Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/9QB3pRn9PubMm-sdmxeRYwLeBP8.roa
File: 9QB3pRn9PubMm-sdmxeRYwLeBP8.roa (raw, json)
Hash identifier: 7rzxH5LTxoDtnlotTKoK2mTBBo6jQZySFH5mS1h3HoI=
Subject key identifier: F5:00:77:A5:19:FD:3E:E6:CC:9B:EB:1D:9B:17:91:63:02:DE:04:FF
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A10CA97C50C99115A4F75AEB00A5AE9CF2
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/9QB3pRn9PubMm-sdmxeRYwLeBP8.roa
Signing time: Mon 05 Oct 2026 15:23:16 +0000
ROA not before: Mon 05 Oct 2026 15:23:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a0e:4001:100::/40 maxlen: 128
2a0e:4001:1000::/36 maxlen: 128
2a0e:4001:2000::/36 maxlen: 36
2a10:2ec0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:a9:7c:50:c9:91:15:a4:f7:5a:eb:00:a5:ae:9c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Oct 5 15:23:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f50077a519fd3ee6cc9beb1d9b17916302de04ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8f:ba:be:bf:38:0a:65:0d:51:4f:10:c5:50:
2b:3e:13:d4:bd:1b:85:78:2f:34:fc:e5:c5:aa:97:
37:b5:01:c0:62:2a:55:dc:d5:9c:09:66:3c:56:a8:
b2:73:b2:9d:b2:15:1a:cd:a8:51:e7:c5:13:60:9e:
79:de:28:1c:dc:7b:30:de:2a:0e:2e:c6:45:3f:c1:
c6:cf:c6:50:a8:fe:46:9f:5f:9a:56:85:5b:a6:7c:
6c:63:63:b6:a0:ff:9d:36:fc:e9:89:95:9d:ce:fd:
fe:f7:a9:9f:75:28:cf:0b:ff:54:de:12:04:3d:ce:
c4:e2:b9:45:2d:36:be:26:a4:6e:2e:40:a7:e9:ea:
9d:c7:5e:8d:53:de:89:fa:cc:1b:ff:05:1b:a6:75:
70:64:5c:b5:48:23:5f:6c:d0:01:e1:d5:3e:b7:27:
18:c2:f3:1e:b0:b4:48:b5:d9:a5:ea:8a:df:60:e4:
95:01:5a:f2:05:14:76:83:5a:0a:89:ad:4a:38:6d:
6a:7f:15:6e:ea:37:20:15:b5:6a:e9:1e:27:3f:a1:
95:ec:04:63:bb:03:92:8f:69:93:cf:ae:46:7b:58:
84:41:42:e9:21:09:1e:b1:87:52:73:c5:f1:d5:f9:
7f:ef:83:12:67:78:e8:5e:01:1c:65:19:12:9e:2c:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:00:77:A5:19:FD:3E:E6:CC:9B:EB:1D:9B:17:91:63:02:DE:04:FF
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/9QB3pRn9PubMm-sdmxeRYwLeBP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4001:100::/40
2a0e:4001:1000::-2a0e:4001:2fff:ffff:ffff:ffff:ffff:ffff
2a10:2ec0::/29
Signature Algorithm: sha256WithRSAEncryption
49:cf:df:cc:df:a5:aa:3f:b3:3a:22:be:ba:1e:57:12:d8:c7:
ac:f0:3f:3b:c3:20:99:e8:59:fa:32:1e:cb:98:1a:86:a2:64:
2c:a9:2a:29:b3:ff:59:f8:a6:f6:21:2e:20:d6:6c:d4:3f:24:
06:f2:c4:11:ec:81:ee:00:61:e2:0a:13:95:09:c4:b0:ad:c1:
f4:2f:f8:c8:8b:28:48:83:ac:06:c6:af:79:07:1b:58:db:b3:
71:49:fc:e2:a6:47:c6:45:75:57:62:33:d5:87:5a:1c:2e:06:
6c:5d:b1:f4:8c:27:39:46:30:42:ee:7e:62:91:fc:2c:56:5e:
05:d2:aa:73:ca:0d:3d:0c:03:51:71:ab:42:85:5c:f4:f1:84:
e0:e3:ed:50:11:f2:7a:91:e9:ea:a9:58:26:2a:63:50:01:db:
b4:44:bc:85:a4:9d:fa:05:7a:37:2a:b8:fa:76:1a:03:f7:f9:
c5:13:99:3d:61:2a:c6:87:45:7b:e1:38:54:02:e4:bf:fa:33:
2c:fe:fc:43:2d:f8:9a:48:61:1b:73:94:17:77:33:b6:a6:6d:
ab:40:e4:f4:e2:31:75:18:c2:4a:65:1c:ba:c1:db:57:c7:f7:
d5:76:f6:c3:97:1f:0d:2c:57:13:12:57:f3:ee:cd:17:d1:fa:
f0:38:ef:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:50:05 2026 by rpki-client