Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/9zWDYSeZIkjEiVRVUNgSRKOdTw0.roa
File: 9zWDYSeZIkjEiVRVUNgSRKOdTw0.roa (raw, json)
Hash identifier: NTLz7g+ZbCzTxq/x0340sjZGnuTxuJwbS2LJZglRqHg=
Subject key identifier: F7:35:83:61:27:99:22:48:C4:89:54:55:50:D8:12:44:A3:9D:4F:0D
Certificate issuer: /CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Certificate serial: 019F69D30C02BA5AA5DE46F52EBB8AAF746F
Authority key identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/9zWDYSeZIkjEiVRVUNgSRKOdTw0.roa
Signing time: Thu 16 Jul 2026 07:27:46 +0000
ROA not before: Thu 16 Jul 2026 07:27:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214542
IP address blocks: 2a14:9d04:ba00::/40 maxlen: 40
2a14:9d04:ba00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:d3:0c:02:ba:5a:a5:de:46:f5:2e:bb:8a:af:74:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Validity
Not Before: Jul 16 07:27:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f735836127992248c489545550d81244a39d4f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:c4:49:f5:ce:f9:06:b5:e5:30:0b:6c:07:
42:14:43:89:dd:d2:cc:b8:21:77:94:8d:17:6c:8f:
6d:5a:7e:4f:33:9a:9f:0c:57:ba:5d:33:56:81:fc:
a9:37:9e:ae:15:25:1a:3f:d4:d3:17:2a:32:7b:f1:
c6:04:82:0b:de:3d:e3:99:ff:43:bc:6d:6b:07:62:
cb:43:63:fa:44:ad:29:da:54:1b:4f:c9:36:97:17:
0d:f0:b1:ca:89:09:d5:e2:4d:a8:0f:72:79:f4:88:
1c:60:27:b5:dc:04:03:02:5b:1d:27:af:da:e3:1d:
e6:b7:e7:78:3c:27:33:f9:2c:b9:8f:11:f9:9f:11:
41:89:69:da:d0:d7:43:a2:4c:80:f1:16:cd:55:08:
d6:74:77:a4:60:4f:d9:28:5a:25:e7:f8:ec:5a:87:
04:ed:91:77:4d:77:b8:2d:12:23:18:db:ae:ae:3b:
c1:2a:bc:51:05:99:0f:12:5b:4b:59:b8:64:05:ac:
fa:56:c5:3d:2c:69:d2:4d:76:99:56:14:38:2c:68:
9f:e2:5f:71:d5:04:fb:94:25:e8:07:b7:fd:d4:26:
51:a1:13:6d:3b:04:7e:a8:5b:cd:8d:d6:24:80:12:
25:18:bf:98:5d:8f:4a:82:34:e4:00:a3:4a:5f:b7:
86:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:35:83:61:27:99:22:48:C4:89:54:55:50:D8:12:44:A3:9D:4F:0D
X509v3 Authority Key Identifier:
keyid:33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/9zWDYSeZIkjEiVRVUNgSRKOdTw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9d04:ba00::/40
Signature Algorithm: sha256WithRSAEncryption
3a:0e:9c:d9:2d:25:06:c9:12:5a:72:a4:b6:57:7b:bb:20:06:
53:bd:21:14:cd:1d:1b:94:a4:3a:e1:0a:f1:e9:60:c0:9d:52:
0b:13:2b:29:38:ef:1f:5d:a5:9c:bb:fa:11:61:95:23:7d:47:
1b:db:57:e3:86:59:c2:6b:51:2b:8f:5f:ae:77:be:75:b3:8b:
e5:8f:d7:ee:e3:5b:16:0c:63:d4:89:a0:45:3f:ca:85:e8:13:
60:9f:af:1b:a5:e0:54:50:d4:d4:0d:3d:2e:21:f4:01:da:d4:
b5:b5:67:62:73:54:da:e4:68:f3:46:6a:89:7e:f5:f4:7a:5d:
e1:ed:5c:45:81:1b:4d:8a:e1:99:da:51:21:ff:cd:18:51:56:
6f:01:4c:c0:b7:d4:c8:56:8f:86:e9:82:b7:90:58:9a:64:b3:
10:db:31:b4:62:84:50:a0:22:05:6d:7d:97:5d:83:6a:a3:e5:
26:a6:7c:53:83:82:3e:25:be:e9:e4:e1:74:11:e9:ad:53:fd:
d5:97:78:6e:c3:fb:de:5a:54:76:0a:b9:04:16:0a:75:4b:d6:
c3:38:d7:b2:f0:fe:e0:38:65:68:60:86:f2:2e:59:b7:fa:77:
0f:32:94:5e:0a:d0:41:fb:60:39:19:15:77:78:83:bb:95:89:
48:18:7c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:42 2026 by rpki-client