Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/O9jUye_cbKcm9Uy8kmH55AFVH2c.roa
File: O9jUye_cbKcm9Uy8kmH55AFVH2c.roa (raw, json)
Hash identifier: U5stWVRjYj7F0t823t5EZJnOj8hVpLjHJNc2rs4PEwo=
Subject key identifier: 3B:D8:D4:C9:EF:DC:6C:A7:26:F5:4C:BC:92:61:F9:E4:01:55:1F:67
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019D73AB9FB8EB5E76D11F84AF6E09A186C2
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/O9jUye_cbKcm9Uy8kmH55AFVH2c.roa
Signing time: Thu 09 Apr 2026 19:15:20 +0000
ROA not before: Thu 09 Apr 2026 19:15:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34567
IP address blocks: 2a0d:8cc0::/29 maxlen: 29
2a0d:ad40::/29 maxlen: 29
2a0d:b840::/29 maxlen: 29
2a0e:af40::/29 maxlen: 29
2a0e:e9c0::/29 maxlen: 29
2a0f:e180::/29 maxlen: 29
2a11:17c0::/29 maxlen: 29
2a11:1c80::/29 maxlen: 29
2a11:2d00::/29 maxlen: 29
2a11:4540::/29 maxlen: 29
2a11:4f00::/29 maxlen: 29
2a11:64c0::/29 maxlen: 29
2a11:6b80::/29 maxlen: 29
2a11:77c0::/29 maxlen: 29
2a11:81c0::/29 maxlen: 29
2a11:86c0::/29 maxlen: 29
2a11:8740::/29 maxlen: 29
2a11:8980::/29 maxlen: 29
2a11:9040::/29 maxlen: 29
2a11:9580::/29 maxlen: 29
2a11:9640::/29 maxlen: 29
2a11:9f00::/29 maxlen: 29
2a11:a040::/29 maxlen: 29
2a11:a140::/29 maxlen: 29
2a11:b0c0::/29 maxlen: 29
2a11:b700::/29 maxlen: 29
2a11:bb00::/29 maxlen: 29
2a11:bbc0::/29 maxlen: 29
2a11:bdc0::/29 maxlen: 29
2a11:be40::/29 maxlen: 29
2a11:bf80::/29 maxlen: 29
2a11:c240::/29 maxlen: 29
2a11:c580::/29 maxlen: 29
2a11:c680::/29 maxlen: 29
2a11:cec0::/29 maxlen: 29
2a11:d340::/29 maxlen: 29
2a11:d880::/29 maxlen: 29
2a11:dac0::/29 maxlen: 29
2a11:df00::/29 maxlen: 29
2a11:e640::/29 maxlen: 29
2a11:e6c0::/29 maxlen: 29
2a11:e8c0::/29 maxlen: 29
2a11:eac0::/29 maxlen: 29
2a11:fa40::/29 maxlen: 29
2a11:fc40::/29 maxlen: 29
2a11:ff40::/29 maxlen: 29
2a12:580::/29 maxlen: 29
2a12:640::/29 maxlen: 29
2a12:900::/29 maxlen: 29
2a12:dc0::/29 maxlen: 29
2a12:e40::/29 maxlen: 29
2a12:e80::/29 maxlen: 29
2a12:11c0::/29 maxlen: 29
2a12:12c0::/29 maxlen: 29
2a12:1a80::/29 maxlen: 29
2a12:2b80::/29 maxlen: 29
2a12:2e80::/29 maxlen: 29
2a12:3c00::/29 maxlen: 29
2a12:6480::/29 maxlen: 29
2a12:8380::/29 maxlen: 29
2a12:8480::/29 maxlen: 29
2a12:8a00::/29 maxlen: 29
2a12:9200::/29 maxlen: 29
2a12:aa00::/29 maxlen: 29
2a12:af00::/29 maxlen: 29
2a12:b400::/29 maxlen: 29
2a12:b700::/29 maxlen: 29
2a12:bb00::/29 maxlen: 29
2a12:bc80::/29 maxlen: 29
2a12:c980::/29 maxlen: 29
2a12:cf80::/29 maxlen: 29
2a12:d080::/29 maxlen: 29
2a12:d200::/29 maxlen: 29
2a12:d800::/29 maxlen: 29
2a12:f980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:73:ab:9f:b8:eb:5e:76:d1:1f:84:af:6e:09:a1:86:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 9 19:15:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3bd8d4c9efdc6ca726f54cbc9261f9e401551f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d7:7b:c5:c0:cd:73:5e:05:2d:25:ab:d6:2c:
69:f6:29:50:96:f9:5f:fc:28:78:15:04:6d:d6:c9:
