Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/9CMy5GVy44WmGYKYeDBTvoZR5TQ.roa
File: 9CMy5GVy44WmGYKYeDBTvoZR5TQ.roa (raw, json)
Hash identifier: yNO5nkcRFqjgqEP98jK2VGjbQpFTpcKKSyIFKKffAK8=
Subject key identifier: F4:23:32:E4:65:72:E3:85:A6:19:82:98:78:30:53:BE:86:51:E5:34
Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Certificate serial: 019FEBC03B0D234284925508B96240757859
Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/9CMy5GVy44WmGYKYeDBTvoZR5TQ.roa
Signing time: Mon 10 Aug 2026 12:57:51 +0000
ROA not before: Mon 10 Aug 2026 12:57:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212950
IP address blocks: 2a0e:a500::/32 maxlen: 32
2a0e:a500:1::/48 maxlen: 48
2a0e:a500:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:c0:3b:0d:23:42:84:92:55:08:b9:62:40:75:78:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Validity
Not Before: Aug 10 12:57:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f42332e46572e385a6198298783053be8651e534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:99:95:6a:78:08:52:29:fd:39:1e:bb:b4:b1:
fc:47:67:ca:f8:65:11:97:55:80:08:e5:ea:18:3d:
04:63:0f:22:8b:67:5d:9d:30:2f:88:09:75:8f:50:
47:a9:14:1a:79:4e:30:3b:e6:04:12:b8:ea:16:83:
58:e8:80:09:ed:63:49:fa:a4:30:f7:e7:ce:a7:f6:
1f:08:34:46:14:18:df:d3:76:b2:1b:eb:dc:e4:07:
32:bb:d8:d0:37:d8:c5:31:85:64:2c:55:3d:66:f2:
f4:44:97:3e:b8:bc:03:19:34:66:23:53:a0:5e:7a:
7e:08:45:45:72:f4:bb:79:50:b0:2f:ff:df:2f:33:
37:94:55:63:70:c3:a3:dd:64:58:58:1d:f6:ab:6e:
99:77:03:f3:3b:38:b6:f4:72:9f:4d:02:e5:3f:2a:
1e:1d:b3:b0:2d:8e:41:29:47:93:f5:33:23:0f:d0:
ad:e4:0e:da:20:0f:47:c2:0f:e5:ae:07:78:88:eb:
ea:f0:37:34:50:24:36:0d:4c:4e:5f:c4:1d:30:fa:
83:c9:93:3b:e2:0f:d3:20:0a:4e:08:79:9b:da:f3:
b7:38:5b:f8:36:73:3f:a4:50:3a:8c:80:72:5b:03:
6e:c0:02:25:bd:9e:60:54:24:6f:df:e1:da:9d:b6:
14:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:23:32:E4:65:72:E3:85:A6:19:82:98:78:30:53:BE:86:51:E5:34
X509v3 Authority Key Identifier:
keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/9CMy5GVy44WmGYKYeDBTvoZR5TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:a500::/32
Signature Algorithm: sha256WithRSAEncryption
4c:68:bf:30:ad:9c:44:19:23:90:57:d6:c4:0e:9b:be:61:5c:
47:db:a9:e0:13:3d:a5:46:d6:58:e6:1e:93:10:94:49:20:61:
da:81:20:83:00:8c:71:e2:57:8f:2b:8b:e9:80:8c:ac:2f:7f:
c1:f3:d3:62:50:22:92:f8:a1:80:d5:fb:c9:79:db:aa:a9:30:
15:be:8e:f0:e1:bf:b8:fb:98:4c:2b:95:67:8d:05:05:00:29:
0b:b5:29:81:09:f9:08:bd:eb:21:87:a0:66:70:68:3a:08:c7:
21:e5:b5:27:27:9d:d5:13:a6:f5:43:8d:e1:9b:8c:d3:67:0b:
89:2c:e4:10:f2:a0:50:2f:7b:a0:db:43:2d:3d:ce:08:9d:ff:
4c:3f:27:77:f8:c9:dc:7b:69:b6:2e:f3:22:50:71:1c:0b:d6:
81:73:cc:e1:e2:26:d2:14:8d:fe:76:b7:97:1a:86:39:49:c1:
23:55:13:27:d2:45:42:22:0e:74:7f:ad:3a:61:b9:a5:65:e1:
ef:cd:c4:f3:11:e7:99:16:88:85:aa:72:4e:4e:53:0f:60:04:
c7:e0:f1:70:db:93:4e:11:de:09:bb:5f:88:9e:aa:ce:06:d6:
12:b5:58:e8:f7:e9:a4:e1:e2:03:bd:29:e3:9e:26:ba:6e:fc:
e6:4a:c0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:42:37 2026 by rpki-client