Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/9GWtob8gDYTaaXzFtY4-R_Ltq60.roa
File: 9GWtob8gDYTaaXzFtY4-R_Ltq60.roa (raw, json)
Hash identifier: UfkACGVQICdskEEsRgiioCKceX/ZPk2dcaJodps3dBU=
Subject key identifier: F4:65:AD:A1:BF:20:0D:84:DA:69:7C:C5:B5:8E:3E:47:F2:ED:AB:AD
Certificate issuer: /CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Certificate serial: 019C5BC88197290E1DA56CDC1D17DDDB9E55
Authority key identifier: 9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/9GWtob8gDYTaaXzFtY4-R_Ltq60.roa
Signing time: Sat 14 Feb 2026 10:53:12 +0000
ROA not before: Sat 14 Feb 2026 10:53:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201258
IP address blocks: 2a0c:6500:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5b:c8:81:97:29:0e:1d:a5:6c:dc:1d:17:dd:db:9e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Validity
Not Before: Feb 14 10:53:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f465ada1bf200d84da697cc5b58e3e47f2edabad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6c:4f:18:04:b4:b2:f9:3e:28:c8:15:21:69:
08:b3:3a:1b:e7:0d:cf:7e:88:a2:aa:9e:e3:9d:22:
b0:db:28:c1:09:38:bd:45:2c:b3:47:29:42:69:aa:
20:6d:b5:f2:5c:83:3e:e5:2a:6c:23:07:06:3d:ed:
83:ac:e1:c2:57:d7:48:91:ce:39:af:a8:46:b5:c4:
ad:69:5e:01:97:93:92:a5:54:df:2f:6a:59:70:9c:
f8:c4:ee:ca:9d:a6:44:1a:47:03:d2:df:18:03:85:
15:7f:03:bc:91:9e:d7:e8:cf:ed:c6:2b:f3:60:1f:
64:57:dc:ee:e9:33:e2:ef:86:16:eb:2a:e2:08:49:
2a:f4:b3:3b:f9:04:06:b3:cc:eb:9b:4c:e3:8b:dd:
5a:06:29:5f:2e:ba:8b:9f:04:ac:76:31:52:bc:5c:
61:61:08:6c:21:02:91:25:c4:4d:bd:11:a5:56:8e:
3b:49:5a:68:68:ff:41:f9:6d:35:4a:e9:a7:fd:29:
f8:d7:e2:3a:06:2f:f2:85:c6:73:55:47:17:9d:ed:
90:27:4e:df:57:d3:67:89:4d:9c:f9:35:65:f0:e9:
28:83:ae:86:47:8b:b6:50:62:54:0d:f1:dd:ea:6a:
61:4b:7a:82:0d:09:21:5e:1a:7b:20:e0:26:8a:2a:
98:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:65:AD:A1:BF:20:0D:84:DA:69:7C:C5:B5:8E:3E:47:F2:ED:AB:AD
X509v3 Authority Key Identifier:
keyid:9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/9GWtob8gDYTaaXzFtY4-R_Ltq60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:6500:2::/48
Signature Algorithm: sha256WithRSAEncryption
9f:c2:10:5e:c7:9b:bf:6d:5f:26:5b:cd:d6:8b:c5:23:8b:25:
e8:48:5e:1d:92:2e:8d:3d:f0:a6:fc:b2:24:f2:62:7b:d5:8e:
62:94:34:ab:01:cd:78:b8:82:58:bb:ef:fe:6f:7c:12:8a:f0:
0b:69:c7:52:c4:3b:3b:a3:33:b0:da:3a:81:ae:f4:f8:c5:72:
45:26:93:a7:3b:37:7a:07:a0:1d:65:9e:5f:29:d9:11:da:31:
8e:73:f0:31:5d:ec:f5:c3:88:4f:fa:bd:1a:a8:2e:83:c0:57:
23:27:5b:6a:c2:17:b4:b2:28:38:6b:8c:38:bc:fa:c6:7c:ad:
9f:c3:2d:0d:fe:27:19:0f:74:36:33:b6:21:f8:65:02:bc:af:
d4:32:24:ad:42:91:5b:5e:9b:ab:83:1d:b4:e5:2b:a2:7f:a3:
3a:e9:24:4c:f7:8b:0f:c7:cd:a9:5e:ec:f1:c2:2d:b1:26:f4:
64:ad:b7:4d:30:2b:d4:46:52:67:37:d2:88:76:93:ec:c5:20:
c7:02:c0:a7:77:76:8a:9c:59:c0:af:8e:a7:50:86:64:7c:b7:
5f:71:a2:0c:9b:77:47:c6:ab:84:b9:55:3e:38:fe:c8:c8:36:
68:62:e6:21:e3:3c:68:0d:12:1a:4e:74:1a:7b:21:c7:0a:81:
3b:15:c4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:21:09 2026 by rpki-client