d1:f6:28:2d:ed:32:e0:d5:d9:e3:45:ab:5f:8f:ac:
ac:ba:5b:30:a2:ec:8a:8d:29:08:3d:ff:b2:ac:65:
a4:f6:af:80:fb:24:b2:2d:90:8e:46:0f:f5:8c:fa:
9f:48:63:e3:e9:74:1a:33:b3:c1:30:a0:c4:32:58:
73:ff:16:9f:c9:09:8f:e4:e2:9c:75:c3:cd:14:83:
06:5f:14:a9:56:c4:f7:f5:87:8d:a3:9e:c5:a0:76:
cd:67:83:0b:7e:20:e9:59:64:79:18:4a:1e:42:e0:
6f:40:30:98:c3:27:1e:5d:f8:fe:3b:ba:f1:89:50:
9f:fc:42:55:d5:9b:9d:cd:fb:ec:a5:fe:83:b3:92:
21:e3:36:9d:5e:24:c9:01:bb:e3:92:07:95:c2:d1:
77:86:62:66:38:e4:02:7d:7a:3a:66:58:37:7f:3e:
51:77:a3:1f:0d:68:72:0b:e7:4a:ed:0b:f0:9d:c7:
7d:4d:4d:71:bc:14:bc:81:58:ba:a7:68:e4:ff:69:
f7:ae:83:0f:6f:ae:39:b2:3c:6f:2c:87:14:22:32:
45:2b:17:ca:0d:9a:27:92:5d:19:b6:1c:e7:90:25:
9c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D8:D4:C9:EF:DC:6C:A7:26:F5:4C:BC:92:61:F9:E4:01:55:1F:67
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/O9jUye_cbKcm9Uy8kmH55AFVH2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:8cc0::/29
2a0d:ad40::/29
2a0d:b840::/29
2a0e:af40::/29
2a0e:e9c0::/29
2a0f:e180::/29
2a11:17c0::/29
2a11:1c80::/29
2a11:2d00::/29
2a11:4540::/29
2a11:4f00::/29
2a11:64c0::/29
2a11:6b80::/29
2a11:77c0::/29
2a11:81c0::/29
2a11:86c0::/29
2a11:8740::/29
2a11:8980::/29
2a11:9040::/29
2a11:9580::/29
2a11:9640::/29
2a11:9f00::/29
2a11:a040::/29
2a11:a140::/29
2a11:b0c0::/29
2a11:b700::/29
2a11:bb00::/29
2a11:bbc0::/29
2a11:bdc0::/29
2a11:be40::/29
2a11:bf80::/29
2a11:c240::/29
2a11:c580::/29
2a11:c680::/29
2a11:cec0::/29
2a11:d340::/29
2a11:d880::/29
2a11:dac0::/29
2a11:df00::/29
2a11:e640::/29
2a11:e6c0::/29
2a11:e8c0::/29
2a11:eac0::/29
2a11:fa40::/29
2a11:fc40::/29
2a11:ff40::/29
2a12:580::/29
2a12:640::/29
2a12:900::/29
2a12:dc0::/29
2a12:e40::/29
2a12:e80::/29
2a12:11c0::/29
2a12:12c0::/29
2a12:1a80::/29
2a12:2b80::/29
2a12:2e80::/29
2a12:3c00::/29
2a12:6480::/29
2a12:8380::/29
2a12:8480::/29
2a12:8a00::/29
2a12:9200::/29
2a12:aa00::/29
2a12:af00::/29
2a12:b400::/29
2a12:b700::/29
2a12:bb00::/29
2a12:bc80::/29
2a12:c980::/29
2a12:cf80::/29
2a12:d080::/29
2a12:d200::/29
2a12:d800::/29
2a12:f980::/29
Signature Algorithm: sha256WithRSAEncryption
67:d9:de:c6:ed:e5:90:e3:db:34:2a:3b:e0:a4:a4:33:af:e6:
97:47:4e:ec:ee:c3:95:8a:03:85:66:8e:a9:7c:56:77:69:e4:
2e:79:1b:b2:31:dc:6b:6a:da:fd:91:d0:78:b8:f1:86:e8:b9:
22:5c:21:d5:9b:d9:2f:5b:1d:4f:2b:d4:d7:b7:02:81:37:d5:
7e:ec:d6:c8:ee:c1:e4:ba:ef:03:91:a7:91:b8:72:db:41:cd:
08:d8:63:e4:02:14:47:7e:fa:19:44:85:5a:27:b4:e9:78:2c:
a3:2a:b5:31:a7:f1:bd:ac:b1:d8:3d:a2:ec:2e:c4:ea:2a:07:
0a:26:9b:5f:b7:73:68:da:8d:11:c6:fd:65:1a:e3:10:99:d3:
78:e6:bc:e4:95:cf:39:22:26:6f:4e:5d:4e:3f:e8:0f:72:eb:
e3:c3:c1:fa:52:5c:3e:5b:de:2c:67:c5:b7:c5:09:1a:2d:f2:
6c:00:34:d6:2f:7d:f6:ef:5c:01:1f:fd:02:4b:a1:ff:1f:b4:
60:bd:02:7e:40:40:e9:ae:cc:4a:d3:c0:26:43:26:8f:00:bf:
de:13:09:5b:5c:09:14:cb:80:f0:2e:da:16:1f:d2:cc:1c:5c:
9e:2a:d4:20:37:87:29:b5:dd:eb:74:df:d2:60:33:e8:25:31:
9e:1b:7b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:21:10 2026 by rpki-client