Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/CxXRfkpXlTlPWJ2wjSqfFZc69Vw.roa
File: CxXRfkpXlTlPWJ2wjSqfFZc69Vw.roa (raw, json)
Hash identifier: 63orT1mBEvcBgphBmzMsfdldXxJLbPfrBInL5/2JLFc=
Subject key identifier: 0B:15:D1:7E:4A:57:95:39:4F:58:9D:B0:8D:2A:9F:15:97:3A:F5:5C
Certificate issuer: /CN=9dc2009ad4685756cf485092469c62e099dda0a2
Certificate serial: 019EACCF639756F4371BC693BD9974883BD6
Authority key identifier: 9D:C2:00:9A:D4:68:57:56:CF:48:50:92:46:9C:62:E0:99:DD:A0:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncIAmtRoV1bPSFCSRpxi4JndoKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/CxXRfkpXlTlPWJ2wjSqfFZc69Vw.roa
Signing time: Tue 09 Jun 2026 14:35:32 +0000
ROA not before: Tue 09 Jun 2026 14:35:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50095
IP address blocks: 193.254.246.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncIAmtRoV1bPSFCSRpxi4JndoKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:cf:63:97:56:f4:37:1b:c6:93:bd:99:74:88:3b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc2009ad4685756cf485092469c62e099dda0a2
Validity
Not Before: Jun 9 14:35:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b15d17e4a5795394f589db08d2a9f15973af55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:76:76:cc:28:94:33:80:c1:70:13:40:09:
04:a5:3e:48:d2:e9:d8:26:dd:2a:04:35:64:51:48:
16:b7:03:3d:7c:01:af:2d:c8:bc:75:7b:c7:62:2c:
96:95:51:05:90:5f:29:86:87:27:82:de:dc:9f:85:
27:23:d9:f7:53:84:d4:8a:6a:01:fe:6e:99:ab:4b:
44:4d:43:ed:47:34:bc:52:8a:f1:a9:12:1e:3e:13:
39:2c:e1:7f:7e:97:40:b6:56:30:9e:2e:f7:89:45:
8c:fa:ae:dd:dd:ee:3d:e0:95:83:6e:97:d0:f1:a1:
d2:1f:9f:1a:e4:72:6a:07:ba:8f:da:b3:30:cf:0f:
2c:df:59:fd:37:ee:f5:0e:54:42:ea:c3:95:6b:ce:
3a:24:3e:75:eb:f7:02:7a:3b:9d:9e:41:e5:43:97:
6d:09:44:0a:3f:cc:1e:51:94:0f:11:83:97:d5:df:
e2:39:cc:22:ba:1b:00:48:00:88:66:af:0c:b3:3f:
f6:82:ac:dc:ee:0a:ad:ff:46:28:90:a8:ba:dd:14:
7b:b0:28:e5:49:59:de:ff:43:b7:1c:fc:d8:ad:6d:
2e:23:c1:8f:f2:e8:1a:6a:19:fd:5a:84:af:40:44:
9f:d9:20:4c:16:e7:06:95:c4:5f:2a:8e:28:62:63:
42:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:15:D1:7E:4A:57:95:39:4F:58:9D:B0:8D:2A:9F:15:97:3A:F5:5C
X509v3 Authority Key Identifier:
keyid:9D:C2:00:9A:D4:68:57:56:CF:48:50:92:46:9C:62:E0:99:DD:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncIAmtRoV1bPSFCSRpxi4JndoKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/CxXRfkpXlTlPWJ2wjSqfFZc69Vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.254.246.0/23
Signature Algorithm: sha256WithRSAEncryption
04:e3:a6:4b:ec:de:69:a3:fa:d3:0b:9d:46:f2:fb:74:df:d2:
f7:d4:70:54:1c:f1:eb:40:f6:14:59:74:00:fe:0f:26:f1:9b:
38:9b:62:fa:df:da:64:74:8b:5c:35:f2:e7:10:8a:a1:ec:bc:
e8:27:9f:1b:7b:00:ec:48:cd:5a:01:5b:f4:7a:a9:e9:e3:53:
09:48:b7:3b:51:70:f1:05:52:c4:f9:5e:6e:2b:92:c8:50:ad:
80:8e:f4:cc:eb:f0:a7:79:d9:bb:20:e7:b5:06:79:64:b3:22:
87:70:62:56:e6:80:eb:b0:b9:f7:6c:35:8f:cd:43:8e:8f:e1:
74:b9:8d:a2:c3:b4:56:54:c2:29:c6:62:d1:b3:a0:6c:f3:69:
46:17:40:42:f7:e2:1c:10:18:22:0d:31:1a:9a:ed:1d:24:47:
c6:67:77:4d:85:87:f0:2e:09:a7:3c:5c:e7:fc:8d:92:ab:0a:
93:5d:6c:88:fe:0e:db:d1:0f:cb:03:7c:72:c5:bf:41:e5:ce:
fe:69:b2:c9:26:02:2e:a2:c2:85:63:d8:a4:d7:c3:57:0b:a3:
0a:de:33:31:cc:f8:1e:b1:28:d2:81:d2:8e:51:8c:0b:a7:81:
a3:76:7e:27:12:54:b7:6a:f7:d9:da:20:2c:38:f7:9e:f6:c5:
b8:8f:8c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:55:25 2026 by rpki-client