Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/07HgvTpzt_I3I4EOcFJZcLyN3gk.roa
File: 07HgvTpzt_I3I4EOcFJZcLyN3gk.roa (raw, json)
Hash identifier: 2KLYAgLwlLD1ziStycUNwOuuTXGCU8iVgQkazsIAxM8=
Subject key identifier: D3:B1:E0:BD:3A:73:B7:F2:37:23:81:0E:70:52:59:70:BC:8D:DE:09
Certificate issuer: /CN=a99a8763fa7509eb4f9b0846b585d4873eb11c39
Certificate serial: 019FD24E911328D3A13C4F0C297911F94474
Authority key identifier: A9:9A:87:63:FA:75:09:EB:4F:9B:08:46:B5:85:D4:87:3E:B1:1C:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZqHY_p1CetPmwhGtYXUhz6xHDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/07HgvTpzt_I3I4EOcFJZcLyN3gk.roa
Signing time: Wed 05 Aug 2026 14:23:11 +0000
ROA not before: Wed 05 Aug 2026 14:23:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 129.11.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZqHY_p1CetPmwhGtYXUhz6xHDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:4e:91:13:28:d3:a1:3c:4f:0c:29:79:11:f9:44:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a99a8763fa7509eb4f9b0846b585d4873eb11c39
Validity
Not Before: Aug 5 14:23:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3b1e0bd3a73b7f23723810e70525970bc8dde09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:7a:e2:f7:ed:f0:2f:27:b4:e3:71:af:30:15:
4a:10:4c:ec:1e:d7:a3:03:4d:18:34:b7:33:ca:fe:
66:52:f0:f7:d7:0c:37:16:5a:e6:d7:21:f6:5d:65:
0a:53:67:9c:94:e5:3f:29:ce:12:25:8f:eb:6e:9e:
60:1e:f3:ff:4f:90:77:78:7b:ed:60:23:29:eb:b0:
13:b3:ef:d3:29:df:59:43:6c:f5:e5:35:7d:bc:01:
3b:b8:51:8e:ce:11:66:cb:be:81:b2:57:51:19:53:
02:4d:b2:4e:d3:3c:23:df:ca:15:ea:76:41:15:cf:
5d:7c:80:e7:79:ac:fa:64:f0:0a:2f:17:0a:e7:52:
7d:44:c3:b2:6e:79:cc:bf:05:7a:68:f7:40:f5:90:
97:26:8b:c4:c5:27:e1:8a:25:07:34:c4:40:77:1c:
32:12:39:94:10:9e:24:d3:89:14:60:73:8f:1a:5b:
49:97:68:e7:a9:d2:2a:00:e7:05:4e:4d:85:62:e9:
af:39:9c:2c:2f:de:ce:9c:ba:62:a1:48:39:c5:39:
89:1c:09:d6:b9:e6:f2:9e:50:87:b4:87:7b:b6:bb:
f5:c3:b5:0b:34:5b:40:2b:9e:8c:19:08:1c:60:33:
61:20:87:06:db:b3:be:3b:c3:2b:a6:df:d6:e5:73:
51:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B1:E0:BD:3A:73:B7:F2:37:23:81:0E:70:52:59:70:BC:8D:DE:09
X509v3 Authority Key Identifier:
keyid:A9:9A:87:63:FA:75:09:EB:4F:9B:08:46:B5:85:D4:87:3E:B1:1C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZqHY_p1CetPmwhGtYXUhz6xHDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/07HgvTpzt_I3I4EOcFJZcLyN3gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.11.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:80:a9:4f:0d:2b:a1:7e:60:a8:88:85:fd:51:c3:20:59:1c:
36:94:67:62:8c:5c:98:c6:36:90:30:ed:88:25:ab:59:1b:70:
64:aa:d1:03:73:32:73:24:aa:2c:8f:9e:32:7c:28:16:4c:95:
ab:61:aa:96:6c:c2:eb:f3:9d:95:3d:6a:94:86:d1:b9:b4:38:
a9:f6:84:e5:5e:7a:8e:74:ec:c1:6c:72:32:bd:e8:16:8e:f5:
a1:51:02:95:f6:34:21:5f:41:77:71:78:82:78:70:21:36:4a:
79:83:95:46:eb:2b:3f:32:06:90:de:7d:cf:72:7e:58:58:c1:
3e:87:bb:79:68:82:96:3c:a1:8b:f9:c2:df:4c:b0:86:f5:6c:
1a:d6:f0:20:03:91:b1:38:2f:e7:44:97:55:07:6f:54:1f:dc:
57:3a:4b:90:2c:97:45:b9:50:c9:43:52:3c:01:ac:25:11:27:
98:5f:74:19:77:a0:86:e0:8c:1b:a8:ac:22:b7:3d:23:7e:87:
2f:9b:31:7e:15:12:41:0e:24:b5:12:4c:e7:b3:bf:a0:5e:9b:
2c:d0:84:42:dc:b1:1f:6c:35:14:db:73:c5:14:c7:19:29:c7:
f3:1b:64:2e:e9:ff:33:f6:cb:6d:00:78:4e:25:9d:60:0b:1a:
ec:68:4e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:37:04 2026 by rpki-client