Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/R003eJ685xL4vI7Rx7erEgImXsE.roa
File: R003eJ685xL4vI7Rx7erEgImXsE.roa (raw, json)
Hash identifier: Kn+zWzH0TeYwPc5g0P4isWFRbz2/1fuiQuV46eT09Fw=
Subject key identifier: 47:4D:37:78:9E:BC:E7:12:F8:BC:8E:D1:C7:B7:AB:12:02:26:5E:C1
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 01A0A9CDBC00B1969873011DEF470E8FC0E2
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/R003eJ685xL4vI7Rx7erEgImXsE.roa
Signing time: Wed 16 Sep 2026 10:40:27 +0000
ROA not before: Wed 16 Sep 2026 10:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219451
IP address blocks: 2a09:3f00:1001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:cd:bc:00:b1:96:98:73:01:1d:ef:47:0e:8f:c0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Sep 16 10:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=474d37789ebce712f8bc8ed1c7b7ab1202265ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:ae:f5:23:46:16:45:4b:90:39:af:1d:32:
93:50:34:1b:bc:9a:7b:12:f9:3d:1f:b4:67:3f:cf:
73:ab:3c:0b:52:97:fb:02:7b:5a:3a:6f:28:fa:a4:
48:29:2a:cb:86:02:e8:9b:b0:ea:a5:35:e6:82:6c:
64:74:ef:c3:14:0c:b1:c9:2d:9d:b5:72:1a:2f:4d:
a9:85:6a:04:3d:ca:47:d4:59:21:5d:7f:96:a6:03:
8d:b6:57:4c:d1:49:07:d9:fe:46:ea:38:c0:96:12:
ab:75:49:5e:19:f9:56:b8:2e:a3:09:0f:10:3e:18:
7a:48:31:1c:06:3f:71:6b:eb:43:2a:3c:c1:d0:bf:
18:06:4c:75:a3:03:6a:3e:20:de:af:9d:45:5d:66:
f5:00:0b:78:7f:49:eb:05:f8:bc:c1:25:02:c2:16:
bc:b0:ca:d0:10:35:0b:81:3a:80:24:89:9c:84:ee:
f2:f2:32:95:fc:13:69:0a:07:51:1c:60:af:5e:5d:
ea:cf:9b:20:51:07:84:b2:b3:5c:3f:88:74:1e:ed:
9c:93:fa:b3:58:36:d8:f9:d5:0e:f1:74:8c:2c:43:
24:1e:66:0b:f7:4d:60:0d:87:b2:b4:65:dc:09:42:
27:db:f7:0f:b6:45:86:43:c2:8b:fb:05:c1:a6:62:
f0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4D:37:78:9E:BC:E7:12:F8:BC:8E:D1:C7:B7:AB:12:02:26:5E:C1
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/R003eJ685xL4vI7Rx7erEgImXsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:1001::/48
Signature Algorithm: sha256WithRSAEncryption
95:b6:6e:a0:58:62:e7:77:b2:07:a5:96:7c:e0:a8:ef:29:a1:
5f:9d:4f:4a:cb:14:1e:ef:ab:3f:bb:31:60:7d:2c:79:cb:9b:
58:0f:64:4b:45:25:cc:9e:b8:3c:b6:ce:de:24:f0:9d:ed:8b:
f7:d9:f3:74:a6:c7:2b:9a:e5:fe:ad:b7:bf:bb:cf:23:b9:e6:
97:60:a0:e8:f6:82:96:cb:17:d3:33:66:c6:e5:07:91:6e:0a:
be:f3:f5:b2:8d:bd:8a:86:0c:d9:1e:e6:90:32:ff:c9:48:ce:
cf:ba:99:84:51:3c:a0:da:e5:7d:5f:dd:ca:f2:50:90:d4:ac:
ac:1c:d9:ec:dc:5d:aa:be:b2:c6:c4:46:17:42:3d:fb:a3:13:
1c:14:39:ef:b3:26:83:e3:f0:11:fa:dd:e7:48:e3:9f:db:78:
0f:7b:90:32:96:4e:71:46:f2:97:1c:9f:5b:41:e5:0b:42:28:
a5:5f:9e:69:b8:10:92:b7:3a:61:00:30:17:4d:f2:91:05:64:
ef:0b:a0:4b:45:c0:6b:d0:4f:d4:d1:b1:d1:0c:eb:fd:f2:5a:
f2:ac:66:1b:fd:f9:60:ea:7a:ca:11:6f:42:43:13:bf:b3:da:
a9:df:e7:74:b7:1e:07:4b:b3:17:4d:63:f8:22:39:5b:b2:a9:
b1:c2:af:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:55:34 2026 by rpki-client