Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/h7fJ9PZXrdnVDueCGQp916WVcpU.roa
File: h7fJ9PZXrdnVDueCGQp916WVcpU.roa (raw, json)
Hash identifier: o3hUbeKh+Kwda8o8pZqJ/j9hP09SZ9Swn9kU9datUaA=
Subject key identifier: 87:B7:C9:F4:F6:57:AD:D9:D5:0E:E7:82:19:0A:7D:D7:A5:95:72:95
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019EB5D8A72A4733CD64FDE2268649DD928F
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/h7fJ9PZXrdnVDueCGQp916WVcpU.roa
Signing time: Thu 11 Jun 2026 08:42:15 +0000
ROA not before: Thu 11 Jun 2026 08:42:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214266
IP address blocks: 2a09:c440::/29 maxlen: 29
2a10:fac0::/29 maxlen: 29
2a11:3900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:d8:a7:2a:47:33:cd:64:fd:e2:26:86:49:dd:92:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 11 08:42:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87b7c9f4f657add9d50ee782190a7dd7a5957295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4b:aa:9c:f5:1d:93:50:76:c3:c0:1e:4d:a6:
38:f3:b2:26:4f:eb:76:fe:36:54:a2:d2:c2:41:6d:
18:6b:ab:f7:f9:d1:f9:b2:c6:21:5b:de:d9:ca:0b:
86:f1:6b:24:78:92:58:b9:ed:a5:08:69:24:17:8f:
d0:a9:58:52:9b:c8:10:b4:53:a3:33:99:9a:03:1b:
5a:b0:d4:af:0c:51:a4:d0:94:e5:18:cb:da:44:6d:
40:0f:b1:2c:5f:e2:21:74:fa:f5:63:b2:f3:e8:0c:
9e:37:27:71:5d:94:10:49:11:ea:b6:71:86:30:e3:
48:2c:d8:d4:dc:a0:e8:ae:0a:80:0f:28:b3:a2:68:
05:b1:3b:21:1f:8b:da:75:c3:98:7d:25:a9:9b:0f:
0f:14:ac:e0:be:5f:b8:3e:a8:44:3f:01:9f:6a:cc:
10:1a:1b:77:68:b7:25:44:76:d5:4e:58:17:a5:43:
54:50:64:75:1d:25:c6:17:d0:7c:92:a7:6b:37:84:
7a:4b:02:18:19:fc:1c:01:51:fd:5d:ec:88:38:44:
aa:54:d3:74:61:3a:7c:59:74:19:6b:c2:bc:07:fe:
61:ea:9c:86:e0:a5:5e:1c:ac:29:70:88:c8:60:ec:
6c:5d:56:03:49:fa:41:d9:de:34:0f:fa:12:8d:8a:
50:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B7:C9:F4:F6:57:AD:D9:D5:0E:E7:82:19:0A:7D:D7:A5:95:72:95
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/h7fJ9PZXrdnVDueCGQp916WVcpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:c440::/29
2a10:fac0::/29
2a11:3900::/29
Signature Algorithm: sha256WithRSAEncryption
7e:27:f9:2d:0f:7d:ef:86:44:b8:c1:82:6e:06:5a:32:cd:5d:
55:64:0d:24:00:2d:ad:36:b8:56:cf:65:60:e5:20:38:6e:98:
e8:ac:5d:0a:90:0c:2e:36:79:6f:0c:41:62:c3:fe:0b:71:b9:
a0:d8:cd:c9:7b:81:54:ae:1e:17:11:c0:11:c4:f4:5a:4d:93:
01:63:d1:f3:d1:0c:8d:24:ef:ca:30:10:9c:f1:b0:42:71:c1:
37:a5:50:15:3a:03:17:f1:fe:a7:42:46:07:a2:02:90:1c:bf:
4d:36:9f:97:05:12:13:ec:fc:cd:4b:c3:f6:ba:c2:41:bc:a1:
11:f0:d2:0e:2d:ba:78:7c:51:66:22:51:b4:97:cf:02:6e:9a:
81:af:59:fe:23:0d:a0:20:dd:aa:d2:41:cb:ed:ee:f5:a3:71:
9c:db:8e:53:9b:4a:d8:b1:f9:ca:b7:da:6a:dc:d1:77:0d:6f:
0f:e1:f3:1b:e1:e6:5d:0d:89:70:f9:4a:89:a0:cb:5e:fb:ca:
36:2f:b0:86:ab:42:a6:be:2d:44:d6:9c:27:f6:af:c2:5a:53:
bc:ad:56:4f:70:e2:15:50:69:69:a8:a7:0e:fd:81:a2:c8:52:
ea:ef:6a:62:9a:0e:34:a1:83:68:ff:f0:bc:0e:ac:ac:08:98:
c8:3b:1d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:46 2026 by rpki-client