Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/ArTpuFzvKLI7I--j08hfjwlXpw8.roa
File: ArTpuFzvKLI7I--j08hfjwlXpw8.roa (raw, json)
Hash identifier: 6NjyUjfxKqGpXgjllZg8VTTWwj0Jd1iyr2UaIvsxAWE=
Subject key identifier: 02:B4:E9:B8:5C:EF:28:B2:3B:23:EF:A3:D3:C8:5F:8F:09:57:A7:0F
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 01A063181F52BDB4E4006870442E72A60EC1
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/ArTpuFzvKLI7I--j08hfjwlXpw8.roa
Signing time: Wed 02 Sep 2026 17:08:40 +0000
ROA not before: Wed 02 Sep 2026 17:08:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402604
IP address blocks: 2a11:69c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:18:1f:52:bd:b4:e4:00:68:70:44:2e:72:a6:0e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Sep 2 17:08:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02b4e9b85cef28b23b23efa3d3c85f8f0957a70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8b:2e:c4:f8:ca:de:dd:e5:be:67:f2:11:f2:
2c:8c:13:15:d3:87:ca:78:eb:c1:c4:70:63:5b:96:
0c:6a:9a:44:f3:e4:bb:be:39:b2:f7:24:d1:49:b8:
3f:d8:9e:f3:3f:72:5a:a4:1f:35:50:f9:3d:98:10:
44:e6:b8:83:67:72:c9:7b:59:2b:00:9b:46:b3:75:
3d:fc:f8:1f:c6:41:ea:33:61:b2:a2:aa:68:a2:3b:
6d:bb:fe:e8:d9:e0:ae:74:40:83:77:1d:1b:0b:53:
fb:f8:c3:dd:64:de:79:e3:32:f5:75:e6:1c:71:93:
6d:4d:73:d7:0c:66:4e:1c:de:e2:ce:cd:97:be:fd:
8e:0b:5b:34:9d:01:74:df:ed:a1:14:d5:4f:af:e6:
35:a5:d1:2d:9b:a6:41:ba:1f:23:16:86:ab:bd:c2:
1b:9f:ee:20:b9:79:21:d5:9c:c8:ca:56:f1:a5:b2:
f2:c2:8c:fa:02:3a:95:63:58:2c:94:9c:9a:ad:af:
e2:20:10:2a:6d:f7:c4:c5:d7:e3:49:4f:02:cb:28:
13:1f:1a:69:e1:1c:0a:a8:9c:8f:31:85:d4:65:20:
1a:a5:40:e4:4d:64:9e:f0:b1:0f:c6:57:1c:7d:c6:
51:c9:71:db:35:8f:1f:dd:1d:1d:fd:86:ac:69:23:
92:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B4:E9:B8:5C:EF:28:B2:3B:23:EF:A3:D3:C8:5F:8F:09:57:A7:0F
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/ArTpuFzvKLI7I--j08hfjwlXpw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:69c0::/29
Signature Algorithm: sha256WithRSAEncryption
cf:5d:dd:b2:be:4c:0f:39:9f:7f:04:07:21:2d:24:9b:3e:c5:
ae:37:6d:87:a9:14:4b:b3:b3:6e:3a:3f:47:18:b5:1b:be:fc:
77:14:d0:88:a9:81:37:21:1f:22:76:b9:ff:13:8a:4e:13:ef:
94:8e:ad:c6:9d:0e:79:7c:2e:71:ff:e7:83:4b:8b:5f:66:44:
49:73:c7:fa:bb:fb:3c:ae:10:cb:a2:9b:07:25:99:11:db:34:
ce:90:8e:be:ce:f0:f1:a6:62:b9:61:55:75:f2:30:f7:9a:2f:
15:13:d6:8e:84:37:48:e1:fe:a1:44:ab:f5:e2:c6:d0:cb:29:
e1:74:87:e8:84:ea:7f:29:fd:58:4f:78:f5:f2:52:b5:68:e6:
36:8c:f3:46:eb:b2:77:c5:c6:1d:1e:3c:96:02:54:4f:4c:b1:
b1:2d:fe:03:fe:10:34:5e:17:ad:44:b4:97:3c:8e:d9:9c:a3:
c3:ee:10:77:f4:45:ed:6d:c4:d8:da:a7:4c:dd:1f:b9:eb:3f:
4d:8f:85:e7:a3:5a:01:7d:64:9e:d9:c5:f9:99:83:70:38:18:
84:e3:6e:3a:a7:1e:8c:73:21:c7:f0:43:60:81:b7:51:dd:7a:
12:3f:3b:b8:5e:ed:de:90:76:cd:01:29:21:ef:e4:c8:9b:81:
f5:c4:b0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:02:53 2026 by rpki-client