Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/x9acHITrBbqOx2e9ypYS952QsxQ.roa
File: x9acHITrBbqOx2e9ypYS952QsxQ.roa (raw, json)
Hash identifier: b6zhtsIkjF/mT1JMxCSolgKQVZ0ngXMbV1MvghbUubE=
Subject key identifier: C7:D6:9C:1C:84:EB:05:BA:8E:C7:67:BD:CA:96:12:F7:9D:90:B3:14
Certificate issuer: /CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Certificate serial: 019CD81BDE12D39217B7E47DC695DA7A62A0
Authority key identifier: E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/x9acHITrBbqOx2e9ypYS952QsxQ.roa
Signing time: Tue 10 Mar 2026 14:17:10 +0000
ROA not before: Tue 10 Mar 2026 14:17:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 2a12:c940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:1b:de:12:d3:92:17:b7:e4:7d:c6:95:da:7a:62:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Validity
Not Before: Mar 10 14:17:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7d69c1c84eb05ba8ec767bdca9612f79d90b314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:a3:78:f7:4b:0e:15:04:d3:ca:8d:e6:99:
6b:cd:3c:78:82:92:43:bc:b6:08:10:16:64:d5:af:
61:c8:f4:08:31:e7:2d:ca:60:aa:43:79:52:2c:b4:
d4:1d:4c:b0:5b:50:7f:88:05:52:ae:e5:a4:43:b8:
b2:8d:17:a3:2b:fd:68:dc:77:dd:0d:81:81:45:5c:
13:ed:d0:9d:6c:c5:9f:ca:59:a9:f2:ea:93:f2:87:
2d:32:d4:24:1f:66:ff:45:91:f6:50:b0:34:03:5d:
33:76:f1:1d:ae:c1:65:ba:f4:83:0b:67:07:9e:3c:
92:81:9a:63:1f:b4:51:d2:2f:18:d7:5f:d2:6f:69:
07:0a:f8:9f:a2:be:e4:05:b6:25:0e:56:80:75:f1:
ef:92:20:1e:7d:9f:45:e1:4c:fb:ea:21:4c:ed:e9:
ff:5b:2e:f1:8a:5b:90:fa:84:e5:c3:5f:7f:ed:cc:
04:db:b2:f0:9b:55:c8:db:91:13:f3:3c:9b:3c:52:
48:b8:ad:86:f6:33:7f:a4:13:5e:0f:2b:25:23:ef:
bd:21:7f:90:a2:84:a4:74:65:47:f3:1a:9e:dd:dd:
82:26:20:14:96:f2:2f:56:e1:ed:51:b9:77:6f:72:
ec:e4:ab:06:c6:85:44:a5:38:c4:9c:9b:06:61:60:
3f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D6:9C:1C:84:EB:05:BA:8E:C7:67:BD:CA:96:12:F7:9D:90:B3:14
X509v3 Authority Key Identifier:
keyid:E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/x9acHITrBbqOx2e9ypYS952QsxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:c940::/29
Signature Algorithm: sha256WithRSAEncryption
4b:e7:fb:9b:93:42:8b:9d:c2:03:2f:85:ad:93:8a:95:65:cd:
f6:b0:7c:ad:12:9c:bf:8f:f9:9b:8e:e9:7c:6b:09:2f:08:13:
6d:de:de:0a:52:ba:6b:b0:fb:bd:b4:8c:3a:80:fd:4e:2c:90:
e6:cf:0f:21:d7:c8:c2:d4:ba:3a:19:e3:f1:5a:e8:26:fa:7d:
19:71:20:d2:1d:12:39:f7:52:e0:b9:4e:1f:83:87:77:4f:d8:
48:7c:37:e9:30:73:45:31:3a:32:68:9c:ca:25:44:89:cb:16:
6e:d9:4b:5f:05:57:26:ee:a1:bf:4f:c1:92:b0:c9:e2:73:88:
03:d2:49:ef:5f:22:14:9f:98:26:df:f7:6b:77:e2:67:85:e1:
61:e4:27:8c:9e:c3:f3:e1:61:1e:cd:52:ee:4e:aa:ed:50:b9:
0f:89:e9:45:fa:13:d8:80:d9:52:59:fd:42:91:e7:88:4d:54:
5c:4f:6a:64:77:2b:17:37:c5:b7:1b:d8:a1:af:44:55:72:bc:
eb:5a:82:40:d6:95:2c:4e:6c:15:3c:1d:b5:71:16:23:08:a4:
8a:17:35:1d:b1:a8:eb:66:85:f1:07:1d:98:9d:05:6c:d0:ec:
50:c1:02:f8:c1:b1:94:40:fb:ee:7d:7c:6b:91:1d:6f:52:c7:
f2:c6:c3:2c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZzYG94S05IXt+R9xpXaemKgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNGQ3MTU4YmRmZDQ2M2MzOTFmMTZjYmViMGI3MDllNDFh
NmZjOTYwHhcNMjYwMzEwMTQxNzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2Q2OWMxYzg0ZWIwNWJhOGVjNzY3YmRjYTk2MTJmNzlkOTBiMzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVCjePdLDhUE08qN5plrzTx4gpJD
vLYIEBZk1a9hyPQIMectymCqQ3lSLLTUHUywW1B/iAVSruWkQ7iyjRejK/1o3Hfd
DYGBRVwT7dCdbMWfylmp8uqT8octMtQkH2b/RZH2ULA0A10zdvEdrsFluvSDC2cH
njySgZpjH7RR0i8Y11/Sb2kHCvifor7kBbYlDlaAdfHvkiAefZ9F4Uz76iFM7en/
Wy7xiluQ+oTlw19/7cwE27Lwm1XI25ET8zybPFJIuK2G9jN/pBNeDyslI++9IX+Q
ooSkdGVH8xqe3d2CJiAUlvIvVuHtUbl3b3Ls5KsGxoVEpTjEnJsGYWA/LwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMfWnByE6wW6jsdnvcqWEvedkLMUMB8GA1UdIwQY
MBaAFOJNcVi9/UY8OR8Wy+sLcJ5BpvyWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGsxeFdMMzlSanc1SHhiTDZ3dHdua0dtX0pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy82ZDUxMzEtZDE5NC00NjA1LWEyNjct
ODQ0ODVjZmE0OGM4LzEveDlhY0hJVHJCYnFPeDJlOXlwWVM5NTJRc3hRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy82ZDUxMzEtZDE5NC00NjA1LWEyNjctODQ0ODVjZmE0OGM4
LzEvNGsxeFdMMzlSanc1SHhiTDZ3dHdua0dtX0pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhLJQDAN
BgkqhkiG9w0BAQsFAAOCAQEAS+f7m5NCi53CAy+FrZOKlWXN9rB8rRKcv4/5m47p
fGsJLwgTbd7eClK6a7D7vbSMOoD9TiyQ5s8PIdfIwtS6Ohnj8VroJvp9GXEg0h0S
OfdS4LlOH4OHd0/YSHw36TBzRTE6MmicyiVEicsWbtlLXwVXJu6hv0/BkrDJ4nOI
A9JJ718iFJ+YJt/3a3fiZ4XhYeQnjJ7D8+FhHs1S7k6q7VC5D4npRfoT2IDZUln9
QpHniE1UXE9qZHcrFzfFtxvYoa9EVXK861qCQNaVLE5sFTwdtXEWIwikihc1HbGo
62aF8QcdmJ0FbNDsUMEC+MGxlED77n18a5Edb1LH8sbDLA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 14:27:14 2026 by rpki-client