Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/7L51QwhKc9YXArYUpjFmCR84H2w.roa
File: 7L51QwhKc9YXArYUpjFmCR84H2w.roa (raw, json)
Hash identifier: 1BNHXNVMZXqyjXl/CNzgnncGSNJXHqBnshFoFxSnVmI=
Subject key identifier: EC:BE:75:43:08:4A:73:D6:17:02:B6:14:A6:31:66:09:1F:38:1F:6C
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019D81C9353D0BD215C785035FDB6AA7FBD8
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/7L51QwhKc9YXArYUpjFmCR84H2w.roa
Signing time: Sun 12 Apr 2026 13:02:20 +0000
ROA not before: Sun 12 Apr 2026 13:02:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a0c:9a40:8a90::/48 maxlen: 48
2a0c:9a40:8b50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:81:c9:35:3d:0b:d2:15:c7:85:03:5f:db:6a:a7:fb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Apr 12 13:02:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecbe7543084a73d61702b614a63166091f381f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4f:6f:d7:5b:87:c1:bb:7f:29:d2:90:52:38:
f2:3c:dc:c3:6c:df:f4:63:46:53:bc:e4:22:52:11:
7a:86:e2:16:e5:32:ca:2f:8e:85:b6:42:9b:50:33:
fe:03:b7:46:3f:d4:61:9a:e5:72:21:58:1f:99:c0:
6b:57:04:87:4e:e3:40:9f:c5:c9:50:45:3b:7c:a8:
a2:b0:1f:35:5d:e5:a4:eb:d0:fe:59:df:39:0d:01:
d9:78:2f:a0:58:c8:eb:c4:25:30:b6:3a:a7:26:0c:
14:b3:64:6e:2b:30:9f:4b:b7:40:4a:02:94:c0:b6:
c2:e9:d8:6d:52:f0:6c:78:c4:d8:67:f4:6e:eb:a9:
45:48:95:86:85:1e:b7:6b:32:26:38:11:c3:d0:2a:
88:69:7d:8f:32:5b:c5:0a:6e:de:7c:1c:77:fe:95:
ed:11:fc:7c:f7:80:1a:64:69:6f:83:e3:db:14:2e:
30:c9:8e:6e:81:48:ae:50:79:c6:3a:2f:d7:2e:67:
b2:21:4a:8e:f9:96:21:73:ea:0a:02:9a:ef:27:29:
b7:48:e2:c7:33:94:ee:cc:9c:17:b6:9e:bb:cf:30:
74:4f:a0:eb:04:d0:11:93:58:c9:16:96:ed:f2:a0:
20:aa:9b:01:63:94:3f:8a:a2:80:8c:70:34:b8:7a:
27:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BE:75:43:08:4A:73:D6:17:02:B6:14:A6:31:66:09:1F:38:1F:6C
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/7L51QwhKc9YXArYUpjFmCR84H2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8a90::/48
2a0c:9a40:8b50::/48
Signature Algorithm: sha256WithRSAEncryption
17:91:c6:24:a7:06:d6:bc:96:59:2f:99:ab:c3:55:7c:d1:ca:
d8:a4:30:f7:33:7a:ab:1b:13:8b:83:b2:3e:8b:59:27:7d:41:
c8:dd:1a:c4:d4:89:12:17:b6:4f:a1:e3:7b:4b:d5:75:3d:42:
23:d6:35:e2:cb:68:4f:11:b5:90:91:c8:1a:53:96:4b:71:a1:
fd:76:2b:e6:16:5d:e5:a1:44:55:98:f3:25:80:b8:44:6c:b7:
47:9c:bc:e5:62:5b:20:98:42:16:80:51:c4:95:cc:2d:7f:e4:
46:e1:18:ca:3c:06:7a:61:7c:a3:58:77:6a:c1:17:2a:0d:f0:
80:91:db:85:ee:2a:41:53:e8:d4:e5:f7:49:a5:86:0f:78:21:
6e:b6:12:a0:ff:a2:4a:5c:41:22:c6:dd:2e:19:ed:7e:b2:cb:
b0:dc:ba:f6:20:4b:6c:9b:fa:80:a5:78:66:86:51:17:aa:cc:
f4:a3:1d:45:36:f7:73:f6:20:68:7a:a1:93:42:00:d3:f5:72:
e4:ef:bb:d6:b7:51:83:83:49:5a:9d:1c:de:0c:17:8d:2a:23:
19:91:11:d8:de:19:d4:da:c4:21:31:9d:f8:bc:18:7b:78:12:
6a:26:33:d2:d5:8f:ef:fa:13:06:7a:6f:6e:26:06:12:d0:c2:
3e:aa:41:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:33:29 2026 by rpki-client