Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/Ib9hh-TMy8NWgCF2SB6saERuDZY.roa
File: Ib9hh-TMy8NWgCF2SB6saERuDZY.roa (raw, json)
Hash identifier: vnCBy8FHgjLaxM5X4Kapy6zgVqNK6usUxo/Q7DSia5s=
Subject key identifier: 21:BF:61:87:E4:CC:CB:C3:56:80:21:76:48:1E:AC:68:44:6E:0D:96
Certificate issuer: /CN=79eea81b6f33f69b60b9b01db99ad46d90d3d73b
Certificate serial: 019D72FC13EE99F8AA3D07E9EEDB1E3EF751
Authority key identifier: 79:EE:A8:1B:6F:33:F6:9B:60:B9:B0:1D:B9:9A:D4:6D:90:D3:D7:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ee6oG28z9ptgubAduZrUbZDT1zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/Ib9hh-TMy8NWgCF2SB6saERuDZY.roa
Signing time: Thu 09 Apr 2026 16:03:35 +0000
ROA not before: Thu 09 Apr 2026 16:03:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398465
IP address blocks: 2a05:1640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/ee6oG28z9ptgubAduZrUbZDT1zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/ee6oG28z9ptgubAduZrUbZDT1zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ee6oG28z9ptgubAduZrUbZDT1zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Apr 2026 17:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:fc:13:ee:99:f8:aa:3d:07:e9:ee:db:1e:3e:f7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79eea81b6f33f69b60b9b01db99ad46d90d3d73b
Validity
Not Before: Apr 9 16:03:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21bf6187e4cccbc356802176481eac68446e0d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:df:84:d7:e8:39:ab:98:ee:c9:ca:f1:1a:c6:
8b:f0:ad:58:43:80:5b:55:5f:b8:b7:84:10:54:9d:
7f:5c:c7:9b:e2:04:53:98:04:42:72:fa:f4:6c:6f:
6e:04:a4:07:7f:3a:20:ed:a8:d8:be:bc:52:40:3a:
3f:79:2b:24:cf:f5:e1:3f:d6:1a:02:f0:62:41:62:
d1:44:6a:dc:61:eb:9e:bf:40:b9:33:08:ac:56:e8:
81:19:1f:e3:95:51:14:67:94:3e:17:7a:0d:85:a7:
6c:04:35:49:06:05:a8:eb:cf:94:04:84:04:fd:8b:
63:be:96:56:8e:63:7a:37:22:ed:13:4a:26:52:1b:
3c:21:e9:cd:73:d0:de:74:4b:c2:c6:54:f4:8c:75:
9f:c3:13:0c:99:ed:94:1d:37:b8:40:a7:7c:4e:6d:
8b:2d:f4:ea:1c:a5:95:08:92:fe:91:a6:6c:6f:2a:
27:56:b8:09:ed:8c:1c:e6:90:e0:06:c1:6f:81:26:
57:0e:67:1b:da:f4:65:0a:a2:52:23:01:da:20:8b:
71:ac:8c:9d:00:c3:23:f3:ed:bb:60:83:c9:53:37:
88:0f:11:fe:3c:94:c7:c5:64:a5:75:7f:9a:27:ca:
4e:ff:c4:0a:95:9d:19:69:fa:fe:b8:d9:32:6e:70:
aa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BF:61:87:E4:CC:CB:C3:56:80:21:76:48:1E:AC:68:44:6E:0D:96
X509v3 Authority Key Identifier:
keyid:79:EE:A8:1B:6F:33:F6:9B:60:B9:B0:1D:B9:9A:D4:6D:90:D3:D7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee6oG28z9ptgubAduZrUbZDT1zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/Ib9hh-TMy8NWgCF2SB6saERuDZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/ee6oG28z9ptgubAduZrUbZDT1zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1640::/29
Signature Algorithm: sha256WithRSAEncryption
0b:96:ac:30:59:cd:ee:1d:d2:05:b2:a5:46:4f:d3:32:dc:40:
95:e1:5a:05:4c:49:c4:d0:a5:72:aa:21:2d:49:32:8d:a5:e9:
3c:ef:3e:f8:3d:40:05:ad:9e:64:06:72:1e:82:c0:eb:50:da:
76:00:64:c1:15:22:20:df:cd:90:dc:e4:d4:19:d2:b2:70:37:
2e:d6:e5:b3:cd:3c:e1:41:25:ec:9e:f2:57:14:2a:a4:e6:9c:
52:8c:5f:34:cf:3a:89:9a:b7:d5:81:e2:ca:8e:28:d0:d7:03:
68:85:0c:ec:e6:c9:98:95:b7:cd:4b:94:85:b0:c7:d5:63:8c:
6e:89:3a:91:45:8d:a2:47:f7:5c:f9:34:21:c8:5a:80:d9:fb:
85:57:59:46:cd:10:a8:e1:eb:42:c2:58:a5:6e:1a:b7:b4:f8:
5f:c4:9b:f6:c3:4f:5e:a3:a7:3f:0a:4f:c8:4e:9a:83:3f:00:
be:27:ec:61:4b:a3:52:fc:40:91:af:96:cb:34:97:d8:4e:52:
23:37:ba:33:43:e0:7b:f7:3c:35:a1:1b:57:0e:08:3b:a0:f2:
02:67:d4:3b:a8:a6:5b:6d:d4:74:a3:1c:cc:11:d2:be:cb:1a:
02:3d:a6:94:ae:47:f2:ec:ce:62:df:74:90:f2:fb:2b:ea:e9:
f3:f4:2f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 01:28:57 2026 by rpki-client