Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/X371OkXgW_F4VnMr0DQaJsdvNcE.roa
File: X371OkXgW_F4VnMr0DQaJsdvNcE.roa (raw, json)
Hash identifier: 9Szw2pDnOeVx+uuk0AW8GsZOqFr6aZVRpETEWUX2cAg=
Subject key identifier: 5F:7E:F5:3A:45:E0:5B:F1:78:56:73:2B:D0:34:1A:26:C7:6F:35:C1
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 01A0631909741FD28499586F65B2A90CF7AD
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/X371OkXgW_F4VnMr0DQaJsdvNcE.roa
Signing time: Wed 02 Sep 2026 17:09:40 +0000
ROA not before: Wed 02 Sep 2026 17:09:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402899
IP address blocks: 2a12:1300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:19:09:74:1f:d2:84:99:58:6f:65:b2:a9:0c:f7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Sep 2 17:09:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f7ef53a45e05bf17856732bd0341a26c76f35c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:20:93:99:c0:09:3e:10:d4:52:35:61:0c:
8b:30:14:5e:4a:e1:b2:13:1a:10:28:bc:cc:39:77:
42:16:43:a6:a7:79:6e:a4:c1:5c:71:15:c0:f7:57:
55:57:0d:91:46:7a:67:f0:c1:ac:e8:0f:6d:53:3a:
73:ca:54:29:fa:34:40:56:02:11:a2:fb:4a:05:f2:
b6:86:11:13:3a:ba:b8:7f:00:60:fe:e9:b7:0c:bc:
75:23:9c:a3:0e:5a:25:6a:8f:78:94:7a:30:dd:ae:
de:95:cc:3a:99:d0:e8:de:50:1a:fa:58:ca:7a:ff:
5d:89:16:4d:af:29:74:bb:60:47:51:34:6e:59:5f:
85:e8:80:23:1f:e6:c8:7e:ba:19:61:47:ce:03:c8:
27:d1:5e:fe:0f:16:0d:a8:b5:cf:3c:1e:f7:33:64:
00:31:d2:7c:91:84:79:a8:34:fd:27:14:db:62:bb:
e7:59:29:bd:d4:1a:02:16:38:65:8b:ca:7e:bb:04:
6e:c5:c0:56:e1:6e:82:bd:6d:ef:1a:5a:f9:3d:d4:
fb:cc:77:32:a2:99:78:ea:6e:4e:a7:be:4c:eb:99:
15:17:2c:4e:b1:f5:90:38:a4:0a:49:ba:3c:95:81:
92:f6:12:42:21:d3:99:d4:ce:81:a2:a3:ee:a6:75:
40:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7E:F5:3A:45:E0:5B:F1:78:56:73:2B:D0:34:1A:26:C7:6F:35:C1
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/X371OkXgW_F4VnMr0DQaJsdvNcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1300::/29
Signature Algorithm: sha256WithRSAEncryption
61:8f:a6:8c:f0:8b:3e:51:90:81:f5:d4:de:da:65:25:b6:c7:
72:89:50:6a:92:71:cd:40:5d:52:07:f0:0a:9c:55:2b:3b:8d:
0b:47:2b:11:3e:82:aa:2c:db:b9:0d:af:b2:b8:58:b6:a2:62:
29:8b:25:b1:99:02:e5:63:72:06:7e:63:d6:fa:c9:fc:82:b3:
a7:c2:3d:83:92:50:e8:e0:e0:72:1b:71:82:4d:b9:6d:c1:b1:
f0:f5:fc:97:4f:16:13:7a:aa:65:2f:2e:3c:fa:56:9c:99:e2:
88:ef:b9:b7:be:51:d3:9e:b6:31:14:6e:82:bd:86:91:bb:10:
13:21:0a:0a:5d:15:cc:bf:c1:77:ca:16:5b:0e:80:48:1e:54:
a6:4a:a3:43:bd:79:9e:bc:6c:49:26:de:e8:91:23:62:c7:53:
42:5e:43:c3:72:c9:e7:90:78:ff:c9:15:8a:bc:98:d8:86:31:
b2:7d:18:16:82:5c:66:c7:71:cd:76:d6:c3:ce:56:3f:55:6f:
aa:84:26:ed:c0:a7:bc:aa:5e:70:18:17:72:33:3b:d8:fd:9b:
69:90:61:7a:83:0c:d8:71:27:d0:b0:93:ea:da:75:8e:28:c8:
b3:2a:a2:97:0b:46:5d:f1:61:1c:7f:21:d5:ac:1e:fb:da:95:
f2:09:d7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:39 2026 by rpki-client