Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/n9r5xzc2I0sGVTcycKsfkDx33FE.roa
File: n9r5xzc2I0sGVTcycKsfkDx33FE.roa (raw, json)
Hash identifier: BIclzxRCUiNI0OBrySTY2i/2up09tLVcApZ40825IDk=
Subject key identifier: 9F:DA:F9:C7:37:36:23:4B:06:55:37:32:70:AB:1F:90:3C:77:DC:51
Certificate issuer: /CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Certificate serial: 01A12392A5B19C6E3213D9799FDDDAF7C838
Authority key identifier: E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/n9r5xzc2I0sGVTcycKsfkDx33FE.roa
Signing time: Sat 10 Oct 2026 02:09:35 +0000
ROA not before: Sat 10 Oct 2026 02:09:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202982
IP address blocks: 2a0a:2800::/47 maxlen: 47
2a0a:2800:1::/48 maxlen: 48
2a0a:2800:254::/47 maxlen: 47
2a0a:2800:255::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:92:a5:b1:9c:6e:32:13:d9:79:9f:dd:da:f7:c8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Validity
Not Before: Oct 10 02:09:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fdaf9c73736234b0655373270ab1f903c77dc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:71:17:4f:40:8c:15:60:ae:07:b5:3f:b3:
9e:a8:47:54:f9:db:cb:36:1b:18:99:d0:45:0a:2f:
65:78:05:45:ec:8a:10:95:58:af:5d:96:89:d9:90:
3a:ab:f6:d1:80:a2:4e:3a:4d:ae:bd:aa:38:f1:75:
4b:8f:62:88:88:94:59:8e:01:5d:91:96:55:86:71:
92:8c:20:6b:5a:16:ce:b9:a9:91:b2:c6:b2:7a:91:
36:8a:4b:60:7f:ab:8a:15:e8:43:e6:6f:79:8d:0a:
2f:a0:2c:1b:36:09:c5:69:db:f0:70:88:b4:3a:6b:
1f:87:d4:8c:89:f3:7f:d7:c3:04:4c:47:c4:b8:1a:
c9:3b:05:6b:a9:c2:1d:30:5f:32:c1:ef:77:66:b0:
39:46:2d:6f:66:d4:fc:b2:9d:ac:b9:2a:7f:35:f7:
aa:70:70:90:9f:f2:2f:0b:0e:2a:48:9a:33:e1:03:
b4:d7:b0:c5:93:c8:b8:cc:28:08:8d:2e:55:a1:8e:
5e:e6:83:25:9b:5d:32:98:a6:fb:be:4a:4b:fa:74:
56:50:23:a0:89:da:1a:3a:61:24:cf:ab:62:f2:a9:
30:12:ba:ca:db:ae:b4:ab:e5:33:96:22:5e:c2:16:
18:bf:b2:04:fa:6d:80:e4:bd:58:14:b7:c6:1e:92:
20:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DA:F9:C7:37:36:23:4B:06:55:37:32:70:AB:1F:90:3C:77:DC:51
X509v3 Authority Key Identifier:
keyid:E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/n9r5xzc2I0sGVTcycKsfkDx33FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2800::/47
2a0a:2800:254::/47
Signature Algorithm: sha256WithRSAEncryption
64:7c:8f:95:44:e6:a4:65:a9:4e:52:18:5f:de:ec:b3:89:d8:
2c:e9:ce:3d:5b:0a:9d:01:7c:c1:26:ac:79:0c:f6:b6:f6:60:
a3:c5:7f:58:ab:5e:27:18:88:99:2c:db:4d:a6:87:7f:1c:1a:
6a:00:ea:1a:c1:2a:19:91:7e:bc:67:f0:f0:3a:eb:17:86:bb:
93:20:40:3d:b7:38:39:8a:d4:2e:e4:98:36:91:f3:e5:1b:66:
10:f6:ee:c4:fb:42:2c:99:86:67:a0:73:9f:5b:71:73:f9:46:
5b:75:31:17:5e:3c:9b:ad:fc:96:54:a7:8e:45:26:bb:6c:be:
5c:7b:4a:a5:53:83:7b:f0:e2:20:0d:54:1f:fd:ea:33:b0:cf:
9e:52:2c:f1:3f:66:8a:99:a4:78:34:0f:e0:3b:c2:c8:05:dc:
e1:9e:d0:24:1a:88:ad:d3:cc:d7:5c:5c:e1:13:90:6c:37:90:
4c:6d:e9:3f:50:5e:5e:d8:71:17:b7:26:8b:0e:78:82:c1:96:
57:e1:9b:4e:ce:07:33:70:7a:c0:bb:55:df:97:17:83:2b:c3:
3b:82:d0:ea:93:28:60:4c:a1:97:91:91:52:6e:4e:67:64:f3:
e0:35:7b:43:04:68:5f:46:14:48:f7:d1:9b:7e:8e:5b:95:19:
c4:ef:67:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:27:35 2026 by rpki-client