Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/C1I53hRwJgP51ASH1Rdku_FGZz8.roa
File: C1I53hRwJgP51ASH1Rdku_FGZz8.roa (raw, json)
Hash identifier: dX/V3A2PdtW/5Vuo/DAE9RPuTI/eZot9Aak9bBiuEg8=
Subject key identifier: 0B:52:39:DE:14:70:26:03:F9:D4:04:87:D5:17:64:BB:F1:46:67:3F
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019D6E5867EBA11DD451CEB7DCCB117C0F1E
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/C1I53hRwJgP51ASH1Rdku_FGZz8.roa
Signing time: Wed 08 Apr 2026 18:26:20 +0000
ROA not before: Wed 08 Apr 2026 18:26:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199395
IP address blocks: 2a0c:9a40:8eb0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6e:58:67:eb:a1:1d:d4:51:ce:b7:dc:cb:11:7c:0f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Apr 8 18:26:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b5239de14702603f9d40487d51764bbf146673f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:46:f4:db:04:c1:9d:03:b1:c9:fe:b5:d2:
1d:3e:7f:65:cb:d3:d8:0a:c3:ed:2e:ee:01:6e:74:
62:7f:e2:58:5b:8c:a4:fa:cc:a5:f5:4e:bd:33:c0:
ad:47:58:8b:da:93:5a:8e:20:fa:f5:e9:f3:d8:b1:
60:8e:76:60:0b:7d:f6:ac:d3:a0:d5:29:37:2e:e9:
d8:43:c7:c2:61:d4:44:b7:de:5f:72:ff:dc:b6:ec:
db:f4:ec:9c:9e:8a:f8:42:93:af:85:9a:ea:84:e0:
55:ad:20:c9:57:11:ac:95:f8:c7:14:20:b0:9f:18:
f3:3c:38:4c:0f:15:74:8b:25:cf:1a:c7:f8:9b:3e:
06:de:e8:92:1a:0d:2c:1b:88:59:6b:48:ff:57:27:
84:78:cf:fc:65:5b:0e:f0:92:9e:17:0e:4f:70:76:
8d:2d:7c:ff:e5:eb:40:79:52:de:45:62:ea:98:d7:
14:ad:c3:c1:f5:e4:ad:0b:61:3b:05:52:9c:3e:28:
82:68:d7:69:8c:18:21:d7:21:f1:57:17:a6:cb:e1:
04:0c:ae:a5:04:96:cb:21:0d:24:b0:40:5f:96:7c:
da:79:91:f8:88:b4:bf:2c:03:61:62:a4:5a:0a:3f:
5a:0f:eb:d5:a9:b0:7d:26:c5:0a:7e:71:e5:67:95:
6e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:52:39:DE:14:70:26:03:F9:D4:04:87:D5:17:64:BB:F1:46:67:3F
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/C1I53hRwJgP51ASH1Rdku_FGZz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8eb0::/48
Signature Algorithm: sha256WithRSAEncryption
1a:85:02:47:1a:30:7e:9d:ea:c7:cf:5c:cc:a9:6d:28:45:56:
81:52:68:0c:05:3b:a8:76:4d:f7:c6:97:4b:5a:9c:f2:8a:62:
ab:99:83:1f:0d:72:55:6b:fb:f2:b0:62:2e:f4:b7:7e:07:d8:
c3:ad:9b:75:40:42:0c:96:5a:53:13:ed:29:ab:74:2d:e1:1c:
74:b7:03:64:a3:ec:d7:31:27:7a:67:eb:2f:8e:45:93:09:0d:
07:19:82:2b:b5:7d:17:e8:ca:96:15:9a:3a:d6:23:3f:ba:9d:
31:8e:62:27:0f:44:d0:68:be:23:c8:e7:c1:b2:03:5b:a5:c4:
f6:74:45:88:9a:1e:56:bf:7c:57:56:5a:60:10:d4:5c:81:5e:
d9:77:16:93:21:4b:55:39:81:6c:30:7c:a8:ef:2f:85:7f:a7:
49:9a:e0:94:88:b4:e6:ba:2b:5e:ae:bf:26:b3:31:e4:e7:b5:
5e:93:56:2f:f5:17:71:f6:ff:e9:95:bc:c0:fd:19:9e:cf:ed:
1c:0d:f6:cb:97:22:14:a8:65:7c:0b:6a:e7:e8:50:98:0b:41:
46:34:8e:1e:48:c8:71:cd:85:6b:ee:a0:06:23:21:44:14:f7:
c0:bd:44:80:97:b9:3f:eb:ed:67:47:c0:ef:13:b6:1e:33:f4:
5c:e4:5f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:59:42 2026 by rpki-client