Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/27nZxtjqrhsKmeNau6Mu8UTu9qg.roa
File: 27nZxtjqrhsKmeNau6Mu8UTu9qg.roa (raw, json)
Hash identifier: GU3wDMHTiFASdAwvMqW0bfWi5rSGbCrCyQ5R6PuT9c4=
Subject key identifier: DB:B9:D9:C6:D8:EA:AE:1B:0A:99:E3:5A:BB:A3:2E:F1:44:EE:F6:A8
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 01A0A9CDBB370E232DDE3987B953EA8A5AB9
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/27nZxtjqrhsKmeNau6Mu8UTu9qg.roa
Signing time: Wed 16 Sep 2026 10:40:27 +0000
ROA not before: Wed 16 Sep 2026 10:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198590
IP address blocks: 2a09:3f00:1001::/48 maxlen: 48
2a09:3f00:5f00::/44 maxlen: 44
2a09:3f00:5f10::/44 maxlen: 44
2a09:3f00:5f20::/44 maxlen: 44
2a09:3f00:5fe0::/44 maxlen: 44
2a09:3f00:5ffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:cd:bb:37:0e:23:2d:de:39:87:b9:53:ea:8a:5a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Sep 16 10:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbb9d9c6d8eaae1b0a99e35abba32ef144eef6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5e:ce:3d:04:93:0c:a8:ad:60:1f:18:f1:de:
1e:61:ba:37:ac:1a:50:d4:db:09:5f:3b:21:58:2e:
2e:77:72:e1:3b:90:17:08:73:94:c9:bd:1a:65:be:
7a:4a:df:c5:ad:d7:18:36:c5:1b:b1:1f:c1:1e:4a:
ba:62:3c:04:07:7a:31:83:c7:4b:99:56:ac:76:b5:
6f:92:ee:ed:71:f8:9b:59:b0:02:1a:54:12:85:da:
80:31:74:2a:b8:c9:fd:9f:53:91:9d:24:ac:fc:d4:
19:a3:ee:e6:57:6d:da:64:3d:09:0a:94:8a:26:a2:
05:18:e9:ca:13:ec:d8:a3:c3:0a:61:72:b4:fc:c7:
c3:7f:37:5d:49:99:3b:fb:e2:e9:7b:1b:df:b3:1d:
bf:20:bc:92:a2:42:6d:9a:a4:42:4f:8d:23:64:43:
a6:cd:e2:78:9a:98:cc:72:09:7e:92:09:14:fe:bd:
6e:a8:4e:5e:e8:71:e0:1b:1b:8e:46:ca:8c:95:d1:
b7:99:01:52:ad:82:bd:98:4e:7d:d6:3d:b9:3d:9c:
bc:98:77:7b:2f:b9:19:77:db:4e:bc:ff:31:93:d0:
78:e6:81:b6:b4:4c:43:8d:ba:85:14:ea:35:20:78:
82:ba:27:2d:d8:c0:46:a1:8e:16:8c:ef:22:a1:7f:
1f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B9:D9:C6:D8:EA:AE:1B:0A:99:E3:5A:BB:A3:2E:F1:44:EE:F6:A8
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/27nZxtjqrhsKmeNau6Mu8UTu9qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:1001::/48
2a09:3f00:5f00::-2a09:3f00:5f2f:ffff:ffff:ffff:ffff:ffff
2a09:3f00:5fe0::/44
2a09:3f00:5ffe::/48
Signature Algorithm: sha256WithRSAEncryption
6e:63:44:b2:32:73:19:ce:b3:15:3b:61:b2:74:86:d8:a0:c3:
17:c8:1e:b7:10:7f:72:8f:08:dc:0e:19:8e:3d:78:87:08:3f:
b8:a2:98:cd:ca:a1:e8:05:20:21:b5:cf:66:bf:ec:25:12:3e:
fa:2c:f3:9c:45:32:11:b3:17:7f:2d:b5:0e:85:41:c1:9f:3e:
70:7d:e6:3f:41:21:e0:30:5b:37:5b:74:3a:b2:cc:86:5a:8a:
d8:35:1d:3c:7a:0e:ca:47:30:aa:55:c7:f6:cf:0a:d4:ad:9e:
2a:46:13:7f:b2:46:72:85:85:2b:f9:39:e4:07:e1:f9:8e:ab:
34:42:0b:ef:37:de:dc:29:31:05:8e:cd:a8:a9:b7:cc:e9:d9:
4c:ee:26:92:bf:57:0a:61:69:63:26:b0:4d:6e:6f:95:92:6c:
c0:91:a3:49:2c:ad:f9:84:f8:53:36:d7:40:ae:ee:ab:7e:06:
6d:38:41:56:2b:ac:e1:09:a9:89:f8:cf:9b:c7:13:23:19:ef:
28:70:0f:89:15:51:bc:f7:69:e1:d7:32:7c:03:2c:10:ab:42:
32:99:07:a3:f1:e4:d6:54:10:48:ff:10:99:97:20:be:b2:9e:
a6:96:70:59:76:e8:a4:d1:d0:7d:94:7a:06:9b:4a:1c:da:ae:
d8:19:d8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:53:06 2026 by rpki-client