Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ccEx9SOUx4m-tHjhTok2nkxXIt8.roa
File: ccEx9SOUx4m-tHjhTok2nkxXIt8.roa (raw, json)
Hash identifier: hHnnV4OUqt3+HNEP/62ZeDafUCLIXf+qqG6fUJLUQ/o=
Subject key identifier: 71:C1:31:F5:23:94:C7:89:BE:B4:78:E1:4E:89:36:9E:4C:57:22:DF
Certificate issuer: /CN=9e06003c5715874fdab0e31572280ef8e4e4798c
Certificate serial: 01A066652872F129DD588B64328BEE504CD5
Authority key identifier: 9E:06:00:3C:57:15:87:4F:DA:B0:E3:15:72:28:0E:F8:E4:E4:79:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngYAPFcVh0_asOMVcigO-OTkeYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ccEx9SOUx4m-tHjhTok2nkxXIt8.roa
Signing time: Thu 03 Sep 2026 08:31:40 +0000
ROA not before: Thu 03 Sep 2026 08:31:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218773
IP address blocks: 2a0d:ae41::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngYAPFcVh0_asOMVcigO-OTkeYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:65:28:72:f1:29:dd:58:8b:64:32:8b:ee:50:4c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e06003c5715874fdab0e31572280ef8e4e4798c
Validity
Not Before: Sep 3 08:31:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71c131f52394c789beb478e14e89369e4c5722df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:4c:52:94:38:9c:e1:a3:55:d2:54:bb:6b:
a5:63:92:20:19:9f:e1:ca:2b:fc:05:fb:8b:ef:61:
6e:7e:8f:b6:0f:10:1a:c0:cd:9f:d1:c6:8e:92:05:
a7:d3:01:c0:ad:3b:3f:33:49:5d:8f:c6:02:98:0a:
2b:15:fe:36:f4:6d:9b:b1:1a:d1:f3:b3:ae:d9:fc:
b3:89:4b:f9:c8:28:e5:1c:09:9c:8c:61:56:7f:29:
a4:7c:fb:30:13:59:b0:84:c9:b4:54:e2:69:b9:68:
ad:42:10:c4:6f:1a:c2:51:7d:c6:1a:e3:77:aa:b8:
7a:dd:36:88:62:16:99:c2:40:ed:ae:2f:18:3a:08:
83:9e:9d:b7:89:c3:76:04:ff:25:fd:d8:66:6f:16:
34:09:bc:32:52:5b:7a:60:87:55:ed:c3:d8:42:39:
28:24:3d:8e:2a:81:bb:c5:5e:71:dc:bb:8a:4d:3b:
f5:b1:6c:11:79:5e:5a:4a:b6:fb:6b:ea:76:ed:c0:
7e:fe:83:54:90:17:ce:f8:92:9c:57:64:53:01:be:
8c:2f:04:48:ea:af:a6:65:9b:a7:c5:1f:f4:10:b5:
4f:af:d1:fd:2e:36:21:ef:dd:89:7d:ee:2f:87:55:
7e:bd:2a:2d:a0:e8:5e:29:44:e6:e5:c7:12:1b:57:
3d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C1:31:F5:23:94:C7:89:BE:B4:78:E1:4E:89:36:9E:4C:57:22:DF
X509v3 Authority Key Identifier:
keyid:9E:06:00:3C:57:15:87:4F:DA:B0:E3:15:72:28:0E:F8:E4:E4:79:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngYAPFcVh0_asOMVcigO-OTkeYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ccEx9SOUx4m-tHjhTok2nkxXIt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:ae41::/32
Signature Algorithm: sha256WithRSAEncryption
84:05:03:b0:08:e8:91:65:19:05:db:e8:4b:78:1e:6a:3d:4e:
f4:af:76:25:38:89:eb:ca:e4:49:2f:0c:4f:b2:b7:08:b2:69:
f6:ec:94:ef:95:1f:78:63:85:76:86:25:64:c7:ac:53:f2:3e:
fd:57:39:7f:ba:bf:73:9c:3a:aa:1f:ee:89:ad:76:89:99:28:
93:8a:88:89:33:fe:2b:19:0a:58:ce:33:b4:7c:e0:e0:fb:65:
27:80:b8:81:43:84:11:4b:7a:70:5f:4c:df:d0:f5:2d:73:9e:
92:4c:74:54:da:54:79:fc:58:7f:68:36:3b:5c:d2:aa:61:64:
b3:47:5e:7b:29:f3:df:01:be:5d:67:01:13:8c:72:26:09:8c:
b3:75:e3:b1:a9:e5:94:1d:99:82:fb:56:6d:56:3c:e8:71:16:
ec:39:58:34:da:ea:64:a4:12:03:6e:85:93:07:23:46:0d:f9:
cd:83:f8:f3:0f:7a:8a:b1:3c:72:e8:12:2d:1c:05:9a:60:dc:
af:9f:0c:f9:fd:50:a9:19:76:5e:ba:d4:f0:7d:7c:a1:0c:c9:
d1:55:bb:a3:8e:f7:b3:e2:b1:e9:6f:d9:1b:9e:3a:03:03:64:
8a:e7:ee:95:8e:e8:f6:9d:5c:e9:10:46:76:66:6f:aa:b3:80:
82:42:37:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:51:03 2026 by rpki-client