Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/nI1n5z6H4QpqTIdE1CU51Zoj8Ug.roa
File: nI1n5z6H4QpqTIdE1CU51Zoj8Ug.roa (raw, json)
Hash identifier: pekKDXCoFGjGVOlGNhx761IGJHBeUQoSqOrucczOuwM=
Subject key identifier: 9C:8D:67:E7:3E:87:E1:0A:6A:4C:87:44:D4:25:39:D5:9A:23:F1:48
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019EAC528C960870F967096967D6DC0E3883
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/nI1n5z6H4QpqTIdE1CU51Zoj8Ug.roa
Signing time: Tue 09 Jun 2026 12:19:11 +0000
ROA not before: Tue 09 Jun 2026 12:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219496
IP address blocks: 2a09:3f00:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:28:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:52:8c:96:08:70:f9:67:09:69:67:d6:dc:0e:38:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jun 9 12:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c8d67e73e87e10a6a4c8744d42539d59a23f148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:32:59:bf:ba:7d:2f:2e:7c:97:50:c0:b8:37:
3e:46:0c:9a:f8:8d:a3:9a:77:7f:7d:4f:aa:7d:6f:
95:0e:82:89:84:af:d4:db:4b:4b:50:39:06:88:0d:
b3:69:3f:5e:34:2f:31:14:21:87:0d:c2:07:e3:ad:
52:5d:df:be:71:f2:dc:42:46:a2:0e:cd:71:19:91:
32:b2:1a:db:c7:7a:17:44:3c:97:de:d5:a5:7b:f6:
5f:bb:81:49:d0:41:39:aa:c5:6e:54:2e:1d:04:e2:
2d:8f:4b:6b:f4:70:d1:57:5a:44:14:87:0f:74:62:
58:0e:b9:d2:03:27:2a:a3:58:e5:4c:85:c3:07:07:
dd:81:ff:01:f3:9e:91:8e:92:83:c9:e3:19:4f:76:
32:f6:12:1f:29:93:f7:71:f8:c8:5b:2a:8e:44:c4:
1e:86:23:1c:06:eb:bf:96:db:c4:5f:d5:a2:94:5b:
d1:cf:12:40:5a:fb:14:c1:3d:4d:79:03:b1:a2:d4:
39:5f:bb:9f:83:41:59:b1:5a:8c:59:23:26:f2:8f:
d0:8d:4b:c9:ab:d9:29:44:fe:48:a5:fb:0e:3a:24:
a5:18:34:c9:99:87:a8:a3:3a:fe:4c:e3:9c:da:73:
78:70:3c:62:32:57:34:4f:8e:dc:d9:06:b8:0a:2d:
58:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8D:67:E7:3E:87:E1:0A:6A:4C:87:44:D4:25:39:D5:9A:23:F1:48
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/nI1n5z6H4QpqTIdE1CU51Zoj8Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:1000::/48
Signature Algorithm: sha256WithRSAEncryption
3b:98:16:6b:84:80:67:4a:55:ac:2a:aa:43:7f:50:08:ed:3f:
4e:c4:1a:86:75:22:4b:f1:2b:5f:54:3e:1f:64:a6:c8:15:48:
d8:c8:b8:4c:e4:73:e6:6a:7f:f2:4c:7d:1b:d8:78:2a:c7:2d:
f9:ef:3c:64:d6:3e:e7:95:a0:4c:a7:d8:9a:b5:71:75:9f:1c:
dd:de:d0:5f:a6:7a:eb:8c:dc:b7:fb:48:b3:60:6b:75:87:25:
95:5f:ac:78:34:f2:64:b9:d0:82:7e:c6:09:65:f8:10:93:16:
55:86:84:c2:54:13:c5:79:1a:dd:76:43:a2:9c:ff:13:36:35:
ea:e4:9d:bf:09:2e:40:df:7b:42:3c:12:0f:5d:c0:ab:c9:91:
ea:03:55:b5:56:54:8b:81:74:f3:3a:4c:ae:6c:0b:6a:b1:06:
97:04:d7:35:cb:a4:1b:48:10:3d:9f:f0:cb:c8:e8:53:ef:96:
41:b8:98:d3:77:23:ce:34:c3:0d:bd:15:85:2e:0e:93:6f:f0:
c8:d3:b2:12:d6:06:ab:5d:a0:87:75:ca:6c:4a:c7:2f:61:a6:
30:e1:b1:c3:8f:8c:46:92:e1:ad:e4:2b:d3:64:5c:54:0b:4d:
e9:25:00:ef:ff:78:b9:73:4c:ae:3a:57:13:e6:9f:14:1b:a1:
4b:d6:c9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:49:59 2026 by rpki-client