Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/_tmyqbXH-C2B87agCl7Yb1Djegg.roa
File: _tmyqbXH-C2B87agCl7Yb1Djegg.roa (raw, json)
Hash identifier: dpT1sJ8f6nGq8JAUaVAjKTINm9oHKZLSFZwtejcElOs=
Subject key identifier: FE:D9:B2:A9:B5:C7:F8:2D:81:F3:B6:A0:0A:5E:D8:6F:50:E3:7A:08
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019FD8ECF1DF7A81832753A9F004B2100DA2
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/_tmyqbXH-C2B87agCl7Yb1Djegg.roa
Signing time: Thu 06 Aug 2026 21:13:54 +0000
ROA not before: Thu 06 Aug 2026 21:13:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204909
IP address blocks: 2a11:77c1::/32 maxlen: 32
2a11:7d00::/32 maxlen: 32
2a11:7d01::/32 maxlen: 32
2a11:ab83::/32 maxlen: 32
2a11:e2c5::/32 maxlen: 32
2a12:8785::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d8:ec:f1:df:7a:81:83:27:53:a9:f0:04:b2:10:0d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 6 21:13:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fed9b2a9b5c7f82d81f3b6a00a5ed86f50e37a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1c:f9:05:7a:fe:7d:47:97:06:85:12:0e:22:
b1:64:60:d6:df:f8:9b:28:25:76:63:05:5a:94:97:
2d:db:e7:ed:aa:89:66:c1:aa:68:59:0b:c8:bb:d5:
70:a7:7e:e7:d7:9f:7d:8f:2b:fc:a9:6d:b1:a6:1b:
df:0b:ab:99:35:b4:f9:66:37:db:cb:37:81:0d:8e:
11:26:90:86:42:4b:5e:cd:df:32:7d:5c:5b:33:20:
61:29:01:35:b7:7b:7a:80:89:b3:af:d7:bc:35:2d:
31:ee:bf:15:91:e1:06:84:9d:41:ff:ac:6d:80:b0:
c1:89:66:2a:5a:96:dc:1b:39:dd:71:47:8e:c5:a4:
7d:7f:84:0a:a7:76:88:3e:98:79:2d:03:8d:13:32:
d4:a3:ff:b5:30:27:f7:01:f3:38:eb:6b:0f:79:7f:
84:81:40:87:a8:5d:8d:d1:74:90:51:89:db:b1:c6:
8f:1c:bd:27:26:3e:f5:92:f4:57:4e:95:ff:9a:ba:
bf:90:73:85:22:47:58:9e:eb:bf:de:f0:4f:aa:09:
b2:2d:78:9c:10:e5:cd:f8:00:40:8c:f0:ce:b8:eb:
1d:31:62:af:77:73:8c:f5:bf:b8:13:d5:43:dd:fb:
54:f6:a1:73:a9:e4:49:87:81:95:7f:43:05:88:8c:
05:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D9:B2:A9:B5:C7:F8:2D:81:F3:B6:A0:0A:5E:D8:6F:50:E3:7A:08
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/_tmyqbXH-C2B87agCl7Yb1Djegg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:77c1::/32
2a11:7d00::/31
2a11:ab83::/32
2a11:e2c5::/32
2a12:8785::/32
Signature Algorithm: sha256WithRSAEncryption
39:fe:c4:0c:7c:46:9a:87:cc:98:32:9f:5d:9d:49:25:be:8d:
37:82:33:e6:9c:0a:71:ac:71:8d:be:59:73:74:16:b1:4d:a8:
11:30:b0:3a:5c:ff:c8:bc:5e:f1:f7:63:9a:10:e5:2b:23:3b:
a5:17:96:8a:a1:ae:f6:cc:a9:09:27:ce:72:d6:79:a3:38:6a:
b6:aa:e2:d1:34:17:c3:4c:d7:67:e4:9f:25:4c:8f:7e:3f:f5:
0f:d3:37:aa:69:5f:82:d8:6d:31:e3:16:b1:e3:e3:b1:0d:5d:
e2:be:4f:7f:47:45:9a:f9:18:9c:35:a1:d8:a7:bb:0b:ef:78:
97:56:ae:52:34:f5:dd:15:91:f0:d6:a8:9a:42:91:90:c0:fb:
21:10:3c:b3:65:17:47:8a:15:55:7e:88:97:cf:72:56:87:50:
89:72:1b:d4:1a:48:92:d4:34:5d:9a:01:eb:d7:6c:b3:05:90:
96:36:40:51:1a:63:f0:94:aa:d9:a6:69:01:29:cd:0f:e6:00:
2f:29:48:38:27:57:8a:05:73:72:f7:59:81:62:16:ea:9e:83:
25:df:c9:79:9d:b2:ee:ec:83:a7:58:a9:68:07:4c:98:a1:45:
3e:e6:1a:66:ad:41:11:21:63:8e:b2:04:73:5c:43:ae:86:11:
75:7b:3b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:17:04 2026 by rpki-client