Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/EsINwCbDyJKIXu4Qe6B7JiKp8FU.roa
File: EsINwCbDyJKIXu4Qe6B7JiKp8FU.roa (raw, json)
Hash identifier: AtjUT+yIigFBoXWsVm0F8wTOnZ/lQmOW28N+L+cszoE=
Subject key identifier: 12:C2:0D:C0:26:C3:C8:92:88:5E:EE:10:7B:A0:7B:26:22:A9:F0:55
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A09F1B66E918BD8639476FE2E3EA469AC7
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/EsINwCbDyJKIXu4Qe6B7JiKp8FU.roa
Signing time: Mon 14 Sep 2026 08:49:28 +0000
ROA not before: Mon 14 Sep 2026 08:49:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137897
IP address blocks: 2a0c:9a40:8f90::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:1b:66:e9:18:bd:86:39:47:6f:e2:e3:ea:46:9a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Sep 14 08:49:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12c20dc026c3c892885eee107ba07b2622a9f055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:eb:91:b5:ff:ae:93:ab:22:fb:fc:28:91:e2:
a7:fb:23:00:01:7a:4a:b1:31:16:f9:8d:01:58:03:
ec:e9:3e:16:02:84:74:12:2a:4d:5d:06:f1:d9:ee:
85:af:2a:82:f2:be:79:9e:1f:30:99:d7:0d:d4:9f:
9c:a4:d9:e8:15:ae:2a:1d:cf:1d:59:c8:8c:58:67:
81:41:01:b6:8b:c9:cf:3e:02:45:62:2f:ac:a5:51:
9a:2d:a1:ff:94:de:69:51:56:dc:35:db:07:8d:c5:
ef:06:f6:cf:82:5b:6a:57:0b:a6:ab:93:99:31:84:
49:8b:80:e1:19:b0:35:10:8d:1e:53:d5:98:1d:f6:
28:d3:cb:2f:f1:f4:98:12:8b:2d:07:63:94:4d:7d:
25:c5:a7:aa:47:d3:c4:01:bf:d9:55:f0:c2:a9:28:
de:d8:c7:29:fe:44:90:a1:40:6b:77:c2:da:8f:96:
ab:7c:6e:0a:6e:0e:4b:bd:c9:cf:bf:06:f1:74:54:
bd:4c:0b:3b:c9:39:0a:04:6b:2a:38:14:43:3c:e0:
a8:6e:f6:8f:33:d9:e4:e6:7d:67:ea:d2:bd:3d:26:
0f:90:b6:c0:02:5d:d5:fc:dc:bd:f0:b0:0c:e5:06:
8a:e1:e0:e7:43:a3:0f:8a:e6:a7:f3:21:35:71:90:
74:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C2:0D:C0:26:C3:C8:92:88:5E:EE:10:7B:A0:7B:26:22:A9:F0:55
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/EsINwCbDyJKIXu4Qe6B7JiKp8FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8f90::/44
Signature Algorithm: sha256WithRSAEncryption
c9:39:39:1b:1d:e0:1c:44:97:2c:74:2a:05:dc:9c:a7:7f:71:
12:a8:96:32:20:86:dc:f9:63:53:0d:d4:60:d4:7b:01:0b:8a:
74:8b:54:36:6a:df:f1:1e:12:57:af:ae:56:11:12:81:a7:5b:
9f:0e:7e:f1:c1:03:15:35:78:79:7c:02:ee:b3:1d:bc:86:b2:
bf:84:be:dc:c8:df:cf:5e:bc:cf:74:55:58:9e:9e:0a:fd:b2:
fc:c3:6b:58:d1:d9:39:a0:2e:af:bc:04:64:08:6a:be:45:52:
54:ae:44:82:13:14:f8:cd:21:79:c9:f6:a8:a9:02:17:08:f8:
4c:b3:25:4b:f9:fa:98:a1:c2:fc:17:53:e4:a0:0c:b4:be:ae:
b9:b2:eb:72:5b:e2:2e:38:87:4a:39:ef:a5:77:7f:6d:02:af:
01:fd:11:0d:40:af:ef:b3:7d:1c:93:3e:41:c3:a6:67:fb:17:
14:a3:e6:52:b5:87:28:fa:ef:fa:13:31:d8:af:67:d0:99:55:
d8:d9:5a:47:f3:dc:49:04:2b:9e:54:89:32:b7:18:25:89:6c:
56:03:c4:a5:7f:74:96:7c:a5:d1:c9:b8:58:58:d6:78:52:84:
d6:8e:c2:7e:2b:3e:f4:7e:11:c8:74:c2:63:c4:de:a5:98:43:
55:2c:39:4f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaCfG2bpGL2GOUdv4uPqRprHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjYwOTE0MDg0OTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmMyMGRjMDI2YzNjODkyODg1ZWVlMTA3YmEwN2IyNjIyYTlmMDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+uRtf+uk6si+/wokeKn+yMAAXpK
sTEW+Y0BWAPs6T4WAoR0EipNXQbx2e6FryqC8r55nh8wmdcN1J+cpNnoFa4qHc8d
WciMWGeBQQG2i8nPPgJFYi+spVGaLaH/lN5pUVbcNdsHjcXvBvbPgltqVwumq5OZ
MYRJi4DhGbA1EI0eU9WYHfYo08sv8fSYEostB2OUTX0lxaeqR9PEAb/ZVfDCqSje
2Mcp/kSQoUBrd8Laj5arfG4Kbg5LvcnPvwbxdFS9TAs7yTkKBGsqOBRDPOCobvaP
M9nk5n1n6tK9PSYPkLbAAl3V/Ny98LAM5QaK4eDnQ6MPiuan8yE1cZB0iwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBLCDcAmw8iSiF7uEHugeyYiqfBVMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvRXNJTndDYkR5SktJWHU0UWU2QjdKaUtwOEZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQI+Q
MA0GCSqGSIb3DQEBCwUAA4IBAQDJOTkbHeAcRJcsdCoF3Jynf3ESqJYyIIbc+WNT
DdRg1HsBC4p0i1Q2at/xHhJXr65WERKBp1ufDn7xwQMVNXh5fALusx28hrK/hL7c
yN/PXrzPdFVYnp4K/bL8w2tY0dk5oC6vvARkCGq+RVJUrkSCExT4zSF5yfaoqQIX
CPhMsyVL+fqYocL8F1PkoAy0vq65sutyW+IuOIdKOe+ld39tAq8B/RENQK/vs30c
kz5Bw6Zn+xcUo+ZStYco+u/6EzHYr2fQmVXY2VpH89xJBCueVIkytxgliWxWA8Sl
f3SWfKXRybhYWNZ4UoTWjsJ+Kz70fhHIdMJjxN6lmENVLDlP
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:35:12 2026 by rpki-client