Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/0ucpkHOLz07dxe4q9pinjxTnYUc.roa
File: 0ucpkHOLz07dxe4q9pinjxTnYUc.roa (raw, json)
Hash identifier: hJKd81+/d29GDaL/K2oJV9FZ00QRNy9FU0SHuhHKaE8=
Subject key identifier: D2:E7:29:90:73:8B:CF:4E:DD:C5:EE:2A:F6:98:A7:8F:14:E7:61:47
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019ECFA99DA7B9BADCA4BA386E84F12CC546
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/0ucpkHOLz07dxe4q9pinjxTnYUc.roa
Signing time: Tue 16 Jun 2026 09:01:00 +0000
ROA not before: Tue 16 Jun 2026 09:01:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 2a11:4fc0::/29 maxlen: 29
2a11:f600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 18:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:a9:9d:a7:b9:ba:dc:a4:ba:38:6e:84:f1:2c:c5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jun 16 09:01:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2e72990738bcf4eddc5ee2af698a78f14e76147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b4:cb:e9:12:c5:a4:b4:f7:6b:04:d9:92:c7:
26:3c:c1:01:5b:10:f1:59:3b:9e:ca:3b:7f:c1:a9:
f8:42:2a:1a:76:a1:97:c4:30:22:cd:fd:24:d4:6f:
a1:c2:c0:a9:86:e1:1b:38:a6:3f:28:51:75:eb:f4:
59:9f:36:0f:cd:5b:0b:4e:c7:bc:a6:ac:e2:c0:d6:
71:1a:84:7b:71:6e:7a:af:62:bb:eb:b9:11:44:64:
90:75:a1:fc:bc:f9:e8:d3:22:72:34:2d:b8:70:a5:
45:79:10:da:d6:b0:a7:5f:8d:79:78:6f:77:c5:23:
a0:05:74:8a:cb:a6:1f:7f:62:4f:67:81:6e:d0:e2:
df:c0:6e:77:1b:c6:49:22:4f:15:2a:39:df:d7:1f:
bd:40:0b:f2:17:9d:98:ee:9d:64:e7:97:e1:e4:1d:
6b:bd:b4:f2:00:d4:5d:77:40:33:23:da:4a:31:f2:
ab:75:6c:a8:21:c7:06:6d:80:fb:61:bc:c5:de:3a:
0f:e2:fc:66:86:fa:4a:4d:42:f4:7d:bf:8d:76:26:
c1:98:ef:0e:c7:9a:bb:98:56:e7:bb:1f:df:b7:04:
43:fd:4c:59:d1:2a:ce:53:b4:b2:9f:6a:eb:9a:db:
33:2f:8b:0a:26:de:10:05:9d:90:45:db:5e:b9:b8:
68:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E7:29:90:73:8B:CF:4E:DD:C5:EE:2A:F6:98:A7:8F:14:E7:61:47
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/0ucpkHOLz07dxe4q9pinjxTnYUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4fc0::/29
2a11:f600::/29
Signature Algorithm: sha256WithRSAEncryption
ae:b6:b8:e6:df:93:4d:5c:5d:c7:51:29:01:61:7e:08:2d:75:
cc:8b:6a:29:f5:a6:68:9c:e9:b9:53:35:71:9e:8a:b7:f8:e2:
69:91:3b:72:82:7d:99:78:3e:8b:a7:50:41:32:10:53:22:e5:
5c:6c:88:3a:51:3b:68:88:58:fd:0e:cb:54:ea:6b:4f:9d:05:
43:4a:b4:cf:09:f4:c6:42:d5:14:80:af:9a:6c:51:b6:08:82:
82:99:27:08:25:c1:8b:71:ef:fe:9d:56:43:64:2a:95:07:fc:
2c:39:a7:d7:a8:3a:fe:e0:e5:18:ea:9b:f4:b3:5c:1d:e2:27:
72:af:75:6f:3e:fb:4d:35:ab:02:b4:2c:98:99:12:10:8e:ab:
85:35:e0:78:8a:0b:ed:75:60:e5:45:18:80:23:75:3f:94:98:
45:ea:37:61:33:3f:09:50:89:e2:97:77:6a:69:2f:17:cc:21:
ed:c6:ec:a0:cf:a9:00:06:7c:8c:f4:23:7d:52:f9:17:8f:fa:
69:df:c9:d9:ee:5e:15:57:99:ef:91:81:92:4d:af:55:e3:db:
d2:a6:0f:40:f3:ef:ad:d6:a5:1f:35:f3:85:f7:02:e7:3d:c5:
39:86:88:20:10:c6:26:d1:b8:94:d2:b6:cf:e4:8b:54:7c:8e:
ad:6d:8f:ab
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ7PqZ2nubrcpLo4boTxLMVGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2
OTQ1NDEwHhcNMjYwNjE2MDkwMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmU3Mjk5MDczOGJjZjRlZGRjNWVlMmFmNjk4YTc4ZjE0ZTc2MTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rTL6RLFpLT3awTZkscmPMEBWxDx
WTueyjt/wan4QioadqGXxDAizf0k1G+hwsCphuEbOKY/KFF16/RZnzYPzVsLTse8
pqziwNZxGoR7cW56r2K767kRRGSQdaH8vPno0yJyNC24cKVFeRDa1rCnX415eG93
xSOgBXSKy6Yff2JPZ4Fu0OLfwG53G8ZJIk8VKjnf1x+9QAvyF52Y7p1k55fh5B1r
vbTyANRdd0AzI9pKMfKrdWyoIccGbYD7YbzF3joP4vxmhvpKTUL0fb+NdibBmO8O
x5q7mFbnux/ftwRD/UxZ0SrOU7Syn2rrmtszL4sKJt4QBZ2QRdteubho2wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNLnKZBzi89O3cXuKvaYp48U52FHMB8GA1UdIwQY
MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt
MTkyY2JkMDhkYjUxLzEvMHVjcGtIT0x6MDdkeGU0cTlwaW5qeFRuWVVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx
LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKhFPwAMF
AyoR9gAwDQYJKoZIhvcNAQELBQADggEBAK62uObfk01cXcdRKQFhfggtdcyLain1
pmic6blTNXGeirf44mmRO3KCfZl4PounUEEyEFMi5VxsiDpRO2iIWP0Oy1Tqa0+d
BUNKtM8J9MZC1RSAr5psUbYIgoKZJwglwYtx7/6dVkNkKpUH/Cw5p9eoOv7g5Rjq
m/SzXB3iJ3KvdW8++001qwK0LJiZEhCOq4U14HiKC+11YOVFGIAjdT+UmEXqN2Ez
PwlQieKXd2ppLxfMIe3G7KDPqQAGfIz0I31S+ReP+mnfydnuXhVXme+RgZJNr1Xj
29KmD0Dz763WpR8184X3Auc9xTmGiCAQxibRuJTSts/ki1R8jq1tj6s=
-----END CERTIFICATE-----
Generated at Sat Jun 20 04:20:22 2026 by rpki-client