Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/9SPUZscn5UHUz0KxWadlqmWkzEI.roa
File: 9SPUZscn5UHUz0KxWadlqmWkzEI.roa (raw, json)
Hash identifier: +z80uBDmEaW37+3/F4siP80+51S8q+6clFxeAIILT5U=
Subject key identifier: F5:23:D4:66:C7:27:E5:41:D4:CF:42:B1:59:A7:65:AA:65:A4:CC:42
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 019FF744390FE64EA9CEEC6DB5FDCD99A166
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/9SPUZscn5UHUz0KxWadlqmWkzEI.roa
Signing time: Wed 12 Aug 2026 18:37:51 +0000
ROA not before: Wed 12 Aug 2026 18:37:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210864
IP address blocks: 2a01:e901:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:44:39:0f:e6:4e:a9:ce:ec:6d:b5:fd:cd:99:a1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Aug 12 18:37:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f523d466c727e541d4cf42b159a765aa65a4cc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d5:09:6b:07:1b:8d:96:4f:cf:73:6f:54:bc:
10:d4:ae:5d:17:c9:63:95:58:6c:db:a4:bc:3e:43:
79:bd:66:21:00:89:32:0b:5f:f2:e6:4d:87:55:16:
ad:53:e8:6a:19:3c:2f:73:0a:cf:7b:ae:a8:d4:f1:
8a:3c:6b:4d:90:50:d5:53:87:f6:40:f9:25:13:fe:
7b:3e:a2:6f:03:d0:fb:a7:c5:85:26:c3:0e:64:e4:
08:b2:fb:43:60:0b:15:5e:c2:f9:aa:ec:b9:f9:5a:
36:49:a8:47:f6:95:d9:2f:09:0e:1c:9b:f9:7f:55:
30:59:ee:a8:f3:9d:79:e0:ba:6d:dd:06:12:85:d3:
a8:82:df:30:ea:b7:46:02:ee:ce:f5:08:9e:cd:4e:
a0:ab:8b:b5:a2:08:73:40:61:d0:fe:5d:f3:f1:88:
7b:69:76:d5:1e:69:ff:14:cf:47:2e:4e:7c:b9:b6:
b8:3b:64:fb:16:2a:c7:88:76:62:8e:c5:db:8e:9c:
9c:6b:b6:5d:0a:8c:08:46:89:ce:7c:a0:3a:3e:c5:
34:d3:ba:21:7a:5b:bd:e9:b4:95:59:6a:1f:07:63:
6d:7a:28:1b:ab:8c:91:92:a7:75:00:2e:02:8d:f6:
8a:bb:47:e0:03:3e:df:80:67:c6:31:6b:92:09:47:
90:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:23:D4:66:C7:27:E5:41:D4:CF:42:B1:59:A7:65:AA:65:A4:CC:42
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/9SPUZscn5UHUz0KxWadlqmWkzEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:12::/48
Signature Algorithm: sha256WithRSAEncryption
9a:bd:55:78:02:27:35:5b:a6:33:ad:6a:24:22:37:23:cf:45:
a8:f6:da:b0:3d:4e:aa:7f:b6:b1:a2:1d:94:8d:73:02:19:d0:
6c:a3:ca:0d:2b:f8:94:84:dd:14:89:f8:70:a6:74:97:8c:07:
a4:f5:8c:61:ae:34:33:35:32:7d:7a:7c:fc:78:91:50:dd:fe:
c9:d4:40:cb:26:56:eb:21:07:f9:ab:43:2c:fb:a2:df:f1:13:
6d:36:fa:6c:81:da:fa:cd:2b:c2:b0:30:60:4c:70:46:96:5f:
ba:65:5f:38:19:d6:d3:39:92:99:d4:61:f1:65:2b:4d:1e:a5:
f4:ca:b0:cc:3c:60:cd:8d:b0:c1:85:f6:26:0d:51:6d:fd:80:
6f:67:bd:d0:3d:65:5e:40:ea:a4:7c:fb:dc:96:52:77:2e:4f:
5b:74:8c:b7:ba:1a:45:f5:a2:38:56:54:fe:dd:76:80:16:23:
2e:8d:e3:aa:85:0f:34:5f:8c:68:23:44:2e:1b:05:72:ee:af:
d9:3c:28:fd:25:3c:7e:ab:39:92:de:84:0c:c3:0d:c1:e2:94:
34:e9:28:06:4a:20:3f:64:91:f6:6d:06:86:4e:57:ac:1a:58:
81:24:78:5f:bd:e0:22:a1:c7:03:fe:24:b7:7c:14:22:ac:53:
2b:40:45:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 13:53:08 2026 by rpki-client