Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/9wW5KQ7Slc7ZOPr40zyk1QmTYXo.roa
File: 9wW5KQ7Slc7ZOPr40zyk1QmTYXo.roa (raw, json)
Hash identifier: mAZe3FNZYMesRiT82Bcu78JkICnojT78oRfOwdg5ZSM=
Subject key identifier: F7:05:B9:29:0E:D2:95:CE:D9:38:FA:F8:D3:3C:A4:D5:09:93:61:7A
Certificate issuer: /CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Certificate serial: 019F3B9C8E7F5D141547CC446A8FA713AD0E
Authority key identifier: B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/9wW5KQ7Slc7ZOPr40zyk1QmTYXo.roa
Signing time: Tue 07 Jul 2026 08:05:43 +0000
ROA not before: Tue 07 Jul 2026 08:05:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:19e:da2f:ee0a/128 maxlen: 128
2001:67c:64:ffff:0:19f:3b9c:340c/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 07:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:9c:8e:7f:5d:14:15:47:cc:44:6a:8f:a7:13:ad:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Validity
Not Before: Jul 7 08:05:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f705b9290ed295ced938faf8d33ca4d50993617a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:78:06:bf:c2:96:f9:0f:e2:02:90:1c:77:
4d:fd:74:9f:fe:68:cf:4c:19:07:5f:2c:2f:da:c8:
33:56:5a:81:0d:0f:1c:b8:7b:38:24:fa:fe:48:c0:
b2:a1:c8:88:3d:57:a6:a7:b5:e7:ba:37:50:ea:16:
bb:15:b2:e8:93:89:ec:38:8f:20:7a:cd:2a:e6:bc:
1e:23:d4:62:48:93:8d:37:59:c0:31:e5:5a:b2:95:
3c:bd:82:d8:e9:11:bc:da:22:12:13:4d:8c:ed:a0:
ed:a3:47:de:15:95:29:6d:ff:15:b4:d8:43:90:98:
9a:6b:8d:98:a4:2e:c6:c7:0c:7a:97:82:1e:53:a0:
7d:e4:82:95:9a:23:43:f2:06:1f:63:64:f9:47:3c:
07:50:9f:79:c0:03:de:22:41:96:61:dc:1e:c4:db:
78:03:8c:27:9b:55:a1:9b:8b:33:0c:78:8a:2f:9c:
cf:a3:40:5c:16:98:c8:24:40:b1:dd:4a:c3:e2:6d:
ea:57:ea:7a:b1:66:77:db:23:81:42:96:67:b2:3a:
41:c2:2c:e6:fc:07:13:3b:9f:7e:6e:04:58:ab:4d:
d2:7b:9d:9a:d4:21:b0:74:00:e6:cc:48:78:31:1b:
e3:d5:b5:13:e2:d9:c6:34:ff:fe:17:d5:29:40:d7:
ae:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:05:B9:29:0E:D2:95:CE:D9:38:FA:F8:D3:3C:A4:D5:09:93:61:7A
X509v3 Authority Key Identifier:
keyid:B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/9wW5KQ7Slc7ZOPr40zyk1QmTYXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:19e:da2f:ee0a/128
2001:67c:64:ffff:0:19f:3b9c:340c/128
Signature Algorithm: sha256WithRSAEncryption
56:00:8c:9d:d7:cf:27:32:1e:f4:df:cd:cf:95:0e:bc:fa:c8:
52:b2:9c:10:d5:23:5e:fc:39:6d:3f:60:f6:21:57:17:d4:56:
39:18:34:02:10:00:c4:93:6e:2d:2a:74:6a:cf:6a:d1:bc:5d:
75:6e:83:39:53:83:74:e6:c9:34:65:2a:d8:cc:17:d7:0e:5b:
64:b2:04:0c:08:7b:00:10:7a:2f:1b:1e:6f:6f:6e:65:07:61:
b3:b8:e8:6a:21:5e:1c:81:23:c7:af:c4:d7:2c:99:4c:7e:fd:
7d:d6:fe:13:c1:ad:b5:9f:ed:7c:1a:34:a3:b7:ce:08:42:d5:
42:57:39:ee:14:69:a6:b4:f0:46:e3:ac:a0:3b:81:49:64:99:
ce:d9:f7:78:4c:9c:70:2c:45:e7:92:d3:7e:3d:b8:ca:10:ce:
2d:24:d1:6b:af:d4:b0:b9:95:c0:ca:4c:63:f8:d1:0d:6e:94:
d9:ee:54:5c:72:61:95:ac:d9:e2:c8:0c:a8:05:e9:fc:55:fc:
76:05:5d:24:b3:3f:ac:16:c8:c4:12:2d:80:cd:e7:3e:f2:ae:
14:1c:97:6d:2b:89:49:be:ac:0b:84:ef:cd:30:46:67:33:a1:
36:07:02:f7:a3:94:51:e3:a3:af:6e:c2:bb:bb:b0:17:6c:cf:
8a:bf:d7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:17 2026 by rpki-client