Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/m4jWmUWu_NL833wHpjlo_itnadw.roa
File: m4jWmUWu_NL833wHpjlo_itnadw.roa (raw, json)
Hash identifier: RwOqkHbntUy2jo5lIc01YSzNvRHA1IqmYHya8PZXPD0=
Subject key identifier: 9B:88:D6:99:45:AE:FC:D2:FC:DF:7C:07:A6:39:68:FE:2B:67:69:DC
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 01A011FF6E83F72F02681F8DED5F0023FB30
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/m4jWmUWu_NL833wHpjlo_itnadw.roa
Signing time: Mon 17 Aug 2026 23:12:27 +0000
ROA not before: Mon 17 Aug 2026 23:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 2a0f:ca80:618::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:11:ff:6e:83:f7:2f:02:68:1f:8d:ed:5f:00:23:fb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Aug 17 23:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b88d69945aefcd2fcdf7c07a63968fe2b6769dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c4:ad:4b:54:7b:58:ba:93:0a:02:3f:70:03:
33:69:29:8c:df:d6:06:06:59:ce:dc:32:55:b7:60:
41:f4:05:d5:a1:dd:b2:f1:19:2d:f8:41:d6:6c:8a:
ed:19:fe:44:f7:48:e6:92:12:4a:86:0e:ea:b9:ce:
22:2a:e4:fc:c4:d9:9d:92:97:d4:e0:15:56:a4:cc:
6a:da:c9:e5:99:e1:ca:a7:24:bd:84:c4:ad:1d:a5:
e8:18:a3:12:ff:46:28:fd:56:4d:f2:bd:43:fc:7c:
84:02:cd:1d:de:ac:e6:32:05:73:da:77:b5:69:16:
0f:9b:9f:0f:c1:f1:c3:c8:53:08:cb:db:da:bf:a1:
f4:86:d6:18:99:27:9b:d9:f3:1e:5b:4e:1f:b3:4d:
7b:0d:49:34:f7:c8:e3:8e:c2:8f:ce:58:cc:df:eb:
08:ea:ec:53:9d:23:22:5b:6f:92:8b:8a:6f:0f:52:
d5:fd:46:6c:5f:e9:8e:f9:0b:32:37:f7:4f:cb:7f:
21:39:41:af:c5:54:62:ce:5c:aa:e0:7f:3c:50:8e:
1d:4e:97:b7:53:24:5e:59:9a:73:e7:09:ba:97:b6:
ec:a1:7e:04:a6:e5:c0:f5:87:e0:cf:52:3e:ac:53:
d8:4b:5b:8c:be:b1:ae:55:de:8a:a8:44:ed:a2:30:
59:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:88:D6:99:45:AE:FC:D2:FC:DF:7C:07:A6:39:68:FE:2B:67:69:DC
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/m4jWmUWu_NL833wHpjlo_itnadw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:ca80:618::/48
Signature Algorithm: sha256WithRSAEncryption
8f:a7:ae:2d:75:1b:77:b6:f8:cd:d0:0e:1a:2e:e8:c7:a0:ea:
23:ca:47:df:ac:37:ed:59:7d:15:bb:54:b3:dd:86:03:fa:d9:
4c:d1:98:41:94:4c:5d:02:08:95:0b:71:f0:60:74:af:22:d7:
03:4d:2a:61:ee:da:e1:7d:15:8a:eb:6f:d0:48:fc:2d:a1:a0:
31:51:43:12:a8:00:4a:d1:18:65:45:0f:80:85:76:5b:6a:dc:
0a:e6:6a:49:1c:20:22:40:34:5c:d0:34:98:72:eb:1b:59:7d:
2c:b8:27:ec:45:b6:17:29:fd:57:89:ee:98:61:0a:a3:08:14:
a7:15:ee:d5:b2:46:14:3e:4a:d2:13:4d:58:d6:a1:b6:d1:5e:
ac:6b:b1:68:99:36:b8:e7:68:75:24:28:b5:a7:c1:ef:65:8d:
05:0f:af:01:a3:6a:b5:d9:57:f3:b2:a4:b8:83:93:4d:e9:27:
ee:63:ae:cb:e7:d2:b3:53:c8:87:ae:eb:4f:c1:72:54:ba:5b:
be:83:da:55:a0:8f:68:50:7d:4a:39:bb:83:e3:cb:ba:92:40:
31:15:7f:3b:bc:cb:45:59:09:89:c3:a6:0f:de:16:37:cf:d6:
8f:98:3d:6d:c5:48:d7:81:2e:6a:9a:bd:63:0a:fc:0e:83:25:
03:51:55:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:46 2026 by rpki-client