Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/xsPbHPSQrHrpwYVn5E0JFDMl0_I.roa
File: xsPbHPSQrHrpwYVn5E0JFDMl0_I.roa (raw, json)
Hash identifier: 5PoImzbjhNjt4rLng1pjSXIvMX3dHmzZZ2ziD420dVw=
Subject key identifier: C6:C3:DB:1C:F4:90:AC:7A:E9:C1:85:67:E4:4D:09:14:33:25:D3:F2
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019FA842C1B8B62EDCC55F74B9FCA9F57FF2
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/xsPbHPSQrHrpwYVn5E0JFDMl0_I.roa
Signing time: Tue 28 Jul 2026 10:26:14 +0000
ROA not before: Tue 28 Jul 2026 10:26:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219134
IP address blocks: 2a0c:9a40:84a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:42:c1:b8:b6:2e:dc:c5:5f:74:b9:fc:a9:f5:7f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jul 28 10:26:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6c3db1cf490ac7ae9c18567e44d09143325d3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1f:dc:2c:69:7d:5c:75:6b:76:ae:f1:50:22:
cd:a8:b2:cd:07:35:6b:ef:5d:8c:8e:ae:6a:74:93:
74:3e:16:d0:4b:2c:e8:28:b1:fa:f3:69:fc:dd:3e:
62:9e:19:9e:69:7b:25:e1:5f:f8:9a:c4:12:c8:5c:
07:fa:ef:b9:1a:cf:b9:b3:a0:ba:a0:63:14:f7:5a:
a3:9d:68:6b:44:40:3f:0e:92:d9:ba:ed:9d:82:91:
4a:a7:f3:1a:f8:1a:93:a5:d8:56:b5:fa:0f:ec:62:
ca:ab:8c:eb:e5:a2:35:55:01:9b:d7:ec:bf:a4:d1:
e0:a5:25:d0:4d:d9:e3:9b:07:39:83:9c:7d:99:84:
df:e8:63:09:bc:b4:c0:3d:79:93:35:97:64:cd:4a:
7e:34:a6:6a:be:5b:be:d2:9c:04:07:c6:bd:97:bf:
23:f9:31:5f:ae:02:94:1f:1e:f4:c6:11:6c:51:a0:
ef:fd:71:21:77:8f:76:f9:74:31:a0:be:99:2c:22:
7d:1d:65:68:15:e4:99:73:d5:96:5a:c1:89:96:2b:
ee:f7:8d:2c:ad:88:69:40:01:db:85:da:65:6c:79:
6d:fa:ab:9c:3d:57:9d:60:b2:74:f5:77:32:97:31:
3b:ac:e3:68:a0:bd:0d:fb:5e:d6:be:20:1e:f4:b8:
c7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C3:DB:1C:F4:90:AC:7A:E9:C1:85:67:E4:4D:09:14:33:25:D3:F2
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/xsPbHPSQrHrpwYVn5E0JFDMl0_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:84a0::/48
Signature Algorithm: sha256WithRSAEncryption
59:d9:0d:ba:c2:22:25:29:ff:04:84:94:1f:e3:4f:e4:69:ea:
19:ec:14:bc:ac:de:65:39:64:a6:74:70:af:2e:ae:d9:3c:ee:
71:c0:b9:b5:bb:e3:9f:b2:04:09:b5:77:b1:f1:cd:3a:82:5c:
e6:1b:2e:2b:69:b3:40:17:9a:95:8a:b9:2d:bb:75:c0:35:46:
dd:db:cb:f4:9b:7e:b7:08:b3:24:4d:bd:f1:b2:78:c7:1d:c4:
e1:79:01:9c:ea:c5:f4:39:f3:82:92:7f:86:d3:78:ff:d3:ce:
e6:c8:5c:9e:b1:51:f4:4f:f5:d6:d3:6c:df:7a:0a:8c:2a:8c:
d2:6f:b8:4d:a1:1e:f3:55:a6:91:27:c7:ca:14:50:c6:03:b2:
8d:f8:19:3f:ec:73:37:72:cd:43:1e:49:d8:35:e5:38:14:a9:
6a:0b:12:e7:74:63:32:37:64:32:a0:b2:cf:37:48:e1:82:26:
ba:50:24:8d:26:1b:09:b7:e1:c0:a0:ac:85:0c:3b:6d:25:f1:
b8:08:aa:b2:61:fa:b6:10:d3:6a:23:77:be:5e:da:40:6b:c6:
dc:e4:bf:00:c5:0b:83:f8:e4:75:07:8b:ac:00:ad:97:01:b0:
68:60:3c:bc:9b:0a:d5:70:20:20:57:13:51:13:e2:27:a8:df:
55:03:90:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:24:48 2026 by rpki-client