Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/T9U3jQACGl_voXbKIQx_h4mNSxU.roa
File: T9U3jQACGl_voXbKIQx_h4mNSxU.roa (raw, json)
Hash identifier: anyXF3uiUdKKNrL5Tk4vNV4jqAnaMh1YXU1V/82OpNU=
Subject key identifier: 4F:D5:37:8D:00:02:1A:5F:EF:A1:76:CA:21:0C:7F:87:89:8D:4B:15
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 019F47F5DFAD68550D0AF3B2843490DC7B58
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/T9U3jQACGl_voXbKIQx_h4mNSxU.roa
Signing time: Thu 09 Jul 2026 17:38:43 +0000
ROA not before: Thu 09 Jul 2026 17:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7289
IP address blocks: 2a12:e080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:df:ad:68:55:0d:0a:f3:b2:84:34:90:dc:7b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jul 9 17:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fd5378d00021a5fefa176ca210c7f87898d4b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:5c:63:aa:a6:20:0d:fd:b7:55:ca:77:91:
d0:a3:e4:e2:e5:03:bf:15:3f:4c:a3:32:db:6f:d9:
a7:df:55:ce:3b:53:96:ce:15:ba:78:05:8c:77:5f:
73:5f:2d:61:17:9c:90:96:e8:94:f5:67:ab:e9:cc:
32:ff:34:bc:6e:a6:e2:9d:8c:22:2e:17:de:55:fa:
c1:a7:8b:74:ea:ca:e3:40:f6:e2:25:f4:fe:d6:f6:
e1:79:c7:49:cd:d3:9d:ec:08:9c:04:a4:93:72:9d:
8c:c9:2d:0e:1f:ed:95:be:91:78:8c:00:84:4b:c6:
98:65:69:42:47:2c:82:a0:46:85:6c:a3:cc:23:21:
a1:80:e2:7e:a1:be:f9:cf:c3:e3:21:5d:bc:2d:2e:
cf:c2:96:4b:63:7a:8a:8a:48:1f:74:bd:0c:28:93:
b8:6a:48:a8:d0:d2:df:75:9f:5a:34:be:c0:c8:df:
9d:c5:46:f5:88:26:48:fe:97:00:52:3b:e6:83:c0:
46:20:ab:59:76:a5:c5:e5:e8:c3:b5:73:44:f1:2c:
c5:bc:ea:97:35:06:00:c4:60:fc:a4:28:16:15:5a:
1a:3f:3c:8e:9b:53:7b:b1:ad:56:8a:ab:37:14:dd:
65:ce:63:41:c5:88:17:09:cb:63:09:2a:19:15:b7:
81:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D5:37:8D:00:02:1A:5F:EF:A1:76:CA:21:0C:7F:87:89:8D:4B:15
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/T9U3jQACGl_voXbKIQx_h4mNSxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:e080::/29
Signature Algorithm: sha256WithRSAEncryption
10:55:24:a0:3a:f5:40:90:83:4a:cb:ef:3c:8e:10:6a:0f:58:
f5:9b:ad:89:2a:bb:72:62:ae:35:06:b3:06:b8:b4:70:3a:67:
f7:b6:bb:13:ce:15:bc:d1:33:91:9f:e1:5b:fd:21:e9:b6:68:
c2:1c:7e:06:2a:b6:ae:75:a0:61:8a:10:c0:fa:fd:d0:53:4c:
56:15:66:76:0a:85:ff:a0:dc:65:8f:34:38:dc:91:b9:20:0d:
b3:9e:56:b0:c2:4c:7e:3e:33:71:b8:a9:71:04:86:03:d0:02:
65:04:a4:3c:19:d2:c7:67:d2:37:a5:a0:8f:4d:33:46:cc:90:
3e:32:6b:31:07:a6:6a:d5:df:16:e2:13:07:e4:ec:fa:7a:83:
d2:1e:e8:fc:b8:66:e4:dd:c8:f5:d1:93:44:62:26:7f:29:41:
a0:b1:bf:fb:33:9b:cb:00:ed:5b:58:fc:88:8a:c8:79:d9:8d:
e6:e7:49:c9:3a:93:81:8c:fc:f7:c2:a9:da:24:fa:42:fd:ca:
8a:a9:c9:0a:fe:ea:97:8f:75:d4:72:89:dc:72:44:b9:e3:6e:
dd:a4:a9:ef:e7:2b:9a:33:71:5e:a5:5b:83:06:19:27:1c:d0:
d7:99:17:84:90:18:b1:69:50:8a:41:6d:df:b6:1a:7e:97:06:
e8:e8:a4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:36:54 2026 by rpki-client