Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FB314dH8kVPckBWE44is42dMcgo.roa
File: FB314dH8kVPckBWE44is42dMcgo.roa (raw, json)
Hash identifier: xmO2VVSE8FVIF22EWYBGKGsElZE31rFLSpAE4ZZnDc4=
Subject key identifier: 14:1D:F5:E1:D1:FC:91:53:DC:90:15:84:E3:88:AC:E3:67:4C:72:0A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019FE07A7D87A8BD8D100D1A56E224C24DE6
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FB314dH8kVPckBWE44is42dMcgo.roa
Signing time: Sat 08 Aug 2026 08:25:51 +0000
ROA not before: Sat 08 Aug 2026 08:25:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 2a0a:4c00::/29 maxlen: 29
2a11:2840::/29 maxlen: 29
2a11:3a40::/29 maxlen: 29
2a11:51c0::/29 maxlen: 29
2a11:6dc0::/29 maxlen: 29
2a11:9dc0::/29 maxlen: 29
2a11:c740::/29 maxlen: 29
2a11:eec0::/29 maxlen: 29
2a12:a80::/29 maxlen: 29
2a12:b00::/29 maxlen: 29
2a12:7400::/29 maxlen: 29
2a12:b900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e0:7a:7d:87:a8:bd:8d:10:0d:1a:56:e2:24:c2:4d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 8 08:25:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=141df5e1d1fc9153dc901584e388ace3674c720a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2b:3f:74:cd:f7:46:91:c8:58:fd:7e:40:66:
83:58:09:49:65:bb:e0:28:b5:36:41:db:89:32:56:
41:2f:75:c2:9b:d6:7e:f2:9e:d8:db:67:31:0d:42:
6b:0e:6e:38:66:27:b7:98:0d:28:89:ca:d2:69:87:
12:29:fa:44:40:3f:00:a4:1d:19:ba:1d:0a:c8:42:
8c:89:45:81:10:59:f8:13:ce:23:8f:93:ae:56:de:
1a:97:13:cf:76:7b:42:0c:a2:be:5d:f9:56:ee:bd:
0b:52:0f:86:ed:75:f9:b5:87:4f:ac:bf:8d:6e:5e:
cf:f2:d7:f3:b3:d6:2f:35:0e:96:fc:69:41:fa:1a:
5e:52:47:11:04:35:fb:49:5a:cc:3a:0d:1f:a0:dc:
5e:81:75:3f:e9:43:23:03:0e:4b:99:18:0d:33:5c:
3c:f4:be:d6:0b:79:39:6d:55:b8:b9:a6:22:cf:f0:
bb:70:c2:d7:e8:c3:7f:09:8d:eb:00:df:e7:e4:b3:
95:bc:a8:ba:e0:fe:f8:56:86:07:1e:bc:55:cb:7e:
fd:90:3d:1d:8c:78:06:73:74:5c:d7:a1:93:e2:66:
ca:33:2b:df:9e:1e:f4:10:4c:17:d5:0e:9b:15:de:
a9:3b:79:ab:45:87:21:e7:00:67:50:40:96:b3:08:
6f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1D:F5:E1:D1:FC:91:53:DC:90:15:84:E3:88:AC:E3:67:4C:72:0A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FB314dH8kVPckBWE44is42dMcgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:4c00::/29
2a11:2840::/29
2a11:3a40::/29
2a11:51c0::/29
2a11:6dc0::/29
2a11:9dc0::/29
2a11:c740::/29
2a11:eec0::/29
2a12:a80::/29
2a12:b00::/29
2a12:7400::/29
2a12:b900::/29
Signature Algorithm: sha256WithRSAEncryption
43:09:4f:18:b4:ee:01:45:ac:44:05:53:a2:2b:38:6c:e5:e4:
33:e7:65:38:dd:f2:98:b2:ae:1f:82:1d:3a:7c:cb:94:40:39:
4c:8e:72:22:06:db:36:a0:68:2a:83:5a:61:d7:34:e0:fd:83:
80:01:0b:6b:ad:c1:b8:16:d6:18:5c:96:af:c7:54:a2:71:db:
29:25:61:d1:79:47:21:20:18:82:57:6f:61:b9:94:18:ea:d6:
61:0b:d8:f4:fc:9d:00:a3:62:96:49:8d:5e:ba:a9:ff:da:8b:
ca:86:76:b3:2d:39:b0:66:d7:06:32:0c:52:43:9b:eb:a6:2f:
fe:b5:64:d3:09:91:41:fc:72:81:f2:13:ec:10:83:44:bb:7f:
63:5b:38:75:13:29:83:d6:7a:39:7e:76:cc:49:da:78:10:80:
5c:a9:7f:e5:f6:1a:c7:2a:8f:0f:c1:2a:c9:4e:4b:5f:13:76:
d7:e9:de:3f:47:f6:9a:a4:37:5e:d2:4a:7a:88:f3:65:e4:c1:
f5:a2:9a:0f:90:d4:8a:3e:ea:5d:fb:26:48:1c:7a:19:ab:07:
a8:ee:f6:33:11:e0:fb:9f:50:02:f3:18:68:1e:3c:c5:48:e4:
e9:a0:5a:6d:87:99:f9:20:98:86:34:b1:a3:02:1f:66:1b:77:
ab:d3:9f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:55 2026 by rpki-client