Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/n8QADgm1dPWso58x5J_dtB17PXY.roa
File: n8QADgm1dPWso58x5J_dtB17PXY.roa (raw, json)
Hash identifier: ssbW5Rg2+ABUSNyvfU4y/rxm3UDuCu/GAFH1xVLNZWQ=
Subject key identifier: 9F:C4:00:0E:09:B5:74:F5:AC:A3:9F:31:E4:9F:DD:B4:1D:7B:3D:76
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F9C9A23D3E3336626B22B3B357764C047
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/n8QADgm1dPWso58x5J_dtB17PXY.roa
Signing time: Sun 26 Jul 2026 04:06:15 +0000
ROA not before: Sun 26 Jul 2026 04:06:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219529
IP address blocks: 2a02:2fc0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9c:9a:23:d3:e3:33:66:26:b2:2b:3b:35:77:64:c0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 26 04:06:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fc4000e09b574f5aca39f31e49fddb41d7b3d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:2b:f1:c2:11:ca:2d:04:e3:84:0c:55:12:
24:ea:82:d3:1a:4a:56:83:42:ed:d4:b0:dc:7b:94:
10:04:1d:80:60:95:4c:54:23:62:5b:ae:98:b0:55:
14:40:2c:c8:37:50:8a:7a:4d:80:06:19:10:88:25:
4b:eb:cc:94:b6:da:4d:49:cf:7e:ef:c2:72:69:6f:
6e:cc:6e:b5:6f:2c:4d:61:67:a9:f8:18:4f:4c:8e:
60:66:cd:83:ce:bd:fe:ed:ce:40:45:62:ac:78:6b:
da:81:6f:05:99:2c:98:ce:85:9f:94:77:69:9d:03:
99:c8:84:9a:c3:4c:f5:4e:f3:8b:76:0a:c3:45:39:
85:e4:f6:4d:d5:16:2f:0e:84:8d:c9:0c:84:2f:dc:
8c:1d:0b:9a:52:ba:55:d5:05:80:5e:a7:d0:ca:f5:
94:7d:29:b4:5e:d0:97:21:ed:e9:ed:a7:87:e0:65:
62:1b:9c:54:82:1e:a8:a5:ff:2f:98:87:f7:d0:6d:
67:d1:25:a1:52:fe:ce:5a:23:c9:1b:86:64:cc:1b:
15:1a:e2:81:e1:fc:46:0c:62:f4:74:fd:e0:ac:44:
87:e5:06:9a:cd:67:79:de:60:67:46:22:7e:6f:fd:
e1:3c:6c:2c:2b:38:f4:ba:e7:d0:1f:e8:db:46:cf:
3a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C4:00:0E:09:B5:74:F5:AC:A3:9F:31:E4:9F:DD:B4:1D:7B:3D:76
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/n8QADgm1dPWso58x5J_dtB17PXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2fc0:2::/48
Signature Algorithm: sha256WithRSAEncryption
75:26:63:be:54:2a:6f:4c:2c:29:fe:9e:f0:78:89:5b:1d:ab:
d5:f7:38:8a:fe:84:b7:ae:b1:c1:05:60:6b:91:0f:fc:2d:b4:
28:83:ec:ec:e7:bc:5d:fa:7c:01:6c:75:81:9d:98:ce:28:c6:
03:04:a6:a3:e5:bd:87:8f:d6:c7:a5:ac:a2:7a:a7:4b:b3:f2:
af:8b:2d:05:4a:d8:63:75:a9:e6:15:9b:8e:38:5b:8f:49:4e:
53:39:83:0e:21:4b:56:c7:00:ea:02:da:12:e5:74:27:84:32:
a6:a9:81:d3:55:92:32:21:7f:ba:5b:37:6a:de:3a:00:98:24:
5d:fd:af:b4:66:0a:2e:66:e0:5d:73:49:6d:51:61:60:6a:52:
b3:f6:58:05:68:7e:e8:f4:c1:78:a6:ad:bd:bd:89:34:27:8b:
ae:68:79:6c:8e:a3:d3:88:8a:dd:07:97:c9:b8:5f:86:48:a4:
6b:18:e0:39:0e:7e:59:25:13:d4:7f:93:c7:c7:86:5b:3b:1c:
3d:d8:25:8d:5d:a6:e3:6a:5e:e5:6d:fd:3a:04:b5:2f:86:e0:
51:cd:42:99:07:46:1c:f1:2f:c3:f9:c0:b1:24:1a:d9:cc:94:
d4:85:c8:cf:37:fa:6b:eb:a1:82:77:0f:27:1b:dc:a7:8a:09:
e9:0b:de:2c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ+cmiPT4zNmJrIrOzV3ZMBHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNzI2MDQwNjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmM0MDAwZTA5YjU3NGY1YWNhMzlmMzFlNDlmZGRiNDFkN2IzZDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr0r8cIRyi0E44QMVRIk6oLTGkpW
g0Lt1LDce5QQBB2AYJVMVCNiW66YsFUUQCzIN1CKek2ABhkQiCVL68yUttpNSc9+
78JyaW9uzG61byxNYWep+BhPTI5gZs2Dzr3+7c5ARWKseGvagW8FmSyYzoWflHdp
nQOZyISaw0z1TvOLdgrDRTmF5PZN1RYvDoSNyQyEL9yMHQuaUrpV1QWAXqfQyvWU
fSm0XtCXIe3p7aeH4GViG5xUgh6opf8vmIf30G1n0SWhUv7OWiPJG4ZkzBsVGuKB
4fxGDGL0dP3grESH5QaazWd53mBnRiJ+b/3hPGwsKzj0uufQH+jbRs86lwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJ/EAA4JtXT1rKOfMeSf3bQdez12MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvbjhRQURnbTFkUFdzbzU4eDVKX2R0QjE3UFhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIvwAAC
MA0GCSqGSIb3DQEBCwUAA4IBAQB1JmO+VCpvTCwp/p7weIlbHavV9ziK/oS3rrHB
BWBrkQ/8LbQog+zs57xd+nwBbHWBnZjOKMYDBKaj5b2Hj9bHpayieqdLs/Kviy0F
SthjdanmFZuOOFuPSU5TOYMOIUtWxwDqAtoS5XQnhDKmqYHTVZIyIX+6Wzdq3joA
mCRd/a+0ZgouZuBdc0ltUWFgalKz9lgFaH7o9MF4pq29vYk0J4uuaHlsjqPTiIrd
B5fJuF+GSKRrGOA5Dn5ZJRPUf5PHx4ZbOxw92CWNXabjal7lbf06BLUvhuBRzUKZ
B0Yc8S/D+cCxJBrZzJTUhcjPN/pr66GCdw8nG9ynignpC94s
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:58:54 2026 by rpki-client