Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/bc8558-5a19-4996-8fe8-182e7c024bce/1/9V2-m0NGxI72O3R3bUbU2flL2Rs.roa
File: 9V2-m0NGxI72O3R3bUbU2flL2Rs.roa (raw, json)
Hash identifier: cpSR+cuIXdghpZLaW7FnpDsg9IFTD0DTDzECS1Zeuqg=
Subject key identifier: F5:5D:BE:9B:43:46:C4:8E:F6:3B:74:77:6D:46:D4:D9:F9:4B:D9:1B
Certificate issuer: /CN=f1e7ac96796cf35c0b4024b446b984c0f7c2e9d5
Certificate serial: 01A0DF4AC54FDCD80F5983047EFFF74C73A3
Authority key identifier: F1:E7:AC:96:79:6C:F3:5C:0B:40:24:B4:46:B9:84:C0:F7:C2:E9:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8eeslnls81wLQCS0RrmEwPfC6dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bc8558-5a19-4996-8fe8-182e7c024bce/1/9V2-m0NGxI72O3R3bUbU2flL2Rs.roa
Signing time: Sat 26 Sep 2026 19:56:54 +0000
ROA not before: Sat 26 Sep 2026 19:56:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218617
IP address blocks: 2001:678:1338::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bc8558-5a19-4996-8fe8-182e7c024bce/1/8eeslnls81wLQCS0RrmEwPfC6dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bc8558-5a19-4996-8fe8-182e7c024bce/1/8eeslnls81wLQCS0RrmEwPfC6dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8eeslnls81wLQCS0RrmEwPfC6dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:4a:c5:4f:dc:d8:0f:59:83:04:7e:ff:f7:4c:73:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1e7ac96796cf35c0b4024b446b984c0f7c2e9d5
Validity
Not Before: Sep 26 19:56:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f55dbe9b4346c48ef63b74776d46d4d9f94bd91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:b2:71:2f:1c:67:33:88:b9:ec:ee:50:2e:
2d:c9:db:e9:74:b6:f3:e5:49:4b:20:db:c5:cd:08:
fe:39:00:32:0a:9a:e1:d2:ed:eb:7e:95:45:47:e2:
e8:62:c5:39:8b:9c:ab:eb:32:72:50:20:2c:3a:59:
17:9b:61:ef:0f:30:5b:aa:ad:77:30:c2:ff:96:c3:
b6:ea:eb:bc:e5:b2:8d:0f:d3:4b:65:4c:81:ec:df:
08:a3:2f:19:3d:96:28:ab:78:2b:81:18:50:dc:1e:
47:69:3b:0b:e5:d2:fb:49:3c:ef:72:0a:9d:38:3d:
7f:59:61:32:69:41:7b:d7:5f:83:83:09:75:f2:c4:
c8:27:2b:c1:8c:39:84:af:a9:13:5f:58:42:b5:6f:
28:32:59:c8:53:86:12:82:b9:b5:88:83:e2:73:19:
0e:1d:e3:78:31:9b:38:9b:47:45:0c:7e:b4:de:81:
19:5e:9f:76:4d:d2:bc:08:ae:4b:b9:eb:18:22:a7:
dc:a3:5b:f7:22:88:91:13:e9:93:90:7e:bb:22:36:
a5:6d:c7:bb:39:05:be:cd:dc:04:7d:26:06:b6:21:
c2:d5:38:b7:d8:2c:27:00:2a:2a:b5:ec:fe:7c:fe:
5d:38:ef:24:db:55:66:75:63:f9:be:d7:4e:3b:df:
59:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5D:BE:9B:43:46:C4:8E:F6:3B:74:77:6D:46:D4:D9:F9:4B:D9:1B
X509v3 Authority Key Identifier:
keyid:F1:E7:AC:96:79:6C:F3:5C:0B:40:24:B4:46:B9:84:C0:F7:C2:E9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8eeslnls81wLQCS0RrmEwPfC6dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bc8558-5a19-4996-8fe8-182e7c024bce/1/9V2-m0NGxI72O3R3bUbU2flL2Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bc8558-5a19-4996-8fe8-182e7c024bce/1/8eeslnls81wLQCS0RrmEwPfC6dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1338::/48
Signature Algorithm: sha256WithRSAEncryption
5c:b9:84:fa:a7:d1:e2:b0:aa:7c:93:e9:62:84:0d:b8:2c:f8:
c0:b1:19:b2:31:b4:a0:05:49:98:ad:60:22:fb:a9:f9:bb:80:
a5:56:65:19:fd:ca:3c:19:23:57:18:fd:1f:fc:43:e8:d2:0f:
cd:0b:d7:16:b3:39:8b:ef:fe:8e:f1:67:55:98:42:f8:c7:e9:
9b:d0:50:b1:72:f9:0c:3e:32:c5:70:12:d3:4b:9c:b3:ab:a6:
8d:3d:50:f2:3b:6b:61:26:22:bc:ca:aa:cc:a6:ac:68:da:40:
58:d7:ee:49:00:53:c1:8a:f7:37:23:72:1a:ce:3a:b9:a7:5e:
07:e3:44:f1:1c:23:3b:aa:23:59:d6:1f:d9:66:8a:e3:4e:b3:
95:17:3f:a7:39:04:6f:1a:a6:1f:1d:ca:6f:79:46:8c:60:71:
44:3f:3b:53:fe:40:17:40:de:ad:4f:fd:03:f5:a3:e2:f6:6b:
ab:63:f1:80:24:7a:5d:43:30:60:c5:79:0f:77:5b:c6:a7:07:
10:00:08:ce:79:0d:6c:78:f1:78:21:ff:06:f8:34:c6:fa:5a:
80:9b:9b:32:6e:14:3f:c5:ef:42:b6:6c:be:e7:87:ad:5b:46:
d7:1f:71:d3:8c:da:b5:93:4c:85:48:eb:3f:33:59:79:52:31:
a7:a4:ab:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 02:56:55 2026 by rpki-client