Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/zxS7b6yVR14oe12sZQUwO45MCmA.roa
File: zxS7b6yVR14oe12sZQUwO45MCmA.roa (raw, json)
Hash identifier: 67PhkrGLzzaqqGLvHpVTc8yRwK12DF8fO7mPyvsGoC0=
Subject key identifier: CF:14:BB:6F:AC:95:47:5E:28:7B:5D:AC:65:05:30:3B:8E:4C:0A:60
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019D823E679A5C1BB5C44754096BB5F13FF5
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/zxS7b6yVR14oe12sZQUwO45MCmA.roa
Signing time: Sun 12 Apr 2026 15:10:20 +0000
ROA not before: Sun 12 Apr 2026 15:10:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a0c:9a40:8060::/44 maxlen: 44
2a0c:9a40:8b20::/48 maxlen: 48
2a0c:9a40:8b40::/48 maxlen: 48
2a0c:9a40:9c10::/44 maxlen: 48
2a0c:9a40:9c20::/44 maxlen: 48
2a0c:9a40:9c90::/44 maxlen: 48
2a0c:9a40:9ca0::/44 maxlen: 48
2a0e:7d45::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:82:3e:67:9a:5c:1b:b5:c4:47:54:09:6b:b5:f1:3f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Apr 12 15:10:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf14bb6fac95475e287b5dac6505303b8e4c0a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f9:5b:4b:ef:a7:3e:3b:da:8c:0e:02:30:0a:
a4:98:a7:9d:ac:1d:e4:e9:0f:c1:cd:f6:95:df:36:
f7:05:d3:1d:f9:e8:d7:71:14:d0:83:a7:ee:0e:82:
f2:68:7b:4e:73:ae:69:a9:22:7a:9b:38:b5:fe:73:
cf:3b:31:d1:68:03:1e:a1:95:2d:3a:ad:ec:fc:af:
aa:d7:12:86:59:04:7b:ad:b2:40:91:6d:ef:e5:a8:
35:11:62:b6:2e:52:e7:e4:c2:52:63:80:05:68:9e:
d3:f1:cb:a6:56:6d:a5:23:03:f7:c6:8b:d1:07:ec:
34:a9:29:c7:01:20:3a:67:11:d4:18:13:79:2c:d2:
e2:85:60:bf:16:6f:93:fe:d2:bb:d5:0d:06:c9:a9:
13:0e:01:5f:2d:9b:12:d2:5e:d4:5b:2c:66:45:10:
20:09:09:48:51:ad:dc:47:c5:c7:2e:e5:9f:7a:18:
20:9b:86:7c:9b:c7:e5:8b:8d:15:2d:f4:f4:06:fd:
05:8c:56:5e:f2:e3:70:29:5c:73:db:0a:25:ba:bf:
4b:68:46:a0:df:bf:c5:48:40:a1:b8:8a:6d:f7:ef:
a5:a4:bc:e6:97:07:7c:bf:13:a6:51:c9:5a:a6:4a:
14:bc:db:d8:0a:a7:b3:ea:ec:56:a7:8d:aa:3b:62:
8d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:14:BB:6F:AC:95:47:5E:28:7B:5D:AC:65:05:30:3B:8E:4C:0A:60
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/zxS7b6yVR14oe12sZQUwO45MCmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8060::/44
2a0c:9a40:8b20::/48
2a0c:9a40:8b40::/48
2a0c:9a40:9c10::-2a0c:9a40:9c2f:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:9c90::-2a0c:9a40:9caf:ffff:ffff:ffff:ffff:ffff
2a0e:7d45::/32
Signature Algorithm: sha256WithRSAEncryption
c8:a3:7a:72:be:fd:30:5b:93:5b:6a:aa:be:a8:1d:94:50:97:
06:c1:dc:6b:27:e4:a6:93:c1:33:d4:2d:2e:5a:b7:c6:56:ee:
8f:47:bc:03:0c:fc:14:ea:d2:bb:fe:35:46:61:80:90:a9:db:
01:3f:27:a8:4d:90:e5:77:e1:f0:24:fc:70:a8:62:f6:66:55:
09:41:e6:ed:5d:54:89:c8:44:85:a4:53:00:89:d7:24:5c:7d:
fb:96:ec:fe:54:1d:e4:ae:f0:1b:ce:8e:3e:d2:ba:39:4a:d4:
7e:f4:8c:6c:60:8c:08:d7:be:6c:b9:4f:4f:cb:9d:73:1f:78:
6a:21:54:e5:03:85:8d:64:d0:87:2a:1c:e8:bc:4a:67:de:f8:
47:69:59:05:4d:50:2c:fd:d5:1c:40:a6:05:cf:8b:9b:dc:68:
bd:37:4e:31:78:cb:07:f4:1f:b7:96:2f:2f:90:e0:b0:b3:59:
0f:dc:43:ff:71:ab:2c:49:12:9d:e4:15:e8:2e:28:56:0f:c1:
73:dc:71:80:5b:7c:9f:e6:e8:41:4b:fd:30:39:3f:59:3f:6c:
4e:73:36:d5:52:01:d9:31:56:a1:82:b8:ee:6c:c9:ad:b8:04:
16:e1:9a:fe:3b:d5:8f:e3:04:d8:20:7f:96:b3:d2:68:bc:d3:
3b:fa:29:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:00:17 2026 by rpki-client