Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/Ij9-llX6fY_QOa5LJ8ETDhaMMX8.roa
File: Ij9-llX6fY_QOa5LJ8ETDhaMMX8.roa (raw, json)
Hash identifier: pXZhA49BXeZatwu8xaniljkVlyqQZfdfESj0KjFt3D8=
Subject key identifier: 22:3F:7E:96:55:FA:7D:8F:D0:39:AE:4B:27:C1:13:0E:16:8C:31:7F
Certificate issuer: /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial: 01A0F6892A39A2FD1D1837E98DAB39EC5088
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/Ij9-llX6fY_QOa5LJ8ETDhaMMX8.roa
Signing time: Thu 01 Oct 2026 08:16:19 +0000
ROA not before: Thu 01 Oct 2026 08:16:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51088
IP address blocks: 2a0f:d440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:89:2a:39:a2:fd:1d:18:37:e9:8d:ab:39:ec:50:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Validity
Not Before: Oct 1 08:16:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=223f7e9655fa7d8fd039ae4b27c1130e168c317f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:cf:d3:3d:f8:17:82:37:7c:6c:d0:64:b0:
2d:65:11:50:6d:e5:c4:b4:46:46:16:52:d0:c5:0f:
cb:63:0d:7a:d0:b9:dd:64:60:31:c0:b2:b2:27:13:
30:cf:49:8d:1f:da:44:b8:04:2c:84:33:d8:af:29:
08:26:da:9c:90:02:b6:86:4e:24:87:dc:ed:ce:5d:
e7:69:ae:4f:31:42:2b:1f:d9:29:d6:03:18:ba:89:
70:75:1d:eb:8f:f2:eb:09:c1:62:24:ff:f9:a8:89:
fb:81:0c:c5:9b:ad:3d:c0:21:76:29:01:7e:9d:29:
40:fb:3f:a0:3e:c3:f2:3f:b8:08:8c:e1:13:88:52:
a4:0f:39:08:2a:19:99:cb:e7:ed:5b:1f:e0:f3:5e:
e0:fa:73:d1:43:d0:13:01:36:45:e2:90:d9:9d:f3:
3f:df:95:35:d6:4e:66:14:c9:8c:5e:22:74:17:46:
f7:e7:2e:75:52:dd:7e:7d:99:a0:67:3e:ea:6e:49:
76:28:36:61:7e:f4:e5:6e:ab:14:64:fb:a3:fe:91:
4a:ec:e5:6f:fe:49:82:9a:3b:c0:a5:13:bf:92:5d:
86:6d:8a:87:99:03:a2:ed:0f:fa:74:de:61:31:7c:
7b:53:5b:c1:39:a5:bf:a3:23:40:dd:2e:86:6a:43:
16:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3F:7E:96:55:FA:7D:8F:D0:39:AE:4B:27:C1:13:0E:16:8C:31:7F
X509v3 Authority Key Identifier:
keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/Ij9-llX6fY_QOa5LJ8ETDhaMMX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:d440::/29
Signature Algorithm: sha256WithRSAEncryption
53:a8:16:fa:55:3d:35:98:6a:3d:bd:24:64:4a:1d:72:d4:86:
d4:15:bb:2d:5a:60:da:73:2b:e7:03:81:d7:16:d6:5b:02:6b:
58:93:da:ca:7a:68:01:ec:62:e7:3b:c5:95:fb:0d:33:57:84:
bc:f1:34:63:f0:8f:16:2f:a7:bf:a2:b1:18:60:37:53:3c:ed:
3f:21:72:cc:65:01:a4:f5:c3:e1:39:3e:8b:24:7f:1e:e3:99:
75:17:9f:6e:94:e1:e1:12:5f:25:6d:53:83:c9:5f:b5:45:17:
17:81:d7:d1:b0:44:e2:c8:90:70:71:f6:5f:f7:76:27:1e:be:
51:4e:59:7e:e7:50:33:9d:29:aa:ff:a4:23:5b:82:d6:d4:13:
de:04:e7:54:1a:74:32:af:aa:2c:6f:21:9f:95:3c:79:f6:f5:
b3:21:bb:d5:2a:b7:51:64:44:0e:14:f4:08:de:95:b5:7d:60:
3f:59:0d:76:69:b9:b2:84:fc:55:7d:01:ce:36:f5:64:38:89:
f7:19:b8:1a:fa:9b:c7:a5:19:d1:7f:64:20:c6:c0:03:44:b4:
87:3a:17:50:db:6a:8e:13:7b:b7:73:f0:05:b5:91:80:4f:92:
0c:7a:8b:68:34:41:87:3b:fa:fa:20:8b:58:a6:ee:c3:7d:11:
38:99:95:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:30:36 2026 by rpki-client