Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ucYMXzD3vMFsgmHtXsfLM2eUok.roa
File: 9ucYMXzD3vMFsgmHtXsfLM2eUok.roa (raw, json)
Hash identifier: 2Afj0FJ5MpmIC7C8wUu5YNyOvGucTv6qksj+PJFjUto=
Subject key identifier: F6:E7:18:31:7C:C3:DE:F3:05:B2:09:87:B5:7B:1F:2C:CD:9E:52:89
Certificate issuer: /CN=f4e36bd4bf3825740c905a67cdc16b301872aa71
Certificate serial: 019E27B46F2B91F09D530DD9F764638B8D57
Authority key identifier: F4:E3:6B:D4:BF:38:25:74:0C:90:5A:67:CD:C1:6B:30:18:72:AA:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ucYMXzD3vMFsgmHtXsfLM2eUok.roa
Signing time: Thu 14 May 2026 18:16:36 +0000
ROA not before: Thu 14 May 2026 18:16:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51839
IP address blocks: 2a0b:2a07::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:27:b4:6f:2b:91:f0:9d:53:0d:d9:f7:64:63:8b:8d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e36bd4bf3825740c905a67cdc16b301872aa71
Validity
Not Before: May 14 18:16:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6e718317cc3def305b20987b57b1f2ccd9e5289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4b:34:a5:05:fa:2f:70:58:01:da:b5:cb:a5:
4f:fc:f4:d3:71:f0:e9:35:11:7f:a3:2b:e7:30:c7:
20:96:ee:02:cd:fd:1b:82:50:d3:76:04:4e:90:b6:
bb:32:d2:d2:cd:25:a7:ba:27:e1:06:82:7d:6e:c6:
23:85:a7:4b:c4:42:7b:87:ce:2e:d2:ce:74:78:07:
1d:fb:c1:cb:83:cd:9e:b8:41:f1:a7:d6:39:84:14:
e4:24:1f:1c:f7:f9:ba:a7:a9:17:01:de:63:a7:6f:
63:45:20:40:41:93:06:24:7c:61:26:49:b7:2d:1d:
3d:60:4a:50:8c:8a:ae:57:68:38:9c:6f:89:00:27:
fa:75:b0:10:02:f6:4f:1b:89:f9:0f:43:56:88:cc:
8a:54:c4:b6:23:16:60:5c:8c:84:43:d2:5b:eb:39:
d9:32:ba:c0:cf:a3:70:69:cd:b2:d0:e4:d9:b5:1f:
bf:c0:83:6f:a2:c0:97:e8:9c:f2:38:9b:e0:d9:1c:
c9:19:b6:65:7d:00:64:3b:fa:c0:a4:58:8f:d8:bc:
7c:e3:c4:84:cb:45:a5:ca:f5:99:77:f7:c4:03:af:
74:3e:90:a5:97:97:55:6d:f7:0d:2d:d8:8d:15:ef:
b2:92:c0:71:1f:8a:cf:78:9e:ad:e9:c3:8b:39:62:
cb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E7:18:31:7C:C3:DE:F3:05:B2:09:87:B5:7B:1F:2C:CD:9E:52:89
X509v3 Authority Key Identifier:
keyid:F4:E3:6B:D4:BF:38:25:74:0C:90:5A:67:CD:C1:6B:30:18:72:AA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ucYMXzD3vMFsgmHtXsfLM2eUok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2a07::/40
Signature Algorithm: sha256WithRSAEncryption
91:79:b7:cb:09:28:fd:e0:b1:64:21:36:cc:19:33:de:fe:df:
67:53:e2:1c:05:14:8a:f7:72:4e:39:0a:ea:1d:84:b9:65:d9:
ae:22:bd:f2:c5:12:1f:f5:e8:0e:e7:4c:a2:ec:64:73:dc:8d:
bf:a2:50:af:59:ff:f7:31:7d:d7:fd:c5:ab:3d:d3:69:de:ec:
65:6c:d6:e9:1b:e5:81:02:08:4b:87:ec:45:91:cb:46:7d:42:
e6:2a:70:2a:ae:3d:49:03:73:db:db:11:ba:8c:05:0e:3a:84:
b4:65:24:22:0f:bd:d1:b4:29:9d:fc:fc:bf:7b:06:09:34:d1:
65:9e:a5:b1:4b:9e:62:c4:a9:e2:98:1e:69:a1:83:9e:12:67:
57:61:d0:90:62:f5:e0:e1:2b:f5:27:32:6e:2b:1e:d2:16:27:
9a:ea:72:72:8b:31:9c:2d:ce:cd:6a:01:69:65:15:b4:ae:38:
60:79:58:cb:05:b3:e0:9f:ed:2e:af:d0:a4:cc:62:86:29:17:
40:35:e7:fc:2d:4f:86:2f:bf:c4:fe:73:48:ec:ed:a1:96:85:
14:96:f5:fc:7c:ad:58:2a:74:3b:cc:51:0d:ad:0e:31:16:d1:
7b:6f:cc:e8:1d:b2:5d:b3:89:63:e5:a1:30:67:34:a0:8b:aa:
67:53:52:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:52:59 2026 by rpki-client