Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/xCmXpxNYcxcSq1dSa5AUup5M5kU.roa
File: xCmXpxNYcxcSq1dSa5AUup5M5kU.roa (raw, json)
Hash identifier: ak6bVGGXz8wN2UjnV+V+afFrge47N/CECMHvitmG11I=
Subject key identifier: C4:29:97:A7:13:58:73:17:12:AB:57:52:6B:90:14:BA:9E:4C:E6:45
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019F606117D712D688753D8F0AAA24E81DF2
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/xCmXpxNYcxcSq1dSa5AUup5M5kU.roa
Signing time: Tue 14 Jul 2026 11:26:43 +0000
ROA not before: Tue 14 Jul 2026 11:26:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7289
IP address blocks: 2a11:240::/29 maxlen: 29
2a11:4fc0::/29 maxlen: 29
2a11:a400::/29 maxlen: 29
2a11:a700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:61:17:d7:12:d6:88:75:3d:8f:0a:aa:24:e8:1d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jul 14 11:26:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c42997a71358731712ab57526b9014ba9e4ce645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3d:12:a8:e3:16:24:2e:c9:94:69:67:26:e8:
1f:7f:51:45:32:b6:db:d2:81:bd:a7:90:64:23:c3:
f4:60:e3:70:28:fd:87:f6:48:40:ba:a3:e1:0c:28:
1e:53:b2:47:c5:d4:d3:68:ca:d7:94:42:43:90:e3:
74:3a:02:7e:7b:ea:db:d8:49:69:c2:f0:a8:18:84:
7f:de:3f:b7:fc:59:4f:ac:b7:25:44:41:a4:19:16:
94:0b:63:14:41:7b:e1:0c:8a:9a:67:56:00:1a:83:
da:b0:c8:04:4f:4d:70:78:95:ec:eb:c8:c9:fb:6f:
11:3e:48:8a:2d:86:4b:b9:7d:16:fe:55:d2:fb:b2:
3f:59:e6:96:40:06:d5:81:58:44:ff:41:9b:9d:a3:
1d:cc:b8:2e:f0:24:66:80:05:55:94:a3:32:ab:a8:
e9:99:cc:97:96:f9:7e:a6:e7:c9:05:0d:04:cc:af:
ac:f8:22:dc:c4:5d:f3:a3:4f:0d:b7:35:f7:87:95:
7c:4b:48:ad:3c:02:eb:32:99:ed:18:0b:5a:4a:f9:
25:a6:92:21:53:fd:d5:ea:92:13:b5:6b:68:3a:e8:
6d:71:7e:02:28:0f:b1:34:3e:bd:39:06:77:ac:ff:
c4:c9:c3:aa:7a:23:2a:cc:03:ec:62:4c:7d:84:ae:
d4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:29:97:A7:13:58:73:17:12:AB:57:52:6B:90:14:BA:9E:4C:E6:45
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/xCmXpxNYcxcSq1dSa5AUup5M5kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:240::/29
2a11:4fc0::/29
2a11:a400::/29
2a11:a700::/29
Signature Algorithm: sha256WithRSAEncryption
89:cc:67:d4:0a:c1:89:a8:cf:f5:56:44:2f:7d:93:3a:3b:57:
fd:b1:fe:2a:9a:cf:d2:38:22:fa:84:e7:ae:ba:75:c3:b6:28:
7d:fa:41:b3:ad:b8:fc:95:ee:3f:aa:31:87:24:8f:f6:98:e3:
ea:69:09:e6:54:e6:ef:46:2d:3e:8d:05:15:20:13:b8:32:18:
c4:9f:19:ed:cb:0d:60:f7:a7:b5:b0:fa:92:81:74:ae:a7:79:
2b:50:f8:14:d5:da:b3:ad:f1:4e:a0:dd:44:8a:9c:12:6b:27:
ca:05:30:d8:2e:e0:df:0f:46:1f:65:a5:90:30:68:5b:d8:f8:
a6:0f:ca:1e:2b:ca:60:d1:29:21:3d:a5:b1:35:38:eb:fe:e6:
e2:fa:af:5a:76:3a:98:c9:b3:7c:2b:fc:19:eb:b1:03:87:ee:
f9:4e:22:6d:82:9d:b5:1b:3e:22:f2:ba:37:16:16:29:94:7f:
8b:54:f7:bd:e5:9b:3c:ea:f3:fc:e2:71:78:d6:2c:ea:02:d5:
37:0f:02:34:f3:e5:10:f2:13:aa:e8:0b:72:3e:01:0c:2c:9c:
c1:4f:ca:7b:fb:73:e9:22:ad:81:7a:fc:0d:70:6d:4f:b3:1c:
c5:e4:17:28:d6:7d:8e:88:b9:3f:b2:06:86:4d:d8:fc:bd:4f:
58:09:01:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:51:41 2026 by rpki-client