Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/njg9EqOhkHu-L5eiZG0qVa5pSv8.roa
File: njg9EqOhkHu-L5eiZG0qVa5pSv8.roa (raw, json)
Hash identifier: 1i/TQ/0uRsCA98v0Vysg7x0M+3yW0pSzaYM44CZBDAo=
Subject key identifier: 9E:38:3D:12:A3:A1:90:7B:BE:2F:97:A2:64:6D:2A:55:AE:69:4A:FF
Certificate issuer: /CN=60ce22c7f650495eb5122010ed36f6d264bf47e6
Certificate serial: 01A07C4F818127DF935CBA77C312C616CD6B
Authority key identifier: 60:CE:22:C7:F6:50:49:5E:B5:12:20:10:ED:36:F6:D2:64:BF:47:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/njg9EqOhkHu-L5eiZG0qVa5pSv8.roa
Signing time: Mon 07 Sep 2026 14:39:40 +0000
ROA not before: Mon 07 Sep 2026 14:39:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2a07:300::/48 maxlen: 48
2a07:300:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:4f:81:81:27:df:93:5c:ba:77:c3:12:c6:16:cd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ce22c7f650495eb5122010ed36f6d264bf47e6
Validity
Not Before: Sep 7 14:39:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e383d12a3a1907bbe2f97a2646d2a55ae694aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:ba:26:52:22:43:c1:14:09:ec:73:f9:47:
f2:12:af:c6:2b:e3:46:17:c2:fa:19:0e:8a:13:44:
54:5d:af:b5:71:5d:82:0a:e9:e2:68:aa:b2:03:41:
3f:53:83:fe:19:f1:81:d0:3b:d8:f7:e7:e9:fb:e3:
d8:ed:af:e8:ec:e2:a5:4a:2f:f4:0c:45:5d:b7:d6:
13:a5:0a:5e:6d:70:8f:5f:7c:63:50:00:7c:dc:45:
2c:a0:0f:93:f8:5b:48:91:5c:a4:a0:21:4e:c0:6a:
e7:a9:e3:b3:8a:22:58:d6:ed:43:ef:4f:88:24:ac:
05:fa:23:ce:9a:d2:23:1a:28:d5:24:c7:27:24:3e:
53:37:79:4f:ae:df:cc:fd:08:57:dd:e4:75:87:79:
05:85:78:7d:c5:22:a2:a8:4f:79:6e:7c:86:99:bc:
52:7d:f0:4c:08:ce:24:f4:4a:a6:c8:77:c5:b2:76:
23:5b:5a:49:c2:e1:ac:54:d5:01:15:38:40:07:61:
a2:32:31:60:9f:44:27:77:97:a1:3a:f6:b8:3a:75:
3f:a5:f3:0b:ca:57:7d:31:62:42:32:61:b8:c4:62:
17:7a:95:88:be:1c:96:ba:c3:e1:ac:e1:4e:a4:63:
2c:1b:ed:b5:3b:13:26:47:e7:8b:31:b0:05:33:da:
6e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:38:3D:12:A3:A1:90:7B:BE:2F:97:A2:64:6D:2A:55:AE:69:4A:FF
X509v3 Authority Key Identifier:
keyid:60:CE:22:C7:F6:50:49:5E:B5:12:20:10:ED:36:F6:D2:64:BF:47:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/njg9EqOhkHu-L5eiZG0qVa5pSv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:300::/48
2a07:300:10::/48
Signature Algorithm: sha256WithRSAEncryption
9a:10:51:3c:5c:3e:34:52:09:50:c5:2c:a2:65:33:4c:fb:3e:
e8:0b:2f:55:1f:7f:93:ec:1d:ea:c7:d9:18:61:5a:99:92:7f:
61:3e:f7:1a:3d:1d:85:58:8b:37:84:39:c8:25:b6:8d:7e:fb:
9d:c0:3c:ff:f3:59:1a:91:a2:4c:3f:d5:9d:d0:3c:cc:02:a1:
35:86:93:6b:fc:b8:dc:0a:a2:5a:9b:f0:c0:f1:f1:75:92:92:
8f:6b:65:ec:f5:4d:37:a0:08:f6:b8:6a:d2:71:ed:48:2c:83:
49:ec:db:34:63:a5:3e:43:d4:f3:56:e1:c5:eb:4a:86:7a:2e:
bb:1d:2a:8a:3d:27:27:19:4c:e3:6e:af:01:59:98:d1:27:8b:
9f:ee:98:fb:16:69:27:ad:51:6d:75:ef:11:c9:3c:41:47:d5:
81:6f:90:46:e0:ed:24:ac:c1:0f:ce:18:26:26:20:bc:d0:9a:
41:f8:07:c7:d4:67:b9:a3:46:81:ed:0a:03:5e:1b:5d:5b:e1:
71:aa:bb:58:09:eb:c8:ec:f8:a6:7a:20:db:d7:0c:50:a2:09:
77:fe:3b:90:fe:46:82:dd:1b:03:75:7e:22:9f:d6:55:0e:cb:
6c:ca:9b:c4:a4:06:af:fc:00:3e:ac:cc:65:29:4e:e3:36:f7:
49:e5:96:93
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaB8T4GBJ9+TXLp3wxLGFs1rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwY2UyMmM3ZjY1MDQ5NWViNTEyMjAxMGVkMzZmNmQyNjRi
ZjQ3ZTYwHhcNMjYwOTA3MTQzOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTM4M2QxMmEzYTE5MDdiYmUyZjk3YTI2NDZkMmE1NWFlNjk0YWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxu6JlIiQ8EUCexz+UfyEq/GK+NG
F8L6GQ6KE0RUXa+1cV2CCuniaKqyA0E/U4P+GfGB0DvY9+fp++PY7a/o7OKlSi/0
DEVdt9YTpQpebXCPX3xjUAB83EUsoA+T+FtIkVykoCFOwGrