Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/fZpQl45w9GjR9pVR-kLHchQSDIo.roa
File: fZpQl45w9GjR9pVR-kLHchQSDIo.roa (raw, json)
Hash identifier: gfyDH0Fzj1B5boTTLb1KPwIcbe7Qi24lYKb5DEr4Gmc=
Subject key identifier: 7D:9A:50:97:8E:70:F4:68:D1:F6:95:51:FA:42:C7:72:14:12:0C:8A
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A141699136652BE9062C295B485BE6C31E
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/fZpQl45w9GjR9pVR-kLHchQSDIo.roa
Signing time: Thu 15 Oct 2026 21:13:19 +0000
ROA not before: Thu 15 Oct 2026 21:13:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213294
IP address blocks: 2a11:77c7::/32 maxlen: 32
2a11:7d03::/32 maxlen: 32
2a11:7d05::/32 maxlen: 32
2a11:9645::/32 maxlen: 32
2a11:ab81::/32 maxlen: 32
2a12:e80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:69:91:36:65:2b:e9:06:2c:29:5b:48:5b:e6:c3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Oct 15 21:13:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d9a50978e70f468d1f69551fa42c77214120c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:68:af:d9:81:e9:d8:6e:3b:90:87:32:4b:
01:76:4f:b4:29:53:73:a2:18:de:cd:1d:9e:f2:6f:
50:9f:3a:8d:0f:93:65:cc:3f:f3:66:48:56:6b:0e:
34:c5:9c:93:f8:06:4a:06:8b:a1:e4:4c:e2:a0:b0:
6a:ad:50:81:95:cf:fa:59:0c:da:99:53:03:67:1d:
1f:a3:b4:7c:2c:a2:e6:a7:a5:71:81:41:cd:f3:50:
ae:1b:19:d8:06:50:25:af:c6:79:d5:ea:16:51:92:
c6:99:e9:35:be:80:81:86:ca:01:5c:fa:ea:a0:4d:
e2:68:a1:b3:f9:f5:2e:fe:dc:ac:64:2d:db:90:55:
3f:32:c9:68:39:a2:1d:11:f0:17:30:22:4c:cf:bc:
91:e1:39:38:1d:c1:d9:2b:9d:23:ee:78:04:bf:27:
94:44:19:ae:8e:13:ed:da:db:8a:ae:4b:61:7a:87:
88:9f:8d:ad:b5:a7:ea:4a:b9:83:cd:5c:58:04:19:
44:35:89:bf:88:9b:ae:07:b1:44:bc:9b:3a:8a:09:
e8:d4:ab:b9:f7:a5:25:b0:2e:14:5e:ea:51:44:f8:
4e:59:45:73:fa:a5:e7:81:c7:ca:b7:2f:03:ce:c8:
30:c0:e6:a3:de:a8:67:57:db:d0:a6:9f:ad:b1:28:
b3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9A:50:97:8E:70:F4:68:D1:F6:95:51:FA:42:C7:72:14:12:0C:8A
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/fZpQl45w9GjR9pVR-kLHchQSDIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:77c7::/32
2a11:7d03::/32
2a11:7d05::/32
2a11:9645::/32
2a11:ab81::/32
2a12:e80::/32
Signature Algorithm: sha256WithRSAEncryption
77:f6:d4:a6:43:90:32:be:38:26:be:a3:20:3f:13:0b:be:0a:
fc:86:1f:a6:a4:50:93:bd:1a:95:6a:2c:5a:17:b7:ae:23:a2:
94:47:d3:3a:e0:ca:4d:1f:e3:c1:c8:12:bf:17:5e:a2:be:c4:
93:26:d2:61:7a:d1:d5:29:0e:7f:b2:c5:a5:e8:16:53:80:8d:
c0:0f:59:94:c2:94:73:7c:f7:4e:7a:fd:23:e3:b0:d8:04:b5:
90:c0:01:2a:bb:25:ef:54:cb:69:c9:7b:45:f8:63:8c:52:bb:
f6:55:d8:e1:5f:e5:3c:45:10:a5:d0:ce:80:26:5c:70:4a:97:
eb:99:40:e1:fe:fc:2f:12:ba:81:61:d8:34:89:8f:28:1d:b2:
55:f0:b9:18:25:c2:63:96:86:e3:56:89:3c:59:d0:0a:c0:6d:
6c:ff:88:df:15:10:91:8f:2f:d7:b4:10:0b:66:a0:4f:b3:73:
58:1b:d1:a8:ac:ed:7f:5c:28:2b:df:c7:05:7b:e8:2d:b3:ac:
1f:f4:d8:31:be:c0:26:f4:8b:a1:39:41:78:83:88:c0:1e:62:
e7:3a:9e:80:93:66:ae:46:33:2b:be:67:57:ca:39:08:3a:de:
6e:fb:3f:c7:97:d8:b7:bd:4b:18:08:cb:19:78:bd:65:5c:db:
8b:26:06:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:54 2026 by rpki-client