Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/9ReecqYKZ8l0A89M1Yc5NtclYzQ.roa
File: 9ReecqYKZ8l0A89M1Yc5NtclYzQ.roa (raw, json)
Hash identifier: gmUV0Z8p6eaW6u9bMSNNxq/xKFhizs7ktPd6mWRC4Rs=
Subject key identifier: F5:17:9E:72:A6:0A:67:C9:74:03:CF:4C:D5:87:39:36:D7:25:63:34
Certificate issuer: /CN=40b97406244b4107262687db1b9642c3d9e8f843
Certificate serial: 019C81C2B4FBE76AB08C95677D4358032AA7
Authority key identifier: 40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/9ReecqYKZ8l0A89M1Yc5NtclYzQ.roa
Signing time: Sat 21 Feb 2026 19:52:27 +0000
ROA not before: Sat 21 Feb 2026 19:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139803
IP address blocks: 2a14:4600::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 15:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:c2:b4:fb:e7:6a:b0:8c:95:67:7d:43:58:03:2a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b97406244b4107262687db1b9642c3d9e8f843
Validity
Not Before: Feb 21 19:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5179e72a60a67c97403cf4cd5873936d7256334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:a2:09:5b:4d:a0:43:7f:a2:0e:6f:1c:b5:
30:0c:4b:34:3e:39:68:c4:6e:3e:d1:3c:47:bc:c1:
5b:da:29:1e:5e:f5:32:88:1a:ca:e2:ef:dc:7f:2c:
7c:2d:5e:10:b9:a8:c7:02:0a:8f:4b:00:e8:94:6d:
01:e5:c6:a2:2a:3e:1a:c6:84:f5:84:4f:56:c9:95:
56:82:a9:6a:a3:ef:10:21:20:5d:80:3a:ba:aa:f3:
17:39:24:58:94:15:d3:ef:32:c3:65:e8:f1:fd:11:
ff:34:93:63:f4:8b:1e:ce:62:ed:bb:ab:4c:7c:9c:
e2:65:e6:99:5f:9a:89:d0:5f:c2:cd:af:0f:30:eb:
8e:0f:dc:49:b9:ee:01:a7:76:36:6a:88:de:05:9e:
d1:64:42:6e:3d:d4:c2:66:1d:ae:a2:cd:9a:51:82:
61:4b:42:fb:9a:22:31:bb:d7:a0:58:41:bc:72:94:
fd:f2:da:e8:dc:2d:f6:e8:56:3f:96:72:61:84:ff:
f2:27:9c:8c:b2:36:ca:90:e6:37:f7:bb:01:f7:77:
84:fe:cc:77:b1:0f:cd:0e:c4:8d:2f:43:aa:25:57:
e5:a6:cb:82:b7:2f:a8:24:bd:29:35:e7:01:e2:fe:
f0:f7:7f:0d:8c:35:be:dd:63:6a:49:5b:21:e5:55:
34:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:17:9E:72:A6:0A:67:C9:74:03:CF:4C:D5:87:39:36:D7:25:63:34
X509v3 Authority Key Identifier:
keyid:40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/9ReecqYKZ8l0A89M1Yc5NtclYzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4600::/29
Signature Algorithm: sha256WithRSAEncryption
14:c0:b3:c3:27:a3:98:1d:41:c1:e7:e1:3d:7d:f1:4d:f1:ba:
f7:28:00:46:ba:fb:62:d1:56:05:5e:50:2d:5e:97:d4:fe:65:
53:79:e7:a9:99:61:70:07:f6:73:ff:9b:91:0c:48:2f:c5:e4:
1d:1d:69:16:5a:02:6d:09:b0:ce:d6:7f:e0:ec:c4:f7:17:52:
88:77:17:69:06:fd:7d:91:78:8f:bf:19:71:a4:5a:72:a0:70:
6b:be:ed:59:97:52:be:1b:97:e8:fd:bf:1c:fc:9c:c3:fe:37:
5d:27:a9:84:d3:a9:f2:45:83:25:cf:c2:e4:d9:ab:24:2b:5b:
4f:db:d2:3c:40:dd:7b:1a:93:0e:65:94:a8:f3:3a:95:bb:48:
f3:f7:6e:8c:2e:c4:b2:89:19:8c:62:59:6e:03:47:a1:ec:fb:
18:41:aa:05:50:b8:b4:af:f9:4d:42:39:c6:71:05:85:0f:24:
6e:ca:d0:33:30:89:31:c9:90:bb:09:77:3f:72:a1:f5:4a:54:
e5:35:4f:e1:2f:fa:2c:e7:9f:1a:56:5b:b3:31:17:96:d7:15:
5e:96:99:9b:3e:62:69:af:76:1f:83:0d:80:8e:75:a6:e0:ec:
c7:36:a0:17:d7:6b:9f:5b:60:93:67:99:3f:77:f4:e7:77:be:
3b:34:33:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:53:53 2026 by rpki-client