Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/9Jn0hC1d4_qB3BpCvZ7mNnqc9Gg.roa
File: 9Jn0hC1d4_qB3BpCvZ7mNnqc9Gg.roa (raw, json)
Hash identifier: zUW+lZMwkJLWLUiPUzgAXIHWemjMCwN1XV1ZteJyZJo=
Subject key identifier: F4:99:F4:84:2D:5D:E3:FA:81:DC:1A:42:BD:9E:E6:36:7A:9C:F4:68
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 019DBE2DD0EE320D14D21F016921E2DA9CB5
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/9Jn0hC1d4_qB3BpCvZ7mNnqc9Gg.roa
Signing time: Fri 24 Apr 2026 06:29:26 +0000
ROA not before: Fri 24 Apr 2026 06:29:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198405
IP address blocks: 2a14:ae00:104::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 08:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:be:2d:d0:ee:32:0d:14:d2:1f:01:69:21:e2:da:9c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Apr 24 06:29:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f499f4842d5de3fa81dc1a42bd9ee6367a9cf468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ae:da:71:3e:49:01:4a:90:24:17:7a:bf:23:
1c:0a:5a:fb:ea:0f:bd:49:cf:5b:c9:0f:a8:2a:0b:
1d:09:9f:fd:cf:dd:b1:c9:a0:49:f2:a9:da:63:34:
5e:1c:13:85:a6:21:90:27:16:76:fe:99:cc:3b:6a:
55:20:01:70:15:58:a8:9f:4a:b5:5c:77:a6:a8:83:
b6:09:de:e9:07:44:ae:52:23:7e:69:42:99:f2:dd:
a9:3c:49:e2:86:b6:4c:f8:ce:04:2c:d2:3a:b3:bf:
2a:34:83:5b:64:80:b7:b3:5a:7e:db:89:1b:5a:99:
98:f2:2a:45:41:29:8d:f4:fc:73:76:83:59:c4:54:
c2:79:d5:01:ae:72:86:c9:24:be:95:96:ae:e0:88:
27:ea:9b:5f:f1:e9:db:e1:a9:69:5c:d1:36:5a:23:
7c:b7:6a:4c:0c:07:f0:4e:1b:fd:25:bc:fe:25:0e:
81:dc:27:25:71:08:84:3d:48:ac:1c:ba:a2:e3:f4:
5e:04:56:df:ee:71:23:6e:a1:67:47:01:13:78:b0:
69:cd:5f:d6:a2:2f:2f:6c:1f:e5:ce:65:f8:0a:2d:
e2:5b:41:d2:8f:2e:ba:cc:d0:7c:47:aa:8c:b1:99:
bf:15:90:b8:04:f8:ed:4c:6f:49:78:f1:80:95:ca:
32:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:99:F4:84:2D:5D:E3:FA:81:DC:1A:42:BD:9E:E6:36:7A:9C:F4:68
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/9Jn0hC1d4_qB3BpCvZ7mNnqc9Gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:104::/48
Signature Algorithm: sha256WithRSAEncryption
84:b6:06:50:00:c3:ce:61:a5:92:9e:f2:21:00:ce:a7:a5:3b:
65:4d:a3:8c:f2:b1:23:24:55:0a:d1:45:85:99:0a:67:06:84:
6f:2a:6c:e3:8a:c8:06:b3:69:00:8c:3f:fd:6d:f4:3f:e4:88:
17:4c:ca:0b:ad:96:e5:ff:e8:be:2a:a6:6c:89:0d:4a:c6:63:
34:f1:c1:c7:8c:26:e4:ae:d1:e5:4f:30:16:ee:9a:7d:91:85:
a7:65:5d:c7:07:66:c0:85:d8:f1:4a:16:68:1b:fd:88:bb:28:
bb:38:1b:0c:92:bf:40:7e:f1:12:aa:c0:b9:53:d4:67:0c:50:
13:0e:18:6f:75:75:57:0b:9e:07:7a:b9:ec:9d:7a:d7:56:e8:
24:3e:d6:27:27:2f:a8:0c:53:7b:91:d5:f0:ac:a2:da:d4:7b:
77:69:a2:25:06:5b:47:45:d7:06:a5:c0:4d:1a:32:49:22:34:
0a:b1:b8:91:fd:a7:08:12:b8:8b:a1:0c:9c:cd:12:79:92:07:
d4:c7:b2:b5:22:85:94:2f:09:37:e3:75:44:be:28:0d:49:e6:
65:90:3c:ee:53:12:a0:1b:31:68:7a:82:2e:0a:30:a4:a6:ae:
6a:35:87:15:0f:3e:01:cb:6a:99:e5:fc:9d:c3:0d:e4:42:6b:
52:25:4f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:06:20 2026 by rpki-client