Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/1-QUW9w6-dsMc8rYK0RgKcw42gQ4.roa
File: 1-QUW9w6-dsMc8rYK0RgKcw42gQ4.roa (raw, json)
Hash identifier: aMY2zgtMuEdRrJYkfcaWiXSQDQZTWen1TDtInrZfVY0=
Subject key identifier: F9:05:16:F7:0E:BE:76:C3:1C:F2:B6:0A:D1:18:0A:73:0E:36:81:0E
Certificate issuer: /CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Certificate serial: 01A0CED1136BD89AF9A3EFF9D07535720BD2
Authority key identifier: 31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/1-QUW9w6-dsMc8rYK0RgKcw42gQ4.roa
Signing time: Wed 23 Sep 2026 15:10:03 +0000
ROA not before: Wed 23 Sep 2026 15:10:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41157
IP address blocks: 2a0f:3400:500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:d1:13:6b:d8:9a:f9:a3:ef:f9:d0:75:35:72:0b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Validity
Not Before: Sep 23 15:10:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f90516f70ebe76c31cf2b60ad1180a730e36810e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9b:f6:85:f3:96:31:92:ab:26:92:93:81:c8:
3c:1b:42:86:06:43:22:c0:eb:76:12:6d:0e:3b:70:
5e:00:ef:b0:cf:9f:7d:b3:00:e4:f6:6e:5a:64:a4:
a8:ae:5e:24:42:2c:b1:37:c0:19:7d:89:66:f9:75:
00:10:b1:2b:6a:e1:66:0b:84:e3:53:63:eb:9c:8d:
f4:53:bc:6c:eb:1a:e1:c4:bc:48:3d:30:2a:1d:bf:
57:64:98:a7:05:4e:e3:18:36:8d:26:ba:fb:7e:cd:
77:0e:a7:a6:9c:8e:39:7d:a3:e8:c6:ae:67:e9:16:
d7:23:8f:56:d1:d9:49:86:fb:65:6f:dc:21:39:73:
e6:43:3c:60:46:e2:b8:dd:93:54:0e:b1:a5:5e:d1:
ea:6b:2a:89:e9:50:3d:b8:20:fe:f9:5b:78:9a:59:
a8:b6:db:bf:83:2f:0d:ca:3e:14:88:eb:95:4e:af:
f0:83:87:e9:0b:f0:eb:ae:9a:ea:e8:13:d8:69:fd:
bd:7f:b3:79:8d:d5:93:85:01:14:ac:bc:a5:24:dc:
e0:b2:6a:32:96:1b:d1:fb:f8:ec:3e:95:4b:68:60:
04:8a:57:86:e5:52:4c:ab:51:d5:0d:98:70:13:8f:
42:75:18:93:31:bf:78:0c:0d:2a:55:dc:9b:ba:b3:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:05:16:F7:0E:BE:76:C3:1C:F2:B6:0A:D1:18:0A:73:0E:36:81:0E
X509v3 Authority Key Identifier:
keyid:31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/1-QUW9w6-dsMc8rYK0RgKcw42gQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3400:500::/40
Signature Algorithm: sha256WithRSAEncryption
80:16:11:97:99:31:a3:b0:30:32:c3:f8:db:a6:77:b5:12:d8:
ef:cc:61:7d:26:85:b8:d7:b4:6e:67:76:37:8a:32:34:c6:f0:
d4:55:bd:46:eb:74:01:28:b1:42:84:97:dd:37:df:26:dd:79:
a9:17:b1:c1:a4:5b:bc:25:07:bf:0e:11:65:a5:5d:07:06:75:
e1:3f:03:64:3c:5a:bc:82:0d:46:00:d9:63:22:00:d8:fa:ea:
b4:ee:22:99:e3:d3:39:7e:6d:eb:84:fe:bb:f7:5e:1b:92:3b:
4b:75:41:53:af:51:28:ba:5f:3b:98:94:25:09:c4:3e:65:01:
99:5e:b6:ba:bc:35:13:57:f3:46:e1:5b:29:a2:fb:80:41:6e:
b6:67:cc:72:e1:b1:26:d6:91:db:c4:39:1c:05:8d:6a:4f:7b:
4d:b7:89:ce:53:38:09:3b:6f:4b:db:96:ff:dd:9f:35:cb:0a:
56:2e:05:72:0f:50:75:02:35:c4:3e:09:9f:f9:d2:f4:18:c6:
cc:64:04:8e:68:87:de:46:24:77:91:80:e8:46:8b:9e:e9:0e:
82:6b:0f:55:7e:52:89:86:01:d6:b7:28:5f:6e:39:19:f8:6d:
5e:f3:b7:6c:7a:d6:fb:47:8a:0e:ae:8c:8a:e7:a4:96:7b:66:
14:44:48:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:17:06 2026 by rpki-client