Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/992fq_vGVR9DhcbPe8CUBvscAjo.roa
File: 992fq_vGVR9DhcbPe8CUBvscAjo.roa (raw, json)
Hash identifier: ZIybI4m8ghsWbqdFNo303oecu4P0wgHVi4nE/lbnR9s=
Subject key identifier: F7:DD:9F:AB:FB:C6:55:1F:43:85:C6:CF:7B:C0:94:06:FB:1C:02:3A
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A0019C7D41E89AD5964F755B9C59DDCC39
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/992fq_vGVR9DhcbPe8CUBvscAjo.roa
Signing time: Fri 14 Aug 2026 18:50:27 +0000
ROA not before: Fri 14 Aug 2026 18:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58285
IP address blocks: 2a09:f000::/29 maxlen: 64
2a11:d440::/29 maxlen: 64
2a11:ef40::/29 maxlen: 64
2a11:fbc0::/29 maxlen: 64
2a12:ac0::/29 maxlen: 64
2a12:2a40::/29 maxlen: 64
2a12:33c0::/29 maxlen: 64
2a12:3b00::/29 maxlen: 64
2a12:3b80::/29 maxlen: 64
2a12:4d00::/29 maxlen: 64
2a12:4f80::/29 maxlen: 64
2a12:5a80::/29 maxlen: 64
2a12:6e80::/29 maxlen: 64
2a12:9c00::/29 maxlen: 64
2a12:a400::/29 maxlen: 64
2a12:b980::/29 maxlen: 64
2a12:cd80::/29 maxlen: 64
2a12:dd80::/29 maxlen: 64
2a12:ef80::/29 maxlen: 64
2a12:f000::/29 maxlen: 64
2a12:f400::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:9c:7d:41:e8:9a:d5:96:4f:75:5b:9c:59:dd:cc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Aug 14 18:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7dd9fabfbc6551f4385c6cf7bc09406fb1c023a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a5:7b:01:a1:a8:98:81:2a:6f:2b:9b:81:fc:
8c:e9:67:f2:89:42:a4:9f:c1:a1:8e:0a:7f:84:f1:
cd:5e:69:f4:96:59:9f:37:90:ef:32:88:25:65:a8:
f6:11:85:17:a8:99:88:ad:23:93:df:55:be:c5:a1:
f4:f7:3b:91:ae:1c:a8:28:dc:1a:fc:91:11:13:f4:
3c:1f:d7:a2:09:27:5d:da:0b:64:e5:00:7b:8d:52:
1a:f8:c6:d9:cb:b6:bd:f0:be:e7:5d:74:27:4d:cb:
a7:c6:3d:12:e9:ad:57:a5:46:21:f8:d7:b0:82:ed:
e5:cd:1c:83:f8:8b:0a:31:22:d2:83:d8:6b:97:40:
db:77:7c:e1:d3:b7:e6:71:b3:ba:da:f2:79:9d:6d:
4a:db:f4:bd:64:33:f0:89:f3:06:62:24:cc:f0:e4:
c1:90:99:f2:66:23:f2:8d:dc:2f:a0:e2:a5:9e:36:
35:c9:9b:46:06:25:0a:8b:08:79:fd:ae:d7:28:16:
34:4f:ff:2e:69:00:71:94:28:63:80:81:47:f7:6f:
20:c7:cb:de:a0:10:2b:ab:98:0a:f0:5b:63:f6:90:
72:97:71:55:40:f8:4b:7f:5d:1f:92:88:cf:a3:07:
df:a3:dd:56:1f:28:01:a6:4b:e3:8e:38:23:63:15:
a0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DD:9F:AB:FB:C6:55:1F:43:85:C6:CF:7B:C0:94:06:FB:1C:02:3A
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/992fq_vGVR9DhcbPe8CUBvscAjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:f000::/29
2a11:d440::/29
2a11:ef40::/29
2a11:fbc0::/29
2a12:ac0::/29
2a12:2a40::/29
2a12:33c0::/29
2a12:3b00::/29
2a12:3b80::/29
2a12:4d00::/29
2a12:4f80::/29
2a12:5a80::/29
2a12:6e80::/29
2a12:9c00::/29
2a12:a400::/29
2a12:b980::/29
2a12:cd80::/29
2a12:dd80::/29
2a12:ef80::/29
2a12:f000::/29
2a12:f400::/29
Signature Algorithm: sha256WithRSAEncryption
2b:d1:1b:aa:b6:26:89:ff:0b:17:5f:fe:63:4d:71:30:c9:17:
0b:ca:65:90:4b:75:f2:df:74:19:3a:f3:87:c7:cd:8f:e0:04:
b3:c8:6a:12:00:fa:c9:3b:8b:a1:ef:d2:94:22:14:2a:56:02:
ef:7f:f8:b3:3b:f3:35:59:c8:d8:c9:9e:5f:fd:4f:c7:8f:c8:
40:dd:05:19:92:21:ab:f1:cc:0d:d7:91:a0:49:bd:84:d4:14:
93:cb:8f:a9:e0:f5:ee:23:11:44:97:cb:97:8e:a7:ca:55:0d:
b0:a8:94:b6:97:dd:29:f6:15:b0:73:26:d1:67:f1:14:0c:3d:
5b:d5:10:fd:e0:a8:58:6c:07:ab:4b:7e:fc:86:12:aa:47:79:
c9:e0:50:20:af:c5:1a:38:dc:31:e6:92:0e:78:9e:5a:5d:99:
a3:f3:7d:58:b8:1f:8b:dd:f9:0f:59:2a:ab:04:30:7d:b8:5c:
b1:96:9e:66:1d:4a:0f:2a:2d:c2:a0:9f:80:28:4c:a3:95:1e:
f1:e4:e5:93:dc:df:4a:d7:96:f8:1a:32:eb:b3:47:8f:e5:56:
83:4d:f7:e6:1a:4b:fe:c1:7e:fe:e3:00:44:ea:93:ca:4e:16:
e2:b0:8d:c9:e7:c1:88:9c:0c:1e:18:9d:0f:41:f3:4f:a7:6a:
dd:f2:54:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:48:38 2026 by rpki-client