fe:0d:73:86:05:78:11:45:97:d6:
ec:56:6a:ce:5c:9c:72:92:61:8c:81:66:bc:3a:66:14:40:db:
cd:7f:f6:a8:0d:68:31:26:e7:46:be:2a:25:2d:f4:cb:cd:7d:
40:b4:1a:0a:6e:68:15:ff:0b:cb:cc:79:84:46:b9:f9:55:6d:
e9:ca:78:e0:a5:a2:df:32:10:8e:f7:c6:29:ef:d1:81:0a:b7:
9e:d3:60:58:01:d9:3f:eb:72:45:bd:39:ef:5a:dd:98:9b:75:
55:ae:55:b3:7e:5f:cd:29:cd:ee:35:25:9b:90:9f:7d:07:40:
62:95:9a:5e:9a:6e:75:13:2f:29:92:aa:e6:67:28:59:04:4b:
6c:89:9a:89:e6:23:22:ef:85:2b:b2:3c:00:9a:95:f5:29:a9:
e9:22:42:09:e3:42:62:25:7d:18:31:07:17:7b:d7:0a:94:38:
57:8b:bf:dc:e7:49:ff:a6:16:da:8a:a9:bb:4e:b4:41:d7:31:
c2:4d:0f:41:25:8c:79:8a:67:f1:10:6d:40:4b:12:a7:84:96:
eb:cb:cc:00:08:4d:8a:1f:a7:5f:fa:ba:cc:66:8d:11:6d:9d:
16:81:c5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 02:42:32 2026 by rpki-client