Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/0d813e-9e9f-4994-97ef-58417f4a9218/1/RXWEge3XsQyNhMewQlQ1T6x8YE4.roa
File: RXWEge3XsQyNhMewQlQ1T6x8YE4.roa (raw, json)
Hash identifier: YUNhuXxRkP6m6K8c61s7TxOvYxgFMCYZN3YevKq02Es=
Subject key identifier: 45:75:84:81:ED:D7:B1:0C:8D:84:C7:B0:42:54:35:4F:AC:7C:60:4E
Certificate issuer: /CN=9dd4eb79f482fe86c754be88436d97bf6a8c80d7
Certificate serial: 01A141D19F29608F9E5959972E797AB1412E
Authority key identifier: 9D:D4:EB:79:F4:82:FE:86:C7:54:BE:88:43:6D:97:BF:6A:8C:80:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndTrefSC_obHVL6IQ22Xv2qMgNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/0d813e-9e9f-4994-97ef-58417f4a9218/1/RXWEge3XsQyNhMewQlQ1T6x8YE4.roa
Signing time: Thu 15 Oct 2026 23:06:59 +0000
ROA not before: Thu 15 Oct 2026 23:06:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218916
IP address blocks: 2001:678:12f8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/0d813e-9e9f-4994-97ef-58417f4a9218/1/ndTrefSC_obHVL6IQ22Xv2qMgNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/0d813e-9e9f-4994-97ef-58417f4a9218/1/ndTrefSC_obHVL6IQ22Xv2qMgNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndTrefSC_obHVL6IQ22Xv2qMgNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:d1:9f:29:60:8f:9e:59:59:97:2e:79:7a:b1:41:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd4eb79f482fe86c754be88436d97bf6a8c80d7
Validity
Not Before: Oct 15 23:06:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45758481edd7b10c8d84c7b04254354fac7c604e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:cd:4b:b4:23:85:a2:2a:4c:5b:98:ab:b4:
ca:3b:80:5e:9d:77:cc:4f:d7:5f:03:15:25:b2:fc:
59:b7:bc:4f:1a:c4:99:42:25:55:72:e7:f9:c9:74:
6a:50:3a:5d:6d:98:78:d3:00:72:2a:b5:db:ca:58:
d3:f9:f2:62:cf:d5:ad:d5:7a:2c:87:1d:ee:00:a9:
73:2f:7e:a4:be:89:37:cb:f7:ec:a2:31:27:98:ff:
4e:49:f5:76:53:e3:3b:0f:fb:ed:38:40:c0:73:45:
56:48:3d:fe:bf:d9:3f:c9:09:c0:fb:fc:d3:95:62:
1b:0d:16:54:ba:ea:80:23:41:e5:62:44:fd:24:4e:
38:22:63:3e:88:32:1f:7c:8b:05:8e:0d:a2:aa:43:
d3:46:b9:6a:66:0c:23:26:65:e5:cd:d4:65:e2:9b:
01:36:a7:e4:30:2b:c0:fb:61:dc:83:6d:f9:8a:30:
e4:a0:76:1a:44:e0:08:49:b2:a5:8b:02:35:8b:4c:
77:df:34:7c:18:ff:c8:5b:19:d7:b3:5d:6c:71:72:
ea:c6:99:44:ee:78:f8:d2:83:ff:dd:73:50:b2:81:
74:df:01:1a:e0:70:a2:4a:ce:62:ef:e6:63:85:d3:
ff:41:3b:85:ad:08:5f:e2:87:4b:b2:62:e5:e1:98:
75:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:75:84:81:ED:D7:B1:0C:8D:84:C7:B0:42:54:35:4F:AC:7C:60:4E
X509v3 Authority Key Identifier:
keyid:9D:D4:EB:79:F4:82:FE:86:C7:54:BE:88:43:6D:97:BF:6A:8C:80:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndTrefSC_obHVL6IQ22Xv2qMgNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0d813e-9e9f-4994-97ef-58417f4a9218/1/RXWEge3XsQyNhMewQlQ1T6x8YE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0d813e-9e9f-4994-97ef-58417f4a9218/1/ndTrefSC_obHVL6IQ22Xv2qMgNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:12f8::/48
Signature Algorithm: sha256WithRSAEncryption
29:71:9c:05:6e:18:e3:9a:d0:3a:ee:08:de:a9:52:49:a3:1e:
c4:2e:fe:e4:81:1a:a2:4d:c5:82:ac:e4:48:17:6e:2c:c4:e6:
8c:83:02:5b:65:fc:a2:c2:d3:55:f1:f0:fd:85:d8:10:0f:05:
43:6f:55:67:20:28:52:c0:c2:ee:85:a7:fb:c4:24:cf:ba:55:
09:1c:41:fd:04:bd:e0:df:c6:1b:e2:a9:1f:52:c2:58:87:21:
d6:d2:38:79:db:24:89:77:e5:ab:36:93:53:6c:ba:bb:0b:2f:
9d:85:a0:09:68:b1:f6:a4:2e:6e:f3:a7:3b:a6:76:9b:44:a6:
3d:86:fd:f6:4d:ad:1c:76:61:19:0b:ac:e3:0b:2d:aa:86:91:
ea:39:37:88:73:43:04:0f:09:cd:4c:14:bb:d3:d2:13:67:81:
df:c6:21:fc:5f:0a:c9:bf:dc:c1:c7:b6:90:fc:f3:f6:59:a0:
ea:15:3a:cb:c0:49:34:16:8e:ac:d7:b6:fe:db:e6:a1:d8:e4:
16:3f:65:79:43:54:e1:74:e0:7e:3b:d0:9c:2e:c0:9f:57:53:
e3:6e:68:1b:8c:a8:fb:fe:dd:be:c0:45:3f:17:13:24:bb:3c:
37:f4:13:17:be:f5:a6:4b:de:99:dd:7c:90:de:47:d5:80:1b:
be:b1:e4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:30:01 2026 by rpki-client