Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Pg6bY7Ezja3jQ1ndvgA2onb0vVg.roa
File: Pg6bY7Ezja3jQ1ndvgA2onb0vVg.roa (raw, json)
Hash identifier: 3VV3aITNzkKdtWuoUCzCT98I9SaawzcvyUdpvHLmgko=
Subject key identifier: 3E:0E:9B:63:B1:33:8D:AD:E3:43:59:DD:BE:00:36:A2:76:F4:BD:58
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A10C5717224AEBE136F2FB152010505A5B
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Pg6bY7Ezja3jQ1ndvgA2onb0vVg.roa
Signing time: Mon 05 Oct 2026 13:53:16 +0000
ROA not before: Mon 05 Oct 2026 13:53:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48108
IP address blocks: 2a11:9647::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:57:17:22:4a:eb:e1:36:f2:fb:15:20:10:50:5a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Oct 5 13:53:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e0e9b63b1338dade34359ddbe0036a276f4bd58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:08:d1:ea:fc:e9:c3:dc:78:1d:aa:be:96:
1c:1c:cb:cd:ef:24:6f:53:33:76:97:b5:d5:4e:5f:
24:e7:3c:50:97:a4:02:72:f2:a3:3a:54:a6:5f:bb:
fc:1d:51:ec:35:c6:c4:6b:de:9d:82:89:14:1b:34:
a1:2e:df:cc:84:2e:35:b7:2a:b9:83:bb:8b:96:68:
99:64:02:fb:00:34:d3:12:29:0f:13:f4:90:ee:4d:
10:b8:f4:f7:94:29:61:52:70:3c:15:d7:95:1b:b5:
e1:67:17:3f:41:29:bd:e8:ea:5e:d1:e7:88:ea:48:
79:6a:be:33:68:1b:af:83:c2:54:12:3b:c6:3c:7f:
86:d7:a3:f6:33:ef:51:ca:ec:1a:89:e8:f7:48:f0:
06:92:42:27:f4:58:ad:14:23:a0:f5:e9:6e:b4:04:
a3:fb:bf:50:10:24:a0:7e:a3:7c:0e:06:6f:8e:d3:
8b:d3:3b:61:8b:94:75:62:55:6a:19:32:81:a2:dd:
9a:ea:35:3a:f7:a1:7a:07:b9:59:ea:f8:f4:68:78:
30:2f:2c:a5:1c:2e:14:b0:a1:00:2e:ff:5d:0c:89:
f8:75:f9:f5:23:67:bf:4d:3f:48:9c:b3:ba:6d:2d:
3a:f7:b5:5a:dd:cc:10:6e:ba:f0:85:84:5a:dc:92:
73:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0E:9B:63:B1:33:8D:AD:E3:43:59:DD:BE:00:36:A2:76:F4:BD:58
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Pg6bY7Ezja3jQ1ndvgA2onb0vVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:9647::/32
Signature Algorithm: sha256WithRSAEncryption
63:e0:21:97:c0:4b:4c:14:01:8a:50:57:3b:1d:af:e9:7e:9e:
a3:6a:42:8e:c1:25:de:9d:4b:0a:83:44:db:9b:52:44:ee:c5:
e8:53:8c:76:8d:d8:64:71:86:97:97:b2:57:d9:c1:bb:69:15:
94:83:48:81:2a:06:e4:a9:8e:96:b3:96:20:ca:4d:49:5c:75:
6e:5a:02:a2:ba:a2:f6:d0:1a:f4:79:06:a3:d2:ae:39:d2:f0:
e4:fb:61:26:ce:ea:7e:bc:1e:04:e4:ee:63:39:09:ef:dc:1d:
cd:f3:54:18:6a:28:d7:e3:f5:f9:17:e0:ca:fb:fe:17:34:ec:
54:fc:5b:a7:f9:25:dc:df:4e:4a:50:27:2a:ab:7b:46:d8:43:
7b:bd:e2:d8:2e:da:b5:60:e7:26:e1:0b:5b:70:0d:41:94:92:
90:fb:ad:45:ac:14:54:d5:31:b3:8a:35:d0:bc:28:d1:1a:30:
fb:5e:0b:2b:ca:44:b3:22:21:fc:a5:27:a4:b0:c5:54:e5:47:
64:28:c1:3a:57:81:80:6a:b4:98:70:3a:bc:ee:08:1c:1e:72:
9f:4f:12:f2:8f:c2:df:87:36:1e:a6:5d:f5:31:71:ff:bf:44:
52:a6:2b:30:8f:bf:14:e7:14:8a:67:d9:ed:28:e8:c5:f2:62:
07:db:61:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:49 2026 by rpki-client