Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/04nGKAyUF6nGSn-0CbpqToB-ADg.roa
File: 04nGKAyUF6nGSn-0CbpqToB-ADg.roa (raw, json)
Hash identifier: 5gfuIT6ilGajdYOxkLDaRN30dyX80t2LoUgmLovbsIk=
Subject key identifier: D3:89:C6:28:0C:94:17:A9:C6:4A:7F:B4:09:BA:6A:4E:80:7E:00:38
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019E893629CA6C811BD437765816902C9032
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/04nGKAyUF6nGSn-0CbpqToB-ADg.roa
Signing time: Tue 02 Jun 2026 16:41:28 +0000
ROA not before: Tue 02 Jun 2026 16:41:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214266
IP address blocks: 2a11:8d40::/29 maxlen: 29
2a11:d300::/29 maxlen: 29
2a12:700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:89:36:29:ca:6c:81:1b:d4:37:76:58:16:90:2c:90:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jun 2 16:41:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d389c6280c9417a9c64a7fb409ba6a4e807e0038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:09:b2:f6:e1:81:01:82:6b:d6:f3:c2:ec:
b5:ea:4b:73:c0:b8:4a:61:e0:2b:f1:a6:ff:7b:1f:
e0:3d:1c:cc:86:9e:54:5e:00:de:fa:c0:bd:65:03:
ec:e7:e5:6e:75:37:5c:52:5c:49:22:8e:e6:03:1f:
42:80:bd:65:1c:70:8f:66:dd:80:10:87:95:15:e3:
1e:20:86:9e:c2:76:29:3c:ec:5f:d3:69:c8:9b:13:
cd:e5:f6:f0:3b:76:71:3e:f5:49:33:d8:1b:34:80:
d3:1c:fe:4e:e6:56:c9:ac:23:1f:c8:17:d3:e4:23:
0f:c1:6c:56:01:8d:5d:34:15:b6:00:e2:dd:d5:8b:
9d:14:5c:5a:a4:89:f6:11:02:71:03:91:f4:38:ed:
82:7d:aa:1b:e9:54:04:c3:fb:5b:0d:0a:2a:48:fc:
18:11:8e:ba:25:72:cc:2b:bb:7b:f8:09:e8:c3:00:
4a:07:ac:5d:47:07:05:0f:04:f5:5a:73:3b:e9:ad:
7f:b4:80:01:fe:64:77:f9:8d:d9:81:d6:3d:e0:50:
1c:ec:6e:34:27:8a:4d:bf:cd:5f:d9:60:54:06:e9:
ea:de:41:31:e3:25:f3:d1:7d:9e:1e:90:5e:c5:38:
b4:b8:12:ef:d5:e4:3b:ca:e8:2e:13:cb:c8:44:8d:
e3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:89:C6:28:0C:94:17:A9:C6:4A:7F:B4:09:BA:6A:4E:80:7E:00:38
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/04nGKAyUF6nGSn-0CbpqToB-ADg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8d40::/29
2a11:d300::/29
2a12:700::/29
Signature Algorithm: sha256WithRSAEncryption
7a:a4:4a:7b:dc:73:29:b9:85:40:cc:5b:a7:22:fd:d5:12:d1:
02:70:7f:c3:b8:02:46:f2:f1:64:2d:a8:d9:3d:cc:e5:f4:09:
7d:2a:07:2e:c4:c8:5e:2c:c6:7b:c9:48:51:b6:ed:cf:44:05:
8e:cc:42:79:c0:7a:5a:a4:74:5a:e6:9f:be:56:35:37:93:e6:
5b:7d:59:c6:f7:64:6f:34:37:9a:65:71:c2:f6:1f:5f:e2:ff:
39:f7:01:48:7e:77:71:64:a3:ca:c2:6f:b7:96:40:b3:ce:a1:
b0:be:97:3d:dc:64:5b:69:a0:7a:8e:fb:54:85:85:6c:50:b1:
f0:cf:49:0a:ef:23:bd:87:4b:9a:10:a4:43:1f:20:6c:d4:23:
a3:2b:8a:4e:dc:14:ff:39:0b:90:29:b3:3a:5e:c1:da:c3:c7:
c0:76:2c:31:6e:de:8d:5c:d1:d6:29:54:38:bc:38:38:da:81:
fb:3a:35:cc:c6:0d:a8:72:30:12:6c:5d:37:b8:ef:4f:e1:69:
e5:b5:33:12:da:e2:c2:48:8d:5e:bd:55:1f:76:a0:3b:03:b7:
b0:4a:c7:64:dc:7a:67:52:4a:a6:c8:18:aa:d1:46:fe:84:b0:
92:5b:f0:dc:30:3a:59:1f:24:9e:6a:45:de:61:e9:7a:85:12:
f2:13:de:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:57 2026 by rpki-client