Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/ox7NDoqott72gSfdVeIEy83lJT4.roa
File: ox7NDoqott72gSfdVeIEy83lJT4.roa (raw, json)
Hash identifier: aCH7aTLXQZemfAdMz4NruUNoSoIedqNIVC7c6NRNeEg=
Subject key identifier: A3:1E:CD:0E:8A:A8:B6:DE:F6:81:27:DD:55:E2:04:CB:CD:E5:25:3E
Certificate issuer: /CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Certificate serial: 01A0F0F2CD9F6081F0EA2B2F72605C8A46E3
Authority key identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/ox7NDoqott72gSfdVeIEy83lJT4.roa
Signing time: Wed 30 Sep 2026 06:13:59 +0000
ROA not before: Wed 30 Sep 2026 06:13:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a01:efc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:f2:cd:9f:60:81:f0:ea:2b:2f:72:60:5c:8a:46:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Validity
Not Before: Sep 30 06:13:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a31ecd0e8aa8b6def68127dd55e204cbcde5253e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:22:48:57:ce:07:b3:ba:d8:f7:c2:85:74:
bf:31:ab:53:fd:08:c5:4a:66:46:41:e0:76:4f:c2:
54:11:4c:c5:10:2d:0a:05:69:33:3f:58:e0:2f:e8:
62:5c:7e:11:eb:11:08:6d:37:5f:aa:42:9e:b2:a1:
3a:2f:7c:f2:4f:3d:45:e1:55:d1:7c:85:2b:e4:bc:
56:65:a7:ee:b3:82:5a:03:05:34:13:62:7c:4c:cb:
88:ec:91:5e:94:93:49:de:37:da:62:81:f3:9a:57:
90:20:6e:c0:13:9d:f6:49:e7:6d:0d:ae:af:11:90:
8a:7a:ea:23:9d:89:30:7a:7b:75:68:b1:b9:cb:78:
1b:1b:c5:62:ea:49:17:fb:31:8d:4c:72:17:22:dd:
69:7f:39:60:cd:74:ff:48:39:38:4e:a6:38:51:cd:
0c:fa:1b:a4:34:02:1c:c4:b5:86:10:f3:87:5b:80:
51:fe:1a:d9:87:4a:37:fb:e9:c6:cd:72:8b:b2:ac:
a7:07:aa:b7:c9:9e:83:44:ce:e3:c4:ad:f2:ec:5d:
73:c0:3b:2d:87:90:2f:1c:55:91:66:e4:98:fe:8a:
b1:e6:ef:e2:2f:54:e0:3d:8c:06:91:c2:7e:f7:70:
77:0d:bb:74:37:d6:dd:41:73:62:26:6f:9d:8b:ff:
bb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1E:CD:0E:8A:A8:B6:DE:F6:81:27:DD:55:E2:04:CB:CD:E5:25:3E
X509v3 Authority Key Identifier:
keyid:9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/ox7NDoqott72gSfdVeIEy83lJT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:efc0::/29
Signature Algorithm: sha256WithRSAEncryption
37:e1:b4:25:b5:da:a5:25:29:6f:18:09:00:2e:f8:5d:a9:b1:
06:49:2b:cf:52:a8:0c:a8:0b:31:43:03:c0:78:bb:be:ff:ec:
3f:13:ca:b0:4f:1b:f8:1c:58:29:65:c1:5a:17:8d:1b:55:08:
9a:56:af:4a:d5:37:80:92:16:5b:58:08:20:b4:3b:a9:86:e7:
35:6a:5a:1f:83:20:ee:7d:95:12:2c:b5:0a:fe:e6:e2:c8:2d:
82:9f:a4:73:7f:1a:9c:a8:36:54:b7:71:54:7b:8c:83:1c:75:
c6:0f:a9:c5:91:70:99:07:da:ef:4a:79:5f:e6:aa:5d:ab:16:
31:16:08:aa:80:82:4b:9f:53:f5:37:7d:1a:03:ca:a1:2a:25:
83:54:a4:fd:f8:31:2a:68:61:76:2b:0d:c1:08:cd:29:57:af:
9a:41:25:0b:f7:d6:93:85:59:c5:36:0d:69:73:18:4c:c6:37:
cd:bb:4a:bd:15:90:f8:b9:a8:c9:81:92:01:59:62:23:1c:73:
b0:94:2b:9c:c4:82:b4:2c:9f:0b:df:7c:0d:55:ca:8a:f5:a4:
2a:b1:97:47:3c:26:4c:45:d6:9c:fa:9f:23:3c:c5:09:dc:41:
43:dc:2f:ed:79:ed:00:6d:2e:e3:98:6e:52:33:b4:3f:41:2a:
c1:14:5a:ff
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaDw8s2fYIHw6isvcmBcikbjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmM2VjMjFlMTBmMzY0NmU0ZGMwZTIzZjVmN2VjNDQ1MDE1
NjBkZTMwHhcNMjYwOTMwMDYxMzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzFlY2QwZThhYThiNmRlZjY4MTI3ZGQ1NWUyMDRjYmNkZTUyNTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK0iSFfOB7O62PfChXS/MatT/QjF
SmZGQeB2T8JUEUzFEC0KBWkzP1jgL+hiXH4R6xEIbTdfqkKesqE6L3zyTz1F4VXR
fIUr5LxWZafus4JaAwU0E2J8TMuI7JFelJNJ3jfaYoHzmleQIG7AE532SedtDa6v
EZCKeuojnYkwent1aLG5y3gbG8Vi6kkX+zGNTHIXIt1pfzlgzXT/SDk4TqY4Uc0M
+hukNAIcxLWGEPOHW4BR/hrZh0o3++nGzXKLsqynB6q3yZ6DRM7jxK3y7F1zwDst
h5AvHFWRZuSY/oqx5u/iL1TgPYwGkcJ+93B3Dbt0N9bdQXNiJm+di/+7BQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFKMezQ6KqLbe9oEn3VXiBMvN5SU+MB8GA1UdIwQY
MBaAFJ8+wh4Q82RuTcDiP19+xEUBVg3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbno3Q0hoRHpaRzVOd09JX1gzN0VSUUZXRGVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS82YmFmZTktODc4Yi00NmZkLWEzMDUt
N2JhMjVkNTU5NWZhLzEvb3g3TkRvcW90dDcyZ1NmZFZlSUV5ODNsSlQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS82YmFmZTktODc4Yi00NmZkLWEzMDUtN2JhMjVkNTU5NWZh
LzEvbno3Q0hoRHpaRzVOd09JX1gzN0VSUUZXRGVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgHvwDAN
BgkqhkiG9w0BAQsFAAOCAQEAN+G0JbXapSUpbxgJAC74XamxBkkrz1KoDKgLMUMD
wHi7vv/sPxPKsE8b+BxYKWXBWheNG1UImlavStU3gJIWW1gIILQ7qYbnNWpaH4Mg
7n2VEiy1Cv7m4sgtgp+kc38anKg2VLdxVHuMgxx1xg+pxZFwmQfa70p5X+aqXasW
MRYIqoCCS59T9Td9GgPKoSolg1Sk/fgxKmhhdisNwQjNKVevmkElC/fWk4VZxTYN
aXMYTMY3zbtKvRWQ+LmoyYGSAVliIxxzsJQrnMSCtCyfC998DVXKivWkKrGXRzwm
TEXWnPqfIzzFCdxBQ9wv7XntAG0u45huUjO0P0EqwRRa/w==
-----END CERTIFICATE-----
Generated at Wed Oct 7 07:51:21 2026 by rpki-client