Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/x01F14STJZ1Puy2kQB223Es2edg.roa
File: x01F14STJZ1Puy2kQB223Es2edg.roa (raw, json)
Hash identifier: jhpr7zWdF2h6v1hL72LPtds9yAJf4NfjncODdCfl3lE=
Subject key identifier: C7:4D:45:D7:84:93:25:9D:4F:BB:2D:A4:40:1D:B6:DC:4B:36:79:D8
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019DD8B84904A9F83124DEE88EC87B681306
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/x01F14STJZ1Puy2kQB223Es2edg.roa
Signing time: Wed 29 Apr 2026 10:10:49 +0000
ROA not before: Wed 29 Apr 2026 10:10:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213618
IP address blocks: 2a10:3c00::/29 maxlen: 29
2a11:4fc0::/29 maxlen: 29
2a11:9a80::/29 maxlen: 29
2a11:f600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:b8:49:04:a9:f8:31:24:de:e8:8e:c8:7b:68:13:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Apr 29 10:10:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c74d45d78493259d4fbb2da4401db6dc4b3679d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:f7:d7:b5:ae:b5:d2:90:d4:30:91:95:a4:
be:9f:1b:fc:74:0c:52:82:d1:be:9d:44:ef:2b:32:
7f:b8:82:46:2c:63:85:44:4c:c4:1b:b5:c3:13:f0:
23:1f:9e:44:8b:69:d0:7b:e2:20:b3:eb:5b:37:68:
12:de:bd:74:da:b2:ad:b2:09:99:68:47:51:65:49:
30:2d:dd:ad:2f:15:5e:b3:b6:22:23:39:77:e2:4d:
4f:d5:37:66:68:c6:1c:8a:99:be:47:45:cd:9c:06:
5a:f9:44:f6:08:fb:45:73:23:06:73:f0:d7:15:ce:
24:42:f8:8f:44:20:55:68:fc:ef:95:4b:6a:25:81:
0a:10:a2:68:7c:74:64:72:ea:81:ee:09:44:1c:d2:
7d:44:bc:a3:c3:1d:ef:9f:2b:64:5d:f1:3f:f6:95:
c0:43:f1:d0:55:11:e9:ee:0a:3f:74:2b:41:ad:e3:
0e:fa:92:06:d2:b6:ad:0d:0b:1f:0c:d1:a6:f9:5c:
35:65:f5:49:00:54:76:dc:ec:67:9b:0f:fc:c1:26:
be:d0:a1:e2:8f:b0:2f:e9:ae:be:c8:33:5d:81:f0:
e3:65:d8:09:56:59:dd:00:b0:09:76:18:24:b3:e6:
e6:ca:2f:ea:09:22:f5:fe:3c:eb:06:d0:36:4c:0d:
41:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4D:45:D7:84:93:25:9D:4F:BB:2D:A4:40:1D:B6:DC:4B:36:79:D8
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/x01F14STJZ1Puy2kQB223Es2edg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3c00::/29
2a11:4fc0::/29
2a11:9a80::/29
2a11:f600::/29
Signature Algorithm: sha256WithRSAEncryption
82:be:f5:a0:e0:ca:57:1c:51:1a:00:60:55:cb:87:d0:25:cd:
85:66:fa:fb:e9:9e:d0:00:89:24:6e:02:2c:49:5e:e6:d6:37:
53:ec:b7:46:c6:dc:52:40:0b:d5:41:68:e1:4c:b7:c6:5a:3c:
00:d5:be:7c:9d:80:0f:20:48:25:13:ac:c5:a9:3a:b9:36:66:
3d:c9:ee:2e:8a:06:d4:5a:14:de:74:18:59:2a:5b:9e:56:c0:
35:7e:ef:82:b0:f8:98:aa:09:fd:5e:9a:42:9e:55:73:46:3f:
46:be:e0:dc:61:28:5d:ad:05:ba:f8:31:8c:d3:10:b7:36:fa:
ee:ad:95:b0:bb:48:a6:19:bb:5d:e7:91:9f:94:5f:6f:c4:9d:
ef:47:56:69:c9:99:e3:05:38:4e:9e:21:70:ad:15:d2:de:55:
75:e3:3c:fe:f3:dd:4e:9e:c6:eb:6c:c3:aa:53:d7:40:dd:ff:
3c:33:fe:e0:73:fb:bd:1e:c4:72:32:cd:a5:f5:04:fe:3d:3a:
09:20:75:33:23:d3:25:46:44:87:ee:e6:54:60:19:e0:fd:eb:
ea:d3:dd:ae:3e:52:5e:cf:35:f2:39:ce:63:83:17:ac:41:50:
42:e8:48:6d:44:c0:c0:5c:98:21:d0:10:d3:f2:75:20:7c:fd:
95:ac:74:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 01:14:18 2026 by rpki-client