Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/q9DHafxoeTPjM4Ui5RgVk2LzXWM.roa
File: q9DHafxoeTPjM4Ui5RgVk2LzXWM.roa (raw, json)
Hash identifier: rCf8W+WABC8JuQvFYaz+kw75gCI3ALvZILbNEmKt6UM=
Subject key identifier: AB:D0:C7:69:FC:68:79:33:E3:33:85:22:E5:18:15:93:62:F3:5D:63
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 01A1A99CF59F8A65D9B33BD0EE5B3CD83C35
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/q9DHafxoeTPjM4Ui5RgVk2LzXWM.roa
Signing time: Thu 05 Nov 2026 02:49:58 +0000
ROA not before: Thu 05 Nov 2026 02:49:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219412
IP address blocks: 2a09:3f00:3c00::/40 maxlen: 48
2a09:3f00:3c74::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 02:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:9c:f5:9f:8a:65:d9:b3:3b:d0:ee:5b:3c:d8:3c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Nov 5 02:49:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abd0c769fc687933e3338522e518159362f35d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:fc:30:5e:49:45:6b:74:fd:eb:bf:88:c2:
7d:19:6b:dd:7d:77:2b:3e:a0:02:1b:30:fc:53:7b:
d5:18:73:72:87:a7:b4:11:49:35:80:a1:15:4c:32:
dc:7b:a9:83:06:47:20:a0:c6:0f:43:d7:1c:2b:c8:
37:d8:87:bb:ad:b0:5f:9b:71:34:da:e4:f9:13:42:
52:80:fc:72:26:15:a6:f0:98:6b:a7:70:11:29:b7:
f6:99:a7:df:a3:ba:6b:a0:94:48:78:2c:47:d6:66:
6f:77:86:ee:66:40:e1:c5:95:c8:91:65:58:b5:b7:
65:37:9c:74:a0:12:c5:12:bd:66:58:12:51:88:02:
53:ea:95:5c:61:1e:24:2c:6e:4d:e0:68:76:96:28:
e1:ca:9c:2a:c9:b9:ed:94:6f:f5:9d:a8:7f:bc:12:
98:6d:c4:e6:e9:03:d4:ac:ad:7c:dc:72:c7:6e:b5:
8f:6e:05:e6:12:ca:c1:62:fc:98:ec:80:17:d6:f5:
e1:26:49:ff:fa:78:35:86:04:05:14:c9:8a:91:ea:
9c:a1:39:99:a0:1c:61:6b:55:99:2e:17:5f:51:36:
17:08:9d:cd:ee:bc:80:52:bf:1a:a6:d0:b5:ab:38:
cf:c4:30:3d:c4:6b:b3:35:db:4d:01:b6:4a:e6:90:
56:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D0:C7:69:FC:68:79:33:E3:33:85:22:E5:18:15:93:62:F3:5D:63
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/q9DHafxoeTPjM4Ui5RgVk2LzXWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:3c00::/40
Signature Algorithm: sha256WithRSAEncryption
a8:9b:89:b0:6d:00:5f:71:82:f6:ab:ee:e8:6d:48:91:38:25:
78:7a:51:8a:24:4b:a9:0e:c4:45:fd:02:7f:12:c4:f5:f2:95:
63:f6:ae:39:a7:30:13:61:33:f8:56:05:70:3c:cc:1e:b2:b7:
9b:9e:59:63:ad:a8:5b:be:dd:8a:d0:f9:a0:e4:c6:a9:19:2c:
d2:db:ba:a4:a7:9f:86:a9:79:67:02:f9:73:f0:fe:4a:b9:d4:
ec:09:92:2e:52:94:6c:1f:80:69:2e:c4:d1:b0:56:ee:ca:a2:
d6:95:db:7a:61:f2:da:f4:aa:75:0e:fe:c7:92:46:5a:09:61:
d5:1b:b4:24:1c:3b:77:c1:6b:13:f6:1e:d7:8f:ee:b5:4b:7e:
c9:e2:58:90:7f:34:02:6c:8f:a1:50:67:6f:9b:90:01:fd:58:
2d:e7:a9:a2:6e:0b:cd:51:5c:b9:0d:7a:c9:f7:b5:11:18:07:
13:f7:d8:88:c4:68:61:d3:c3:c0:28:74:dc:95:70:58:1c:41:
f0:f9:21:47:60:79:fe:63:69:d0:e1:67:f5:bb:ee:14:b7:f2:
93:c5:82:a8:9b:8b:cb:72:77:02:a0:66:3d:42:cc:99:5b:d8:
51:27:ed:96:82:f4:5b:b1:17:59:b5:89:fc:80:7f:9a:a8:0a:
86:09:2c:b2
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaGpnPWfimXZszvQ7ls82Dw1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NzE2MDE4MTczOTU2OGU1NzhlMWI1ZjU3OTc2YTYwMzk4
MDYyZTYwHhcNMjYxMTA1MDI0OTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmQwYzc2OWZjNjg3OTMzZTMzMzg1MjJlNTE4MTU5MzYyZjM1ZDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzP8MF5JRWt0/eu/iMJ9GWvdfXcr
PqACGzD8U3vVGHNyh6e0EUk1gKEVTDLce6mDBkcgoMYPQ9ccK8g32Ie7rbBfm3E0
2uT5E0JSgPxyJhWm8Jhrp3ARKbf2maffo7proJRIeCxH1mZvd4buZkDhxZXIkWVY
tbdlN5x0oBLFEr1mWBJRiAJT6pVcYR4kLG5N4Gh2lijhypwqybntlG/1nah/vBKY
bcTm6QPUrK183HLHbrWPbgXmEsrBYvyY7IAX1vXhJkn/+ng1hgQFFMmKkeqcoTmZ
oBxha1WZLhdfUTYXCJ3N7ryAUr8aptC1qzjPxDA9xGuzNdtNAbZK5pBWFQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFKvQx2n8aHkz4zOFIuUYFZNi811jMB8GA1UdIwQY
MBaAFDZxYBgXOVaOV44bX1eXamA5gGLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm5GZ0dCYzVWbzVYamh0ZlY1ZHFZRG1BWXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wNDVmNzAtOWVhNS00MmEzLTg3ODYt
ZWU4Y2ZkZDJlZDk0LzEvcTlESGFmeG9lVFBqTTRVaTVSZ1ZrMkx6WFdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8wNDVmNzAtOWVhNS00MmEzLTg3ODYtZWU4Y2ZkZDJlZDk0
LzEvTm5GZ0dCYzVWbzVYamh0ZlY1ZHFZRG1BWXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgk/ADww
DQYJKoZIhvcNAQELBQADggEBAKibibBtAF9xgvar7uhtSJE4JXh6UYokS6kOxEX9
An8SxPXylWP2rjmnMBNhM/hWBXA8zB6yt5ueWWOtqFu+3YrQ+aDkxqkZLNLbuqSn
n4apeWcC+XPw/kq51OwJki5SlGwfgGkuxNGwVu7KotaV23ph8tr0qnUO/seSRloJ
YdUbtCQcO3fBaxP2HteP7rVLfsniWJB/NAJsj6FQZ2+bkAH9WC3nqaJuC81RXLkN
esn3tREYBxP32IjEaGHTw8AodNyVcFgcQfD5IUdgef5jadDhZ/W77hS38pPFgqib
i8tydwKgZj1CzJlb2FEn7ZaC9FuxF1m1ifyAf5qoCoYJLLI=
-----END CERTIFICATE-----
Generated at Thu Nov 5 12:46:53 2026 by rpki-client