Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/9s8duTaVPBwX4Nzo2iqt3hb4wFE.roa
File: 9s8duTaVPBwX4Nzo2iqt3hb4wFE.roa (raw, json)
Hash identifier: x4Hf0MUqqZrvyo5hg+mWMAn160oGdqBGyiNHvsVgKiE=
Subject key identifier: F6:CF:1D:B9:36:95:3C:1C:17:E0:DC:E8:DA:2A:AD:DE:16:F8:C0:51
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019CF2F8AEE898492162AC82B41D02D039A9
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/9s8duTaVPBwX4Nzo2iqt3hb4wFE.roa
Signing time: Sun 15 Mar 2026 19:28:29 +0000
ROA not before: Sun 15 Mar 2026 19:28:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a05:9a40::/29 maxlen: 29
2a06:5fc0::/29 maxlen: 29
2a0f:9b40::/29 maxlen: 29
2a10:3f80::/29 maxlen: 29
2a13:b9c0::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a14:1100::/32 maxlen: 32
2a14:1101::/32 maxlen: 32
2a14:1102::/32 maxlen: 32
2a14:1103::/32 maxlen: 32
2a14:1104::/32 maxlen: 32
2a14:1105::/32 maxlen: 32
2a14:1106::/32 maxlen: 32
2a14:1107::/32 maxlen: 32
2a14:42c0::/29 maxlen: 29
2a14:62c0::/29 maxlen: 29
2a14:6a40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f2:f8:ae:e8:98:49:21:62:ac:82:b4:1d:02:d0:39:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 15 19:28:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6cf1db936953c1c17e0dce8da2aadde16f8c051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:fe:c2:69:95:ad:ae:03:1c:d4:c3:41:65:
fd:31:ca:c0:95:6f:e8:ee:3f:a3:54:76:74:dd:ee:
75:f2:4c:06:b4:06:98:a2:49:12:c5:3a:83:86:50:
2a:d7:39:21:02:10:4b:f9:bf:ff:1a:7d:42:bf:03:
ba:8b:f8:bc:9c:9b:56:b9:85:63:bc:90:52:ad:8a:
a6:7b:50:f3:e0:9d:9e:aa:58:1a:72:64:0a:12:1b:
93:3b:f2:5d:28:b1:1a:67:f4:a2:a0:1a:40:03:af:
6e:f2:64:83:84:ce:cd:ad:f5:cd:d9:ad:47:65:b5:
7f:06:07:8c:3b:f6:46:9a:f7:b1:33:78:98:f9:51:
09:a2:6c:4b:1a:39:01:bd:ca:c3:72:1f:7e:60:3d:
18:4e:9d:55:3e:99:d2:13:4d:9c:1e:f2:ba:ac:8b:
ad:6c:e4:b5:c0:82:e7:74:0a:97:05:30:38:85:45:
06:7f:27:3d:64:63:31:08:e7:ec:04:24:b8:06:52:
6c:eb:de:ca:47:b0:ce:90:1b:56:ef:90:be:3d:f0:
8e:76:2c:a1:da:59:01:87:5e:d7:35:e4:79:10:e4:
ba:28:d0:da:8f:b9:89:09:ea:17:cd:1a:3d:c5:30:
4b:62:e8:e9:12:7e:68:cd:3a:05:44:3d:84:e0:c7:
57:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CF:1D:B9:36:95:3C:1C:17:E0:DC:E8:DA:2A:AD:DE:16:F8:C0:51
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/9s8duTaVPBwX4Nzo2iqt3hb4wFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9a40::/29
2a06:5fc0::/29
2a0f:9b40::/29
2a10:3f80::/29
2a13:b9c0::/29
2a13:bb40::/29
2a13:c240::/29
2a13:c340::/29
2a14:1100::/29
2a14:42c0::/29
2a14:62c0::/29
2a14:6a40::/32
Signature Algorithm: sha256WithRSAEncryption
cb:3d:aa:74:ac:52:7c:66:33:f0:e2:a2:a4:7c:45:3a:6d:ce:
f4:3a:6e:d8:2e:95:ad:99:93:48:2c:a4:bc:48:75:8f:ee:53:
bf:02:1c:70:6f:18:6c:78:f4:2d:e7:b1:68:c9:c3:de:47:13:
83:b2:6c:d1:d7:43:9a:98:eb:f2:d1:fd:af:04:a9:68:ac:37:
ca:9f:25:b6:6b:70:19:68:8a:09:93:ef:53:f6:d3:1a:42:2d:
3d:ae:eb:7d:89:c5:5f:a6:83:d8:86:71:f9:72:f1:d2:e3:5a:
02:48:c0:6c:56:f0:d0:0d:8d:95:a7:4d:d3:f6:f0:63:05:74:
f1:97:aa:7c:d1:7d:36:b6:14:fe:63:19:58:68:92:de:17:20:
85:52:2b:a9:47:41:eb:ab:db:b2:9e:85:57:68:cb:b3:4f:08:
db:ce:bd:a6:28:38:08:a8:78:b5:a8:fb:6a:ef:e1:8d:a3:5d:
d3:b6:dc:5c:0e:38:91:dc:c2:2c:02:c8:dd:8a:39:14:e8:3e:
51:c5:b8:45:b5:e8:8e:bc:a8:ea:ed:45:85:52:86:4c:ec:89:
b5:de:39:d0:96:f4:14:4d:42:6d:85:19:30:22:ed:86:eb:35:
d7:dd:54:1c:c2:12:e8:83:f8:48:24:81:a6:ef:c3:e1:a4:99:
af:45:54:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 23:01:33 2026 by rpki-client