Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/9naXBN0i9ts9tnbIOyb5Sczixzc.roa
File: 9naXBN0i9ts9tnbIOyb5Sczixzc.roa (raw, json)
Hash identifier: /kAu0u7183RAbvVpAbGkMi0EZHTKT0BioBMltDlYjok=
Subject key identifier: F6:76:97:04:DD:22:F6:DB:3D:B6:76:C8:3B:26:F9:49:CC:E2:C7:37
Certificate issuer: /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial: 019FFB0C7F0B912BC5C0FDF7528D19BDDC49
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/9naXBN0i9ts9tnbIOyb5Sczixzc.roa
Signing time: Thu 13 Aug 2026 12:15:27 +0000
ROA not before: Thu 13 Aug 2026 12:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51430
IP address blocks: 2a0c:bf81::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:0c:7f:0b:91:2b:c5:c0:fd:f7:52:8d:19:bd:dc:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
Validity
Not Before: Aug 13 12:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6769704dd22f6db3db676c83b26f949cce2c737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:94:c1:0c:c6:55:e7:80:f8:8c:ca:7f:d3:d7:
ab:7e:40:bf:f4:5c:e3:a3:80:fd:6a:2e:03:09:f7:
8f:0e:11:30:f4:bb:6d:68:12:75:35:a7:1c:11:1d:
56:1c:94:ac:ae:30:25:5b:e4:f9:48:38:28:12:d0:
16:16:14:71:97:10:23:ca:41:b3:ad:41:d6:c5:85:
88:99:e0:b5:ea:c1:eb:8b:14:77:8c:d2:9f:e6:38:
c0:33:d9:b8:c8:2e:f4:b9:3f:ad:fb:b6:b5:19:f8:
99:56:05:bc:4f:e4:fa:26:7f:e8:c5:3d:c2:7f:64:
ee:8f:49:0a:c2:ac:19:3a:f9:35:57:65:13:6e:36:
a6:7c:e7:3a:19:8b:ac:09:2b:45:1c:36:06:66:86:
c5:8a:d7:90:6a:b6:de:8a:62:05:fe:7a:fe:82:8c:
72:a1:0f:24:1a:6c:17:cc:55:3a:8c:21:fa:aa:58:
10:cf:8e:b4:26:80:9e:fb:bb:5b:6e:7d:6c:4b:39:
a3:81:7e:d9:fa:9d:7b:a7:8e:84:4f:25:27:57:c8:
af:27:56:97:cf:a8:78:9f:60:cf:c7:19:db:08:28:
e7:60:ac:4b:60:ad:5b:45:40:60:a0:df:47:cc:d2:
84:58:0d:d0:04:02:a6:df:fd:89:bc:83:cd:0d:51:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:76:97:04:DD:22:F6:DB:3D:B6:76:C8:3B:26:F9:49:CC:E2:C7:37
X509v3 Authority Key Identifier:
keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/9naXBN0i9ts9tnbIOyb5Sczixzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:bf81::/48
Signature Algorithm: sha256WithRSAEncryption
bd:7d:c9:7b:06:ff:de:aa:e9:cf:dc:bf:59:10:ba:e7:fb:39:
9a:66:f5:61:da:7c:ac:2b:16:0c:70:a0:f9:2c:e3:91:01:ce:
de:a6:de:38:fd:2d:ed:88:6d:aa:9e:54:cb:96:69:21:72:2e:
f6:79:f1:fe:84:85:86:6c:83:24:b9:39:1f:92:49:8e:f1:86:
1b:d2:35:c6:ce:89:09:a9:98:ef:b5:b0:cb:a1:ac:7a:42:74:
ed:63:72:18:93:24:6c:ce:6f:94:8f:aa:51:33:5a:d2:f6:21:
28:80:74:83:32:bd:d9:f4:a3:70:59:83:b8:6e:6c:8f:12:16:
8f:4e:d4:fa:e3:aa:de:e5:17:0c:17:99:9b:48:43:b7:eb:a1:
ea:d4:c9:11:b0:2c:89:d5:55:f1:50:20:15:8b:0f:8c:ae:8f:
a0:4a:3d:9d:ea:81:e7:c0:15:70:ff:6f:6b:d8:70:78:6b:d6:
09:ce:bf:84:fd:3b:a0:1c:22:96:0b:c4:9e:c0:f4:d4:f1:94:
f4:9c:73:41:c2:a5:a0:49:94:5f:f2:de:82:44:37:93:0f:88:
9d:cb:f7:58:33:be:e5:a3:42:3a:7f:64:e9:58:2e:01:04:25:
48:3d:79:f1:2f:64:7f:c6:12:51:2a:34:e0:46:dc:1a:bf:6c:
4c:45:e9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:26:36 2026 by rpki-client