Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/9NpMCQPTdYLM6RigPHbxPRz98fA.roa
File: 9NpMCQPTdYLM6RigPHbxPRz98fA.roa (raw, json)
Hash identifier: ioCoSDv35er7fovn3uLODbMUmoh4IJiyFfj+GFkzs9c=
Subject key identifier: F4:DA:4C:09:03:D3:75:82:CC:E9:18:A0:3C:76:F1:3D:1C:FD:F1:F0
Certificate issuer: /CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
Certificate serial: 019E34C3EFE659D96BB52429C8423B64C9DF
Authority key identifier: C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/9NpMCQPTdYLM6RigPHbxPRz98fA.roa
Signing time: Sun 17 May 2026 07:08:36 +0000
ROA not before: Sun 17 May 2026 07:08:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202190
IP address blocks: 2a04:f781:400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 14:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:34:c3:ef:e6:59:d9:6b:b5:24:29:c8:42:3b:64:c9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
Validity
Not Before: May 17 07:08:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4da4c0903d37582cce918a03c76f13d1cfdf1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:7f:3a:a7:5b:19:e3:56:3d:cb:14:88:25:
21:31:19:ea:f1:52:f2:06:ca:81:4d:9d:0d:b1:71:
59:3d:bb:fb:70:d3:8f:7b:56:b4:ae:3c:84:c6:9b:
06:f8:6e:53:4f:ff:93:34:1d:1c:13:ca:b4:d1:83:
fd:d4:2e:24:dd:20:57:d9:37:84:e1:09:05:c5:e8:
9b:6b:b1:a6:d7:1e:0b:80:9f:3b:81:7a:6b:db:81:
d4:ef:e7:a1:68:16:b2:12:54:d5:0f:dd:e0:44:48:
e6:64:66:fa:1e:38:84:f6:b4:a2:83:6b:8b:b0:9a:
4e:59:e4:ab:58:5d:8d:d3:fa:a3:51:9b:ea:48:c2:
7a:83:61:31:4e:44:3c:96:e2:14:8e:63:87:8e:73:
36:3c:d8:4c:41:e9:ac:70:a8:09:db:32:fd:6d:b7:
83:90:c1:e1:f1:e1:96:54:3a:b5:6f:f1:6f:8e:46:
0b:8e:6c:6e:0a:7e:f2:62:a3:53:1e:35:8c:24:01:
77:08:36:c4:a7:b6:0c:e9:fa:c8:6c:5d:05:1b:fd:
88:4f:74:8b:66:34:dc:3c:ac:a0:4d:9e:6e:21:e2:
a5:9b:ad:6b:05:25:61:fc:10:4f:77:da:02:ff:f9:
8b:a2:e8:10:cf:91:05:b3:7f:b7:ee:9f:35:a2:75:
32:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DA:4C:09:03:D3:75:82:CC:E9:18:A0:3C:76:F1:3D:1C:FD:F1:F0
X509v3 Authority Key Identifier:
keyid:C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/9NpMCQPTdYLM6RigPHbxPRz98fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:f781:400::/48
Signature Algorithm: sha256WithRSAEncryption
47:02:03:da:3a:bc:6a:02:33:46:e1:36:34:5c:92:5c:2a:3c:
b2:84:da:b3:ab:cd:6d:cd:d8:8a:32:43:6e:1b:69:dc:5c:09:
e0:b2:20:0b:1c:a8:61:dc:e5:21:0a:aa:92:06:03:be:02:9e:
d5:e5:d3:8a:e0:50:e1:94:d3:0c:90:2d:43:c9:e6:f4:70:6c:
96:68:0f:6d:21:87:85:2b:c4:70:14:38:ea:b8:81:a1:5f:f6:
27:76:68:fd:c0:19:e1:03:87:67:97:28:b9:1c:5a:ce:9d:1d:
2b:63:62:25:af:ab:b7:db:d5:f2:41:74:e5:fe:88:4b:db:84:
d4:5f:14:28:0d:85:4b:03:35:6f:03:fb:f5:ac:85:29:e2:2d:
e9:5b:83:2b:d0:f7:bf:b0:81:bf:3d:3a:ed:fa:c3:e0:50:b1:
79:90:d8:eb:cb:61:f7:ac:88:96:6b:8a:4b:46:f7:75:e5:ef:
3a:98:60:98:e2:52:a9:69:1b:79:1e:de:b2:a5:03:c5:da:0e:
26:a7:85:4e:31:b7:57:11:01:a5:85:0c:2e:b5:bf:4c:37:ef:
46:89:6c:da:80:29:0b:b6:9c:45:cc:92:b7:67:0a:d2:90:4b:
f2:bc:f6:b9:4b:5c:17:24:eb:f5:5f:8c:3f:41:8b:a8:95:ac:
5b:45:78:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 21:53:23 2026 by rpki-client