Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Dp9nfao-Lu-2nBFo3SQ17XgKE_s.roa
File: Dp9nfao-Lu-2nBFo3SQ17XgKE_s.roa (raw, json)
Hash identifier: ftH8WXmCe7E5NBIPoJRYR7JenBvr3AQxF7w5t5Bh+jA=
Subject key identifier: 0E:9F:67:7D:AA:3E:2E:EF:B6:9C:11:68:DD:24:35:ED:78:0A:13:FB
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019C9A8997DC3141F1F22BCE87D718244148
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Dp9nfao-Lu-2nBFo3SQ17XgKE_s.roa
Signing time: Thu 26 Feb 2026 15:20:34 +0000
ROA not before: Thu 26 Feb 2026 15:20:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a05:9080:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Mar 2026 16:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9a:89:97:dc:31:41:f1:f2:2b:ce:87:d7:18:24:41:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Feb 26 15:20:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e9f677daa3e2eefb69c1168dd2435ed780a13fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:12:e0:c4:96:8b:33:ea:23:47:ad:78:dc:8a:
ec:4b:e5:f2:d4:20:4e:ac:c9:8a:82:8a:1a:a3:e2:
f9:e0:66:2e:13:a9:49:21:ac:4a:b2:c1:c9:07:b9:
59:e2:a3:29:00:aa:78:01:e2:de:c0:79:29:3f:13:
eb:0e:58:09:2c:e3:7a:ce:d0:c6:3c:82:de:6e:5a:
8e:d3:9f:17:25:f9:f3:11:94:02:66:8b:1e:18:fa:
1f:0f:76:c2:f0:5b:25:e2:41:1a:45:85:77:0e:f2:
2b:42:c6:67:39:08:6f:db:1c:ff:ad:06:76:07:8c:
ba:e7:ab:94:e3:f9:7d:83:68:79:8c:8e:00:86:2d:
84:58:ff:2c:47:e5:a6:b0:03:60:23:0e:06:b8:a9:
39:7b:18:ee:12:ba:c9:98:e7:d7:bd:33:78:c4:d1:
82:ba:32:d0:1a:d9:b6:ac:d7:16:cd:81:56:81:95:
6a:b4:d9:cc:1c:03:da:a3:28:ff:95:c9:9e:0c:ee:
cb:1a:2e:6a:bc:35:c9:0c:5d:ef:f9:e1:68:37:42:
ee:ec:80:d5:62:a1:54:92:72:f4:32:ba:40:51:80:
ac:37:cf:47:b3:78:ab:18:45:db:7b:87:03:93:c1:
0b:64:e9:55:26:74:d5:38:f3:4a:06:2e:2a:e6:36:
6a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9F:67:7D:AA:3E:2E:EF:B6:9C:11:68:DD:24:35:ED:78:0A:13:FB
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Dp9nfao-Lu-2nBFo3SQ17XgKE_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9080:13::/48
Signature Algorithm: sha256WithRSAEncryption
cd:0d:07:d8:0d:3a:56:29:45:95:55:6b:29:58:a8:b7:9c:37:
d7:4e:f2:d9:86:81:ed:e4:34:43:03:ff:65:5d:7e:25:86:81:
90:4c:16:a4:bf:47:18:ca:a6:4f:89:e9:ab:67:98:73:6f:43:
15:39:d9:69:99:b5:22:40:f9:28:77:c1:38:37:6a:8c:d4:7e:
11:71:94:cb:d2:ac:f4:87:43:a4:34:9b:4e:38:da:bb:ac:0f:
29:82:49:2e:b6:c4:bd:cf:6a:1e:0e:92:45:98:6a:2e:9b:f3:
eb:9e:cc:50:12:3b:2f:2e:1b:dc:fb:13:29:68:7f:7e:a9:0a:
0b:91:38:c6:d1:47:36:0b:0b:34:2a:26:29:8b:c0:74:db:f2:
0f:64:cf:1b:1e:5d:09:e1:58:cc:77:ef:5f:7c:fa:43:1d:f1:
cd:e3:3b:fe:92:fe:fb:36:b3:ae:2b:90:2d:30:73:7b:38:15:
0b:c3:cf:80:fa:72:15:d5:e8:50:9c:48:c5:3a:ac:d0:27:0a:
f0:20:92:07:3c:44:18:ff:ad:cf:b4:bf:f1:d0:99:e0:80:45:
c3:c6:3e:8a:d4:a0:fb:4b:44:19:b3:8a:d0:3e:2a:f3:fb:f3:
82:69:f1:84:d5:0d:25:47:57:c8:00:66:59:78:9a:07:e8:0e:
c7:93:4f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 28 23:07:05 2026 by rpki-client