Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/0AC6di0pExJ4eOMrn7wZP0TlIAY.roa
File: 0AC6di0pExJ4eOMrn7wZP0TlIAY.roa (raw, json)
Hash identifier: ahdIO/EtB6sYotBWuYGLIf0AyiN64rJLf/9qeZ+U218=
Subject key identifier: D0:00:BA:76:2D:29:13:12:78:78:E3:2B:9F:BC:19:3F:44:E5:20:06
Certificate issuer: /CN=093e8fed87a5a206c3ddb0b0d9bf1de088676174
Certificate serial: 019F2368A30F690307C5781CBDA4FF4D99CB
Authority key identifier: 09:3E:8F:ED:87:A5:A2:06:C3:DD:B0:B0:D9:BF:1D:E0:88:67:61:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CT6P7YelogbD3bCw2b8d4IhnYXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/0AC6di0pExJ4eOMrn7wZP0TlIAY.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213767
IP address blocks: 2001:67c:fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/CT6P7YelogbD3bCw2b8d4IhnYXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/CT6P7YelogbD3bCw2b8d4IhnYXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CT6P7YelogbD3bCw2b8d4IhnYXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a3:0f:69:03:07:c5:78:1c:bd:a4:ff:4d:99:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093e8fed87a5a206c3ddb0b0d9bf1de088676174
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d000ba762d2913127878e32b9fbc193f44e52006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d9:9f:e0:53:57:43:40:2a:f9:d2:31:b1:0b:
97:b1:3f:76:3e:f5:9a:51:a6:ca:59:36:9d:97:44:
4a:fe:30:bb:18:53:e3:d7:51:80:e4:66:87:75:d2:
7a:32:0b:d0:ed:42:4f:96:c7:e1:c4:b5:37:f2:37:
e8:55:7b:b7:ad:b5:c6:a6:06:12:2b:0d:ce:2d:28:
ac:51:1e:e4:90:a3:0d:cb:38:2d:50:7f:81:cd:53:
a1:9f:1d:15:cb:8f:98:c3:f0:04:2b:18:fe:4d:02:
29:16:81:eb:23:8f:1c:d3:d7:77:92:3e:a4:b2:e1:
8c:e1:d2:5a:de:ab:08:8a:f3:f2:5d:72:d9:fe:87:
9a:18:60:8e:7d:1d:08:8c:e3:62:68:1c:f1:11:d9:
62:62:20:7c:7c:9e:88:09:77:47:e3:91:97:95:4c:
fc:e2:03:50:e5:4f:eb:aa:2f:ad:a3:3b:d9:cc:61:
e7:1c:bd:51:24:45:1d:96:00:83:21:9b:a5:d5:29:
e0:5c:a1:20:ca:ae:ee:3e:d2:87:11:ed:74:ba:79:
34:03:6e:7a:f8:08:c3:70:b9:c8:77:db:8a:44:0a:
4d:8c:04:fa:a6:b8:e5:b3:93:4b:9e:18:cf:fc:42:
b5:5e:e3:e4:b1:f3:3d:f7:49:3b:b8:5e:8f:6d:d1:
69:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:00:BA:76:2D:29:13:12:78:78:E3:2B:9F:BC:19:3F:44:E5:20:06
X509v3 Authority Key Identifier:
keyid:09:3E:8F:ED:87:A5:A2:06:C3:DD:B0:B0:D9:BF:1D:E0:88:67:61:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CT6P7YelogbD3bCw2b8d4IhnYXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/0AC6di0pExJ4eOMrn7wZP0TlIAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/CT6P7YelogbD3bCw2b8d4IhnYXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:fc0::/48
Signature Algorithm: sha256WithRSAEncryption
78:bc:05:19:d0:01:9e:96:f2:f8:7e:6c:d3:8a:f4:70:f1:28:
a7:ed:72:0e:49:76:ea:4c:d6:e9:c1:a5:f5:9b:b5:53:0d:64:
18:07:e7:35:48:b9:a6:eb:a7:8b:b5:0a:2c:44:80:3f:97:da:
f7:47:0c:14:e5:9d:91:7a:51:5b:7a:66:39:e3:a8:5b:76:21:
d4:a2:fd:4f:01:78:73:c6:9a:3f:28:a2:ae:10:b7:74:c2:30:
7e:bb:d4:53:91:c9:a5:f9:62:63:7f:eb:57:54:0e:54:5d:ec:
26:e0:71:78:42:6d:5f:ad:47:e9:36:71:89:0d:b1:b8:ae:cd:
f6:1a:92:9e:5f:e7:cd:60:8e:20:df:4f:96:da:5e:99:0a:77:
43:21:5b:44:9f:5b:6a:0a:15:82:19:50:ae:ff:2b:a7:74:a3:
b4:5d:e0:ac:44:f7:96:e1:e2:ae:62:9a:bb:80:2d:b3:af:c9:
aa:28:bd:8b:7d:c3:4f:03:ba:61:cd:64:02:4f:ca:04:e2:59:
2c:33:ea:9c:2e:ee:eb:1d:98:b5:cc:10:0c:d6:35:a4:8d:b9:
e9:4b:a4:ee:5a:a1:14:1c:65:44:2e:ee:0d:7e:da:45:80:be:
4a:48:af:5c:a7:17:d8:4d:68:b6:59:35:03:a3:87:ae:d3:1d:
7b:92:fc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:52:07 2026 by rpki-client