Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/RR1MEfLEsIcdiGoZIyVLzt4aYos.roa
File: RR1MEfLEsIcdiGoZIyVLzt4aYos.roa (raw, json)
Hash identifier: Gu+rCtsQ69c5JhSzmdvPwGpKSAXUZa6XJPOoBk1pcFI=
Subject key identifier: 45:1D:4C:11:F2:C4:B0:87:1D:88:6A:19:23:25:4B:CE:DE:1A:62:8B
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A0809B13574701A3AD50B0A8D3E24BD16B
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/RR1MEfLEsIcdiGoZIyVLzt4aYos.roa
Signing time: Tue 08 Sep 2026 10:40:41 +0000
ROA not before: Tue 08 Sep 2026 10:40:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218766
IP address blocks: 2a0c:9a40:9400::/40 maxlen: 48
2a0c:9a40:e120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:9b:13:57:47:01:a3:ad:50:b0:a8:d3:e2:4b:d1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Sep 8 10:40:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=451d4c11f2c4b0871d886a1923254bcede1a628b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:cc:67:e0:b1:1f:43:e6:7a:2a:48:54:c0:
c1:c2:b1:1e:ff:cb:7c:9b:6d:99:e6:eb:d6:c5:dc:
cb:5b:b4:af:47:eb:0d:96:ec:ac:d8:28:9d:3e:07:
1f:10:9c:0e:e6:54:30:f7:81:19:dd:a4:08:4e:b3:
72:38:e8:d3:ea:17:6c:be:b8:28:be:bd:67:5a:06:
46:60:66:d1:85:0c:94:7b:d2:a0:41:97:10:80:42:
50:57:54:e4:bd:2e:4e:e0:e7:28:03:fe:63:b1:41:
16:51:0f:e9:8a:cb:c3:b7:83:ff:ae:b0:d7:52:4b:
14:e5:fa:0f:f2:42:94:a2:6e:f1:8c:93:15:18:5e:
38:cf:13:ce:6c:e9:5e:4d:e8:ca:74:af:da:f5:af:
c4:6a:1f:2f:b3:cb:c0:bf:f9:08:7e:24:24:1e:53:
d6:c4:1d:f4:88:45:9d:c0:c1:3c:94:67:8b:12:7f:
ef:a4:03:e0:73:17:04:31:40:37:c1:da:ec:2b:75:
40:46:b8:e6:b8:18:e0:88:c6:81:91:17:57:b3:42:
61:1d:b9:8e:44:a1:35:34:6b:e2:52:c8:73:2a:c3:
24:54:38:5d:96:6d:f3:a4:6a:aa:43:15:6a:d0:b0:
b2:9e:92:51:de:2c:72:27:15:78:61:32:7d:21:c1:
cd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1D:4C:11:F2:C4:B0:87:1D:88:6A:19:23:25:4B:CE:DE:1A:62:8B
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/RR1MEfLEsIcdiGoZIyVLzt4aYos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:9400::/40
2a0c:9a40:e120::/48
Signature Algorithm: sha256WithRSAEncryption
c7:da:1e:83:f6:d2:9d:f4:1f:b5:2f:1d:9c:02:eb:4b:a4:ad:
5d:bd:59:f5:7d:bf:38:c3:77:32:ff:cc:8f:94:fd:bd:16:d6:
e3:37:31:40:29:6c:e6:49:e1:1e:7b:d5:51:70:c1:5e:52:c6:
17:07:57:dd:18:f2:c1:2f:72:c6:72:56:cf:71:bc:49:65:bd:
db:14:90:99:63:46:d5:d5:06:f3:5c:65:c9:8d:2f:30:b1:f5:
e9:f6:4b:a8:6b:0c:9b:d5:5e:12:6c:32:c2:30:9b:b0:3b:bb:
52:aa:52:b2:c6:2b:14:45:c1:50:0c:0a:17:d8:c2:c8:0c:77:
96:97:1e:da:97:47:d1:15:03:92:bc:0e:6b:4f:29:c5:ae:f0:
0c:00:ec:20:3c:07:76:88:30:1a:fb:05:b9:c8:8b:dd:9d:45:
68:bd:cf:07:d5:61:3a:b2:82:35:8a:f5:52:f4:97:71:2b:f9:
da:69:0c:77:c3:00:5f:39:2a:0b:26:c7:db:5e:ce:42:46:cd:
92:a6:ea:e6:0a:ee:f9:3e:8e:50:45:a0:2d:1c:54:4c:9c:9a:
35:48:f5:d5:ee:7f:12:53:69:ab:ba:73:2f:d6:60:15:84:b4:
17:e8:d3:59:4a:72:4f:e1:9e:21:02:0c:be:7a:e7:7c:6e:65:
0d:86:db:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:01:20 2026 by rpki-client