Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/e_cXOrDWwR3TeN2c1Kr1PKuViBk.roa
File: e_cXOrDWwR3TeN2c1Kr1PKuViBk.roa (raw, json)
Hash identifier: kqkj5A92+iThaqjqDCNYYmFmC0iddYkUAgisdKJ0pF4=
Subject key identifier: 7B:F7:17:3A:B0:D6:C1:1D:D3:78:DD:9C:D4:AA:F5:3C:AB:95:88:19
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019FA8B8D2022F47EC2AAB754BC75ABDFFF0
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/e_cXOrDWwR3TeN2c1Kr1PKuViBk.roa
Signing time: Tue 28 Jul 2026 12:35:12 +0000
ROA not before: Tue 28 Jul 2026 12:35:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60445
IP address blocks: 2a09:3f01::/32 maxlen: 32
2a09:3f01::/48 maxlen: 48
2a09:3f01:88::/48 maxlen: 48
2a09:3f01:90::/48 maxlen: 48
2a09:3f01:92::/48 maxlen: 48
2a09:3f01:94::/48 maxlen: 48
2a09:3f01:8888::/48 maxlen: 48
2a09:3f01:8890::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:35:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:b8:d2:02:2f:47:ec:2a:ab:75:4b:c7:5a:bd:ff:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jul 28 12:35:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bf7173ab0d6c11dd378dd9cd4aaf53cab958819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:61:37:bc:45:10:e3:63:ae:fc:59:82:80:
11:a6:a0:f4:af:00:96:a3:c7:4f:56:18:79:c5:10:
1b:2b:5c:f6:4c:57:a4:da:53:54:91:72:92:cb:52:
44:a3:af:79:73:ef:e9:b1:65:71:e3:b2:4d:4d:90:
a5:ed:33:16:8a:83:bf:58:b7:4c:ee:42:17:68:7f:
45:7b:e7:a3:97:a8:e2:cd:c6:e1:d1:8f:74:76:bf:
45:f0:b0:25:54:e7:cf:b8:82:eb:33:bc:1d:d7:07:
ba:99:9c:9d:66:4b:42:60:e6:d6:2f:87:51:3e:1c:
c3:46:f3:7b:ef:f7:3d:8c:62:59:1a:14:e6:35:41:
17:00:7a:fa:2b:9d:42:a0:58:52:ee:2b:de:59:b3:
c2:eb:56:d5:4c:fb:35:0a:47:1e:cd:f0:5a:5d:67:
97:9b:7f:ee:e7:38:2b:4a:7a:f7:bc:e9:53:1b:0d:
49:a8:f5:f0:77:f4:6c:a0:89:87:18:f7:f3:d1:79:
00:84:6c:6b:fb:eb:cb:08:51:e3:55:cb:8e:71:9a:
a9:30:4c:0c:89:26:81:55:e7:30:cb:6c:8c:09:7c:
39:47:5f:f6:62:a2:ea:a7:b7:4f:79:c7:8d:78:04:
87:2e:b5:5d:08:10:a7:ad:a4:22:1f:38:0e:ec:5e:
34:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F7:17:3A:B0:D6:C1:1D:D3:78:DD:9C:D4:AA:F5:3C:AB:95:88:19
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/e_cXOrDWwR3TeN2c1Kr1PKuViBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f01::/32
Signature Algorithm: sha256WithRSAEncryption
6a:6d:50:9a:fc:98:78:d9:83:ea:e8:60:82:24:82:c4:f2:89:
27:4d:c7:95:97:93:26:0d:93:99:43:9a:a9:09:a3:a3:a6:54:
2d:04:6c:71:d2:6b:db:f4:aa:f0:b3:ab:a3:05:dc:90:d8:87:
93:24:1a:ef:61:c0:b3:0d:ee:28:7b:d0:07:51:dc:dd:1f:f4:
9a:4c:78:ee:95:36:da:b4:71:ea:44:bb:69:42:d3:92:5c:aa:
84:85:dd:0e:eb:bc:d9:80:1c:f1:c7:cb:3c:d7:16:3a:b1:c8:
df:4b:6c:bf:ca:d8:1e:76:ae:2d:48:d5:80:65:fe:f4:d4:98:
3b:23:00:1c:62:c2:c2:af:88:fe:b1:82:1c:70:34:56:4a:2c:
f6:4b:e9:ad:65:34:48:3d:c4:c9:00:6c:0e:c8:90:0d:23:79:
9c:dc:40:e8:98:7a:a2:f1:cb:47:c2:92:cc:d7:97:b7:9b:3e:
86:9c:bb:ab:df:21:85:e1:35:92:90:0e:82:0b:c3:27:74:17:
15:63:f6:dd:22:2f:f1:c1:92:54:a4:73:0d:8f:61:a2:16:bd:
f8:6b:7e:94:f6:25:c3:e1:b8:c2:a0:ac:4a:c4:93:f9:dc:78:
38:22:ce:ba:8e:b3:8d:f9:a8:5c:fa:ef:84:e8:61:97:5e:34:
3d:55:f1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:57:05 2026 by rpki-client