Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/sG6xzmCQsjFk9SFEnHbqxRMIs0M.roa
File: sG6xzmCQsjFk9SFEnHbqxRMIs0M.roa (raw, json)
Hash identifier: FNdM0KdPHNtflmb0qa5JAL8X2//mfNIl0cwPNM+1LsM=
Subject key identifier: B0:6E:B1:CE:60:90:B2:31:64:F5:21:44:9C:76:EA:C5:13:08:B3:43
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019C714FFB9F4B5D6D3C105D25BFF9818B9A
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/sG6xzmCQsjFk9SFEnHbqxRMIs0M.roa
Signing time: Wed 18 Feb 2026 15:13:13 +0000
ROA not before: Wed 18 Feb 2026 15:13:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43109
IP address blocks: 2a12:9f00:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:71:4f:fb:9f:4b:5d:6d:3c:10:5d:25:bf:f9:81:8b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 18 15:13:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b06eb1ce6090b23164f521449c76eac51308b343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:50:75:cf:52:a4:f8:78:f7:b0:38:90:a0:
cf:94:8a:9b:cc:cf:f5:c6:85:96:10:66:ca:bd:5a:
cf:93:9b:9a:f6:d4:14:26:1e:26:67:fa:16:7c:83:
3e:42:aa:d8:fb:93:3d:5d:fc:97:10:51:fa:54:1a:
7e:52:d0:f1:bf:41:94:69:1a:2f:cb:25:b7:99:80:
4e:96:4d:f2:36:20:86:15:29:e2:77:d9:53:45:e0:
0b:0d:ae:db:72:ca:99:e9:31:91:f2:38:4e:c6:6c:
ea:54:87:bc:84:08:86:bd:23:61:73:cc:12:7e:b9:
c5:c3:dd:f3:86:cf:60:de:f9:8f:8f:c9:ad:e8:9a:
03:14:99:7e:ff:da:5f:5f:eb:96:ba:c6:51:bd:e4:
74:85:02:97:a3:c1:92:f6:ad:c2:75:cc:db:8b:69:
8a:07:d6:fe:f9:93:df:e0:54:80:9a:7f:82:80:3e:
19:56:7a:00:84:73:4e:42:32:5c:f9:5e:b2:07:bf:
4e:b1:23:6b:e4:8c:ed:55:08:18:a6:3e:70:46:79:
7e:a2:d9:d8:7c:59:bb:02:46:f1:d0:14:83:73:d8:
9a:7f:0e:cd:23:44:53:ff:f6:db:3d:b5:fe:43:31:
8b:cf:8d:66:45:26:a5:02:52:6a:50:ab:e8:74:de:
f4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6E:B1:CE:60:90:B2:31:64:F5:21:44:9C:76:EA:C5:13:08:B3:43
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/sG6xzmCQsjFk9SFEnHbqxRMIs0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:9f00:1::/48
Signature Algorithm: sha256WithRSAEncryption
ab:c9:c3:25:44:2a:ec:5c:a1:50:aa:2f:33:5d:a4:e1:be:8e:
27:c8:97:17:d4:f4:c9:4f:91:a4:85:8b:46:4a:a9:c1:06:6d:
9f:15:cb:3f:d7:65:7b:99:89:2d:42:1f:b7:2e:66:3b:24:10:
f6:16:8d:2a:8a:a3:32:69:aa:d5:0b:25:78:af:a2:7f:0a:f1:
32:ad:42:5c:b7:5b:90:5d:f3:72:7c:f0:f3:e7:0a:82:31:46:
b4:f1:1f:55:a6:20:b4:ab:35:97:e4:0b:0a:1a:2b:5d:5c:15:
d6:2f:81:10:3f:01:22:96:d0:e4:e6:9e:a2:ce:29:ea:5f:21:
46:9d:15:d4:5b:8b:10:52:8c:c7:fd:0a:98:84:66:e6:89:70:
59:77:34:f9:2b:f5:c8:a0:90:27:d1:20:5a:b3:c6:52:67:49:
97:9b:79:64:d4:b4:fc:b9:cb:b2:9e:c4:c2:d1:12:eb:0e:1c:
8c:96:fb:12:4f:67:91:9f:c1:0a:73:8f:8e:1d:e3:5b:1e:be:
10:26:79:db:70:d8:9a:5b:67:a9:43:05:88:79:f0:fc:59:38:
27:84:45:38:f4:36:0e:7d:61:80:de:f4:53:7d:ed:f9:15:f8:
5b:c8:3b:f1:21:18:50:bd:48:26:4a:ef:4f:cb:d6:4c:88:f2:
de:71:64:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 07:43:33 2026 by rpki-client