Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/stTRni4YM83OgBxFCYHTBarMniU.roa
File: stTRni4YM83OgBxFCYHTBarMniU.roa (raw, json)
Hash identifier: sdW8g8p16K2y61HEzLwNn3mjfOgNWIo1IuskhK0jm60=
Subject key identifier: B2:D4:D1:9E:2E:18:33:CD:CE:80:1C:45:09:81:D3:05:AA:CC:9E:25
Certificate issuer: /CN=8bb9c626b3cd4bdc2241eed342f4883efb5654a0
Certificate serial: 019F36A5CDF1E86CF8C6A02EA77BC056F031
Authority key identifier: 8B:B9:C6:26:B3:CD:4B:DC:22:41:EE:D3:42:F4:88:3E:FB:56:54:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/stTRni4YM83OgBxFCYHTBarMniU.roa
Signing time: Mon 06 Jul 2026 08:57:43 +0000
ROA not before: Mon 06 Jul 2026 08:57:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202245
IP address blocks: 2a0e:7a02::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:a5:cd:f1:e8:6c:f8:c6:a0:2e:a7:7b:c0:56:f0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb9c626b3cd4bdc2241eed342f4883efb5654a0
Validity
Not Before: Jul 6 08:57:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2d4d19e2e1833cdce801c450981d305aacc9e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d6:43:25:9e:8f:10:bd:6c:59:11:fc:6f:a8:
a7:2e:8e:9a:99:55:c7:9c:b6:bb:b4:36:94:6c:1a:
63:6c:41:fa:b7:56:c5:d1:ec:ac:bb:4d:89:7b:ac:
e0:7e:94:dd:af:6c:8a:3c:c5:c0:6c:8c:55:17:dd:
2c:6a:b9:e2:5f:bd:52:31:9f:f5:35:c5:74:94:ce:
3f:bb:36:7a:f2:b2:36:35:a7:60:b7:c0:ca:7c:1b:
0c:cf:f7:e3:d6:12:88:86:da:de:c4:ce:f6:06:74:
44:7c:22:22:fd:79:d2:f9:b7:6d:82:eb:07:c4:77:
d7:c1:56:05:dd:4d:3b:57:a0:fb:b2:55:75:d1:85:
04:96:48:c5:57:06:72:2e:54:f1:92:99:62:c7:b8:
83:e1:2c:05:df:33:ed:d6:a1:21:22:e6:42:7e:a4:
60:dc:1f:fd:a6:82:b5:af:40:5e:df:cf:91:e9:23:
80:b7:64:3d:bf:f9:96:2f:0c:00:9e:83:f5:58:92:
bd:ed:99:c5:9a:7c:e5:09:1f:c1:f2:ce:88:26:0a:
c0:c0:9c:2e:fa:cc:0b:25:e3:2c:4d:10:e6:08:d9:
67:51:37:fc:94:d2:33:47:c3:71:e2:da:24:d5:79:
8b:fe:4b:65:49:66:94:08:0f:32:3d:98:78:9e:22:
2b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D4:D1:9E:2E:18:33:CD:CE:80:1C:45:09:81:D3:05:AA:CC:9E:25
X509v3 Authority Key Identifier:
keyid:8B:B9:C6:26:B3:CD:4B:DC:22:41:EE:D3:42:F4:88:3E:FB:56:54:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/stTRni4YM83OgBxFCYHTBarMniU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7a02::/32
Signature Algorithm: sha256WithRSAEncryption
7d:ac:4f:09:e3:64:2e:95:b4:8a:1e:6c:74:12:5c:32:e3:5a:
4e:b9:32:09:d6:19:88:9e:8c:7c:0b:f5:de:d4:89:e8:62:71:
3d:e0:40:57:f6:47:71:da:e4:0a:c2:ca:db:2e:49:da:4b:04:
62:7d:fa:48:ae:25:cb:c9:c9:d4:48:b9:62:ed:b8:77:36:99:
0f:da:4f:de:d4:94:7b:98:73:cd:aa:ec:de:56:29:6f:46:29:
2a:ac:e0:b1:5c:9e:2d:66:e6:b0:41:a1:99:7b:d8:e9:78:b6:
8a:cc:f8:93:61:2d:88:84:ea:83:91:f1:a2:5b:d2:9e:38:e3:
07:c6:f8:43:db:b1:b8:2a:d5:69:2c:a0:85:71:23:7c:2d:11:
80:cc:2c:0e:80:9f:22:02:d5:9b:1d:0f:93:20:2f:8a:f9:4b:
a3:4d:71:c7:64:d6:1c:ed:f0:eb:72:ae:2c:1c:0a:ac:7e:2b:
2c:19:e4:ca:76:58:e6:ce:83:e6:84:df:17:6e:0e:3d:80:01:
d4:64:e1:b2:53:41:b2:88:8b:90:fe:01:f5:58:00:aa:fd:ed:
4d:c6:49:24:74:93:b4:c6:04:28:ca:d2:a9:ea:4e:17:4c:9a:
b9:31:e8:a6:7e:fe:ac:2e:25:9d:23:02:6e:62:9d:d7:33:5e:
8f:b6:8b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:05 2026 by rpki-client