Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/m_RddDYAbHezOnObYllnMhxGeSw.roa
File: m_RddDYAbHezOnObYllnMhxGeSw.roa (raw, json)
Hash identifier: NXjqmoAuAJHSOy4PiwlP7O6175IMIxes1WclvWRNByc=
Subject key identifier: 9B:F4:5D:74:36:00:6C:77:B3:3A:73:9B:62:59:67:32:1C:46:79:2C
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019C8B1EA4FB1D5AFA524E6C047314660E8D
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/m_RddDYAbHezOnObYllnMhxGeSw.roa
Signing time: Mon 23 Feb 2026 15:29:27 +0000
ROA not before: Mon 23 Feb 2026 15:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204916
IP address blocks: 2a12:8782::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8b:1e:a4:fb:1d:5a:fa:52:4e:6c:04:73:14:66:0e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Feb 23 15:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bf45d7436006c77b33a739b625967321c46792c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ff:dd:39:1c:62:c1:5d:57:03:cf:a8:49:94:
4a:29:e5:cf:82:63:9c:55:1a:1a:8c:cc:e9:2c:b9:
49:e9:81:9e:a2:df:5b:96:a1:80:c3:38:a0:b0:8f:
6f:24:11:41:de:b2:65:fe:75:24:8a:58:4a:e3:ab:
99:ee:b0:6c:57:50:6f:ad:ec:c8:34:42:68:ba:9c:
80:41:45:6c:a6:8a:e8:da:54:29:1c:c3:b4:48:d3:
9e:5d:9a:0b:b9:ad:c6:e0:25:f7:99:90:8c:39:e9:
b8:e1:aa:4f:8d:8f:c7:fd:76:0d:db:68:52:92:12:
0c:45:e1:8b:71:20:b9:53:f5:d2:59:ed:92:6f:1b:
15:a6:86:50:13:7c:d0:d9:7e:c9:73:3b:96:b4:b3:
78:eb:63:ae:ec:c1:bc:5d:09:d2:98:49:36:1d:31:
0c:69:9a:e7:0f:f4:d3:6e:66:e8:5d:7c:75:df:f5:
ac:33:da:6a:48:ac:f5:78:f3:6a:f7:f7:15:2d:2b:
69:82:45:78:2b:42:54:af:11:5b:2d:08:eb:78:14:
ad:c2:b6:82:81:4d:64:a0:97:89:0d:8a:90:52:66:
09:96:12:fe:76:d2:0e:f3:9e:59:98:4d:41:0a:76:
b4:e7:2d:c2:13:2d:62:8b:16:1f:a9:34:de:56:8d:
33:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F4:5D:74:36:00:6C:77:B3:3A:73:9B:62:59:67:32:1C:46:79:2C
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/m_RddDYAbHezOnObYllnMhxGeSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8782::/32
Signature Algorithm: sha256WithRSAEncryption
7f:49:a6:be:9b:1e:34:8a:54:80:9e:0b:f6:76:a5:37:ad:27:
2a:b3:c0:4f:c8:bd:b3:09:5a:55:f9:40:a6:99:88:f7:d4:3d:
2d:a7:ce:bf:e2:bb:00:c4:ad:78:91:2a:5d:be:25:89:1f:75:
9e:f2:84:9e:dc:9d:24:98:f8:ea:78:7c:c6:ee:cd:7e:f7:35:
20:47:a9:b1:93:3d:a5:34:c5:48:c8:4d:04:f8:61:31:e9:d8:
af:70:b0:b4:af:32:68:24:c1:9d:10:69:c2:bd:be:89:47:8e:
74:60:39:d3:55:3c:1a:8e:f6:ef:89:fb:98:d1:d5:9a:ea:b1:
55:d4:dd:db:46:ec:06:f5:d8:94:e5:5f:f0:e6:95:6f:85:7a:
0a:82:b4:46:2b:c1:cd:d9:ac:c4:51:e0:3c:7e:10:6f:27:86:
11:c7:09:da:92:6b:04:cd:4f:51:04:93:aa:1b:21:68:9a:35:
c9:81:b8:ed:56:72:e7:df:81:da:7f:60:be:7e:cd:8a:92:86:
d8:3d:0d:c8:ef:94:e0:69:e6:7b:2e:00:b0:66:10:1d:4a:ea:
1d:d8:d4:fb:b9:ed:4e:4e:f2:35:8b:53:ea:39:97:48:f7:58:
ba:b1:26:8b:0a:6c:e2:10:e1:54:09:ff:0b:19:c2:ab:80:66:
81:78:29:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:58:13 2026 by rpki-client