Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/CUvAm54xScptYZ6MjdLDkX9Zqlk.roa
File: CUvAm54xScptYZ6MjdLDkX9Zqlk.roa (raw, json)
Hash identifier: Zw4EzrvqGWMbw48vYbCJvXW2fQxkqUk+3tt+NZYsz5w=
Subject key identifier: 09:4B:C0:9B:9E:31:49:CA:6D:61:9E:8C:8D:D2:C3:91:7F:59:AA:59
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019FD6FED436E60DB0F60AD1909FFDC969BA
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/CUvAm54xScptYZ6MjdLDkX9Zqlk.roa
Signing time: Thu 06 Aug 2026 12:14:12 +0000
ROA not before: Thu 06 Aug 2026 12:14:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62610
IP address blocks: 2a09:fd80::/29 maxlen: 29
2a12:6180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 09:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:fe:d4:36:e6:0d:b0:f6:0a:d1:90:9f:fd:c9:69:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 6 12:14:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=094bc09b9e3149ca6d619e8c8dd2c3917f59aa59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b9:66:b0:ca:21:02:1a:e3:93:3b:e0:26:f5:
89:fe:82:e9:d0:45:7c:d8:9a:c0:76:88:ca:a0:97:
1d:de:d3:31:1b:76:67:63:ee:ff:55:be:c1:75:ef:
5a:9f:a5:94:d4:ec:25:e4:84:ab:cd:79:15:50:0f:
94:d4:07:74:39:21:f3:0b:45:f6:25:ce:c5:d6:ff:
de:77:6d:0b:d9:08:9e:c5:fd:c9:89:c1:c0:bc:75:
fc:30:c0:1b:f8:12:f1:65:41:21:2d:d9:fd:3e:99:
6b:01:a7:f2:8f:b2:d3:0b:3c:b7:1a:17:b3:98:36:
8e:1b:95:c7:07:d8:87:8f:65:4e:5d:a1:4c:f8:ac:
33:51:fc:0a:f3:a1:75:6a:a7:e9:a2:70:56:19:4e:
d0:bf:ec:1d:85:0b:5a:1d:ab:8d:2a:b4:3f:9f:0c:
7a:03:dd:83:a3:06:e4:42:1b:ce:86:8b:47:e0:9c:
79:a2:3b:59:4c:61:66:31:61:9a:52:16:82:4b:90:
bb:ec:6e:8e:28:50:e0:b3:ca:3c:d9:d1:e2:c4:d2:
0f:77:ca:4c:ed:44:93:ac:8a:a9:e3:39:46:68:ec:
55:09:ff:60:6d:b3:3f:b5:69:ce:6e:6d:52:bd:15:
67:1a:37:be:16:a8:5d:e7:e4:e1:70:06:a2:66:64:
b9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4B:C0:9B:9E:31:49:CA:6D:61:9E:8C:8D:D2:C3:91:7F:59:AA:59
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/CUvAm54xScptYZ6MjdLDkX9Zqlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:fd80::/29
2a12:6180::/29
Signature Algorithm: sha256WithRSAEncryption
6a:3e:a6:c3:c2:71:ee:e0:2f:e6:07:09:84:54:2f:82:d3:6e:
03:35:1c:21:e9:33:7f:ac:23:1e:f6:5c:c2:e6:1b:c1:11:a8:
f8:81:5f:c2:21:91:e5:fc:59:85:dc:aa:1d:fc:4b:a8:02:18:
dc:e3:b1:af:2f:5f:96:83:45:5e:92:6f:4d:59:85:9b:79:a5:
f0:e7:72:75:b9:2e:a8:3f:1c:dd:1d:d7:bf:8a:82:a3:65:83:
0b:4a:d8:1a:68:ce:6a:2f:8f:f1:8f:64:97:20:9c:84:b1:3c:
df:c5:4e:e4:71:83:d8:1f:9b:21:c8:28:ce:6a:c2:83:d5:45:
01:f0:9e:02:23:80:25:1a:32:63:bd:7b:b2:50:59:4a:62:0a:
17:9c:9d:51:d0:ab:46:53:54:1e:f9:49:be:9c:b5:e7:a7:bd:
b5:ef:11:92:20:b3:a2:a4:ed:0c:00:09:82:84:9a:54:9b:3b:
1c:02:16:33:a5:71:e3:c7:12:63:11:c7:2d:e5:bb:10:95:31:
e6:6e:10:cb:9a:f6:95:9d:67:de:cb:dc:13:9a:6d:8e:dc:6a:
d8:cc:8f:f1:32:38:ba:6c:62:1a:db:ee:24:38:c8:31:60:1b:
b6:cb:38:50:71:d8:f4:bc:40:de:b8:ad:0d:c6:37:fa:8c:9c:
bc:30:f9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:15:42 2026 by rpki-client