Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/H9NXiDhT4Jp9NDOtNkUROPAoUQI.roa
File: H9NXiDhT4Jp9NDOtNkUROPAoUQI.roa (raw, json)
Hash identifier: 3mamQE6dN6OmIxXMfmcW49wP1rG1Aovbn8KHPUX4PAI=
Subject key identifier: 1F:D3:57:88:38:53:E0:9A:7D:34:33:AD:36:45:11:38:F0:28:51:02
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A08C20B0887F495C1B1EA27DF283F950CB
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/H9NXiDhT4Jp9NDOtNkUROPAoUQI.roa
Signing time: Thu 10 Sep 2026 16:22:27 +0000
ROA not before: Thu 10 Sep 2026 16:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48347
IP address blocks: 170.168.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:20:b0:88:7f:49:5c:1b:1e:a2:7d:f2:83:f9:50:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Sep 10 16:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fd357883853e09a7d3433ad36451138f0285102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8e:2c:74:e2:34:a9:bf:42:de:8b:fa:60:07:
03:41:ec:98:6f:41:56:18:56:f2:f5:82:10:4e:10:
28:d3:3e:ae:9a:5e:ff:86:99:37:ae:95:ab:7a:10:
62:83:1d:6a:fd:81:be:8b:99:d9:ec:a6:fb:31:82:
f2:85:c2:ed:80:ad:44:4a:27:66:b7:ab:9e:e7:34:
ef:3d:e9:a4:10:2f:79:62:af:8f:0b:3c:b4:3a:0f:
a8:d3:19:08:7e:5e:da:bb:7f:38:77:49:fb:aa:39:
2b:84:53:7b:61:fe:95:4f:46:bb:1e:7f:c9:f1:49:
e0:e5:22:e5:3e:54:95:85:f3:c3:ab:15:b7:69:f8:
a1:4d:28:b3:2d:41:38:8b:44:68:42:4b:7e:f5:ca:
85:be:7c:8d:91:bc:0e:bd:e4:7f:02:6f:12:ff:02:
7e:d6:f0:d6:95:63:29:28:e7:6f:26:11:e4:b9:48:
1a:e1:87:08:d0:c9:79:f9:bb:ba:aa:d8:aa:01:75:
44:8d:19:ee:78:cd:c5:fc:59:ff:19:02:bd:5b:88:
ea:90:80:18:2d:4c:aa:90:99:e9:08:54:2d:a2:c4:
88:37:48:32:d9:9c:7d:c8:a5:25:c4:20:32:2a:bb:
c6:c9:80:08:03:9a:22:78:40:0f:5d:fb:c7:12:d8:
04:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D3:57:88:38:53:E0:9A:7D:34:33:AD:36:45:11:38:F0:28:51:02
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/H9NXiDhT4Jp9NDOtNkUROPAoUQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.112.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5b:53:cc:65:f2:98:1a:74:69:db:6b:3d:a1:26:60:3c:57:
8c:e6:89:1c:e5:5f:0a:fd:f2:e4:65:31:fa:89:45:f1:70:22:
ab:5f:c6:b9:78:be:1c:3d:60:c8:65:81:d5:26:72:f2:e9:0f:
50:4e:cb:cc:1e:79:db:d3:fa:74:96:75:4c:16:58:1f:df:f8:
58:0c:91:ca:9a:3d:69:15:13:40:27:e1:ff:e5:dc:62:ed:71:
45:fc:4b:9b:2e:02:da:e3:6d:47:9e:2b:67:c1:9e:4b:74:5e:
27:f1:59:6b:86:e4:b3:55:01:78:33:ec:01:fd:6c:51:fe:96:
e0:1d:6c:86:70:47:ea:ce:ce:de:0c:9e:b0:ee:b1:a4:ff:13:
63:d3:f3:6a:4d:81:d4:ea:39:02:00:f4:eb:cd:30:17:11:d5:
64:b5:f5:63:fb:f7:a1:8f:8e:16:6f:e1:24:2f:2d:53:44:83:
96:0a:11:af:0a:ec:36:19:79:7c:77:6d:43:c2:a5:a2:a8:6a:
69:e1:ac:2a:48:16:8f:38:52:47:02:d5:01:47:f1:7c:1a:76:
4a:54:b6:81:0b:2a:ba:4c:cf:05:28:d9:2b:34:f2:5b:52:2c:
f8:96:df:51:5a:a5:cf:ee:75:00:24:7c:7f:ed:d7:ff:21:cf:
42:9c:c1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:10:50 2026 by rpki-client