Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/nOAz1MxeL2Yg_diTkYktSjclA6o.roa
File: nOAz1MxeL2Yg_diTkYktSjclA6o.roa (raw, json)
Hash identifier: 6mcYdwnRDHXSQccR8+DP1sM9YZzuVk/TWlcrFx1aUlQ=
Subject key identifier: 9C:E0:33:D4:CC:5E:2F:66:20:FD:D8:93:91:89:2D:4A:37:25:03:AA
Certificate issuer: /CN=3b9e008d2a178449f12b6c2275b47f0cfd948385
Certificate serial: 019F236897EB89BF0EF0AD5F197F9DDDFD52
Authority key identifier: 3B:9E:00:8D:2A:17:84:49:F1:2B:6C:22:75:B4:7F:0C:FD:94:83:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O54AjSoXhEnxK2widbR_DP2Ug4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/nOAz1MxeL2Yg_diTkYktSjclA6o.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207214
IP address blocks: 2a09:6f40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/O54AjSoXhEnxK2widbR_DP2Ug4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:97:eb:89:bf:0e:f0:ad:5f:19:7f:9d:dd:fd:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9e008d2a178449f12b6c2275b47f0cfd948385
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ce033d4cc5e2f6620fdd89391892d4a372503aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:07:d9:04:ed:bc:e3:53:29:f3:17:8e:2a:4a:
8d:44:2d:0b:65:bc:23:d7:c7:79:22:9b:fb:5e:96:
7b:1c:95:3a:f8:8e:65:6c:af:c2:47:5a:38:00:9a:
69:2f:e9:d3:d9:10:89:2b:15:bf:2d:a7:89:24:36:
4a:f9:a9:ab:33:f2:a2:ed:2c:ff:c0:78:1b:3b:e9:
ee:cb:61:d9:d1:ae:65:6d:09:7c:41:f0:8c:cf:03:
c7:00:39:7e:ab:25:40:7e:b7:57:8e:fb:b9:77:1f:
45:f6:8b:91:2c:d9:a5:6e:71:db:86:c2:da:55:8f:
c0:6f:f3:6f:67:ab:75:77:50:08:ec:8a:c3:21:fe:
fd:c3:87:4f:90:31:c8:fa:94:17:06:f5:54:0e:bb:
7c:88:46:9a:53:4e:e3:9b:da:86:f7:ac:7f:79:e8:
52:09:c1:2d:f3:1b:1b:b7:10:4c:6a:69:e7:8a:1a:
74:61:22:85:d5:0c:b0:45:ff:26:56:49:93:ed:39:
bc:74:64:9e:49:a1:02:9d:85:08:08:88:b0:0c:0e:
01:6c:86:cf:89:5f:cb:e2:f4:11:1a:ed:2e:9d:6b:
53:d8:0c:da:2b:25:60:b4:0f:5a:58:4e:ae:21:de:
33:fb:71:ac:a0:a8:19:31:f8:af:03:3c:8e:70:8e:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E0:33:D4:CC:5E:2F:66:20:FD:D8:93:91:89:2D:4A:37:25:03:AA
X509v3 Authority Key Identifier:
keyid:3B:9E:00:8D:2A:17:84:49:F1:2B:6C:22:75:B4:7F:0C:FD:94:83:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O54AjSoXhEnxK2widbR_DP2Ug4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/nOAz1MxeL2Yg_diTkYktSjclA6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6f40::/29
Signature Algorithm: sha256WithRSAEncryption
26:20:ac:c9:fe:c4:54:7d:d0:0f:1a:58:a5:7e:14:42:90:86:
78:68:76:de:38:01:b5:88:41:33:63:ac:3d:94:5a:39:80:4b:
8c:ec:bf:54:a7:36:b3:c6:aa:f9:52:e2:19:e0:32:67:5c:a5:
50:93:22:de:fd:be:5e:30:62:f7:81:d6:86:a9:72:29:68:c4:
dc:9e:d3:36:12:b5:f9:f7:83:0d:e2:b1:ba:c0:a3:c2:a2:00:
cd:fc:11:c5:81:0a:3f:6b:c3:12:fb:45:0a:8f:b7:1f:ff:31:
f8:cb:6c:94:af:2a:f1:47:d3:84:8e:09:18:82:d8:ba:56:cc:
10:fb:bc:99:be:2b:04:cb:98:de:9e:18:29:f3:b6:5f:da:44:
df:f5:16:dd:4a:e3:ee:94:46:c6:c5:ed:23:c7:5e:95:48:03:
5c:08:1a:8a:44:b0:81:e8:ea:f2:04:aa:c5:6d:b4:fe:16:fa:
dd:48:dd:28:7b:56:a9:2e:8c:17:ff:6a:05:dc:16:99:56:af:
c0:f0:14:31:8f:14:cd:0c:6f:64:c5:76:87:1e:f7:1a:88:17:
3a:c6:a0:9f:1d:cf:d9:27:a0:f9:59:89:7d:4a:51:c3:76:f5:
c3:25:a6:e8:84:22:50:7c:b0:b3:50:40:31:3e:e7:29:ac:7b:
ff:cb:f9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:51:34 2026 by rpki-client