Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/i9sO-7ZMuJ8R-sSVEOCH8TQkHQ8.roa
File: i9sO-7ZMuJ8R-sSVEOCH8TQkHQ8.roa (raw, json)
Hash identifier: lprQ+Tqdyet102x/YPwZcTvHdpzeiayMh626ZaAtqX8=
Subject key identifier: 8B:DB:0E:FB:B6:4C:B8:9F:11:FA:C4:95:10:E0:87:F1:34:24:1D:0F
Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial: 01A13BBAB25FB63638EDEE524D57015C8663
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/i9sO-7ZMuJ8R-sSVEOCH8TQkHQ8.roa
Signing time: Wed 14 Oct 2026 18:44:13 +0000
ROA not before: Wed 14 Oct 2026 18:44:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219100
IP address blocks: 2a14:1bc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:ba:b2:5f:b6:36:38:ed:ee:52:4d:57:01:5c:86:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
Validity
Not Before: Oct 14 18:44:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bdb0efbb64cb89f11fac49510e087f134241d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4b:dc:9b:d8:d5:76:82:4d:b8:f7:a0:10:84:
a5:81:97:a7:05:51:da:1f:04:9b:98:b9:da:8f:dd:
a0:46:4e:49:75:54:7e:97:50:c3:ff:cd:c4:2f:b7:
52:1f:f0:9b:79:13:c7:dd:b2:76:77:05:af:2d:ca:
b8:2c:54:28:52:cc:71:b8:07:41:27:b8:bf:68:d5:
04:80:1e:1f:05:78:75:94:3a:46:51:c7:48:f0:13:
43:94:a1:b5:35:2a:79:07:4a:1c:43:66:a3:f4:24:
d7:5d:b3:30:8e:60:e0:61:91:23:a3:70:33:30:9a:
a0:2c:0f:c9:06:4c:f7:77:a4:c2:48:15:06:2d:3e:
68:f3:e7:c6:7b:da:9c:81:56:bc:17:11:6d:94:4b:
61:74:8d:33:9f:60:c6:7b:18:3f:a3:17:5a:61:27:
03:01:a1:37:6f:16:85:9d:3f:ca:c1:19:fb:62:00:
ae:c5:5c:b2:b4:12:83:e1:21:f2:7c:c2:12:69:36:
cc:6b:8d:39:07:7f:13:2a:e5:66:f4:cf:bd:bf:21:
ee:ff:dc:72:a3:5b:d3:28:d0:64:e1:9e:f4:7a:96:
65:10:ba:46:15:b1:6a:8d:69:0f:1d:ae:0f:0f:68:
a2:b5:27:90:0d:02:3b:5a:9c:b1:97:cd:4b:20:8b:
13:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DB:0E:FB:B6:4C:B8:9F:11:FA:C4:95:10:E0:87:F1:34:24:1D:0F
X509v3 Authority Key Identifier:
keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/i9sO-7ZMuJ8R-sSVEOCH8TQkHQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1bc0::/29
Signature Algorithm: sha256WithRSAEncryption
1d:4b:1a:76:ed:9f:d9:3f:c1:83:6c:43:22:f0:97:fa:ba:65:
cd:7a:a9:50:c5:90:03:4f:62:22:34:90:0f:d9:0a:cf:a9:33:
8e:4b:7b:8e:85:30:72:40:b1:a5:d7:92:4c:73:0c:30:8d:db:
18:6a:4b:ec:ee:be:1d:17:37:c1:98:ea:17:68:af:43:e3:ed:
21:1e:82:18:a1:e0:b1:23:c3:fc:83:90:53:df:a1:0c:88:dd:
46:7e:ef:df:b8:d9:90:f2:26:62:a6:83:40:78:b6:16:88:b9:
86:7e:4c:6f:7a:10:5f:de:34:e9:ec:cb:57:74:6f:7f:2e:b7:
8f:e4:f9:16:29:4a:d6:58:89:f3:cd:c0:76:29:73:08:9d:2a:
41:d0:a6:b6:23:ea:c4:a6:27:fb:38:0f:e8:0f:75:f0:c6:a3:
76:1a:d4:1b:09:8d:06:8d:b2:4e:78:6c:f5:58:33:d0:56:de:
19:92:6c:a1:48:58:e2:64:4d:04:31:83:4c:83:e4:47:79:4a:
8f:bd:46:74:1b:d5:ad:8c:a3:5a:04:c6:4e:93:d5:b8:e9:e6:
f4:41:24:e2:95:bf:ed:75:a7:dd:b0:9b:60:f3:99:aa:44:bc:
48:6d:7f:58:ea:2a:8f:ca:5b:15:33:ec:bb:74:3e:7e:07:ab:
27:4c:d1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:07:17 2026 by rpki-client