Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/h0HXUbU7K9M7vsEH0MTzY9tBW24.roa
File: h0HXUbU7K9M7vsEH0MTzY9tBW24.roa (raw, json)
Hash identifier: KinjtYYkU6EBuqBQ4h9VrRMUF1Ql7tgkKGymIZ7XUvg=
Subject key identifier: 87:41:D7:51:B5:3B:2B:D3:3B:BE:C1:07:D0:C4:F3:63:DB:41:5B:6E
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 01A0B059C2E4A876A35A1493E5DB1156403D
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/h0HXUbU7K9M7vsEH0MTzY9tBW24.roa
Signing time: Thu 17 Sep 2026 17:11:07 +0000
ROA not before: Thu 17 Sep 2026 17:11:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218643
IP address blocks: 2a09:3f00:3900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:59:c2:e4:a8:76:a3:5a:14:93:e5:db:11:56:40:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Sep 17 17:11:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8741d751b53b2bd33bbec107d0c4f363db415b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:ee:c5:32:16:a7:b8:e7:39:71:c3:ec:17:
64:4c:4d:53:65:b5:9b:ff:53:f0:cc:73:22:de:94:
be:8a:e8:82:f5:20:c5:0a:df:4b:98:cc:b8:5a:e1:
53:09:d5:12:2f:e6:c6:21:29:b6:cd:f3:1c:8b:e2:
cf:ab:17:d6:d1:49:44:f3:3b:49:14:44:94:1b:6d:
88:63:19:9b:55:58:29:11:66:3b:cb:99:8e:5b:d1:
d7:d6:89:87:51:a6:65:9e:c2:39:4a:cb:cf:79:84:
25:00:ec:18:03:52:35:48:80:36:c0:fe:c8:f6:c5:
f1:18:a5:9d:dc:eb:73:22:91:d5:fe:18:df:05:05:
2b:8c:14:ff:30:d9:3b:8b:57:a9:a1:42:a5:bd:c4:
ce:70:4c:f5:ab:8d:bf:5d:2d:00:70:db:07:80:a5:
8e:b0:58:6a:30:2f:14:9d:74:78:38:81:d1:e5:da:
aa:10:b0:97:c4:22:0f:cc:d1:2b:e5:8c:2d:51:20:
fa:60:f0:50:75:55:10:64:4e:03:44:a1:e2:37:13:
36:bf:81:02:56:ab:29:4a:7b:cf:1a:da:d7:3e:1f:
33:42:1e:b8:90:10:25:07:0c:99:73:47:74:ed:1d:
68:31:12:a3:c7:19:64:06:8a:ea:1c:cb:3c:18:f6:
82:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:41:D7:51:B5:3B:2B:D3:3B:BE:C1:07:D0:C4:F3:63:DB:41:5B:6E
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/h0HXUbU7K9M7vsEH0MTzY9tBW24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:3900::/40
Signature Algorithm: sha256WithRSAEncryption
04:a5:68:2d:9f:32:fd:60:61:b7:92:e2:c8:00:28:80:9f:c7:
7e:17:ed:28:93:03:e4:bb:15:e3:f1:08:a8:38:b7:7c:c1:1e:
ba:f7:ca:60:cb:6e:57:35:5d:bd:54:58:c9:a1:cd:95:8c:ee:
18:90:f8:48:49:c2:bd:e6:25:45:26:fb:40:4f:fa:c4:90:e2:
3b:65:50:fa:cd:20:d1:98:6e:9e:ec:67:60:50:06:18:f7:1b:
0a:c1:2e:91:ed:dc:aa:51:a3:87:a6:68:49:04:83:64:4e:78:
da:d1:e3:e8:b1:16:13:e1:8d:9f:9f:38:87:80:69:5d:5c:53:
9f:56:3c:59:4b:c7:c7:9f:1b:74:c0:47:4d:51:02:35:aa:e5:
e3:fe:3b:85:34:a6:d4:81:68:0c:21:2c:18:c9:82:e9:38:18:
24:ec:39:9d:0e:95:f8:1c:67:c5:0c:a7:86:97:bd:8d:23:79:
43:e8:67:61:4e:a2:98:9e:4a:52:aa:61:1f:34:a0:6c:40:03:
2d:e5:c8:ff:8b:1a:92:5b:5b:46:18:ee:23:64:51:b8:42:73:
71:7d:02:eb:df:bf:79:b5:32:a5:65:f3:4e:26:2a:49:67:8f:
87:c9:19:e7:64:52:0b:37:50:c8:7a:1a:2a:ec:e1:a2:83:0e:
0e:16:32:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:22:17 2026 by rpki-client