Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/9-Pohzrk-GfEO26UigGLQdLJ5LM.roa
File: 9-Pohzrk-GfEO26UigGLQdLJ5LM.roa (raw, json)
Hash identifier: EPYycU2WAxzj+yLpGaTsCA1/RIi1UbCCCRWYLB4Q/h0=
Subject key identifier: F7:E3:E8:87:3A:E4:F8:67:C4:3B:6E:94:8A:01:8B:41:D2:C9:E4:B3
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A0BA8CD64E6087B6BED1C8022E49D5AFA2
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/9-Pohzrk-GfEO26UigGLQdLJ5LM.roa
Signing time: Sat 19 Sep 2026 16:43:07 +0000
ROA not before: Sat 19 Sep 2026 16:43:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219207
IP address blocks: 2a0f:7300::/30 maxlen: 30
2a0f:7304::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ba:8c:d6:4e:60:87:b6:be:d1:c8:02:2e:49:d5:af:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Sep 19 16:43:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7e3e8873ae4f867c43b6e948a018b41d2c9e4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ad:95:ab:41:a3:66:54:28:35:b0:a0:e2:3c:
33:8e:89:a0:3a:ab:ab:fc:7f:12:a7:f8:d9:c9:3f:
9f:46:89:6d:20:ee:08:5f:ca:15:c2:61:2d:e4:c9:
d5:93:31:e3:6e:ba:85:b5:4b:cc:43:ef:41:70:45:
4e:19:89:9a:7e:a5:02:05:de:26:bd:c4:af:10:e6:
a3:d7:d0:cd:c9:6d:9b:48:82:dd:81:17:06:83:39:
e9:ce:0c:d0:6b:24:11:cb:74:bb:85:a3:ec:2e:f2:
7a:33:eb:40:4c:18:66:48:c6:b0:cc:fa:f9:f2:5b:
08:0b:12:5c:44:d3:13:0d:ec:f8:10:46:ea:c2:90:
b5:e4:9c:d5:2f:e3:ee:bf:d6:1a:50:8f:88:35:57:
ae:bb:73:32:36:5e:f8:83:c7:8b:43:bd:bf:a9:c3:
e7:72:37:7c:02:06:6a:c4:d6:0a:45:86:0a:77:df:
b4:1b:c6:06:c9:5e:23:6e:e2:17:57:d8:95:4a:f2:
90:a8:16:d0:90:eb:f4:44:e6:26:48:88:76:ea:1c:
dc:82:7c:74:d0:34:93:eb:37:79:ea:ac:58:c9:b9:
08:ea:0e:c9:d6:77:c8:1e:4f:37:3d:23:ab:96:64:
66:68:16:06:55:ed:88:af:dc:e8:98:ab:7e:dc:8c:
2f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E3:E8:87:3A:E4:F8:67:C4:3B:6E:94:8A:01:8B:41:D2:C9:E4:B3
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/9-Pohzrk-GfEO26UigGLQdLJ5LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7300::/29
Signature Algorithm: sha256WithRSAEncryption
a3:2c:79:ef:d6:d2:57:02:aa:0e:61:58:0f:8d:ef:93:45:79:
d2:cf:df:f1:36:56:ac:ed:e4:15:c2:6c:e4:a4:97:88:d8:f4:
56:4c:9f:f6:8f:08:f5:3b:ed:26:16:e1:61:0e:b0:11:bd:a0:
ce:b9:9f:95:81:13:22:fe:67:62:37:13:f6:f7:20:5c:b0:db:
bd:53:f7:67:77:db:bb:dd:2c:76:88:ac:2e:fc:50:cd:69:ef:
a7:f4:a5:66:c4:9f:91:e1:8c:a0:c2:36:5f:b2:64:3f:2e:b3:
f9:16:d3:17:05:b1:51:69:d5:3a:e3:9e:4b:51:c1:99:9e:79:
60:84:37:5b:96:ea:ee:68:16:85:45:08:93:76:48:1b:04:2d:
db:da:63:a7:11:ad:7e:17:8e:33:b4:c4:53:06:fc:62:2a:9c:
aa:f2:26:ce:6c:2c:dc:e1:3f:14:96:b0:ba:ae:17:5a:b2:c4:
f6:a1:57:5c:51:88:a6:b1:81:f1:2f:79:91:24:80:59:c6:2a:
ba:34:6f:74:8f:2b:28:d2:a2:88:c3:79:f1:de:41:87:ad:9d:
76:99:83:32:d4:60:6d:1f:26:34:d4:dd:bd:5a:23:55:cb:bc:
af:7e:06:40:db:78:df:2b:4e:4e:4b:9e:e9:89:55:a4:dd:d9:
a9:e7:fa:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:40:24 2026 by rpki-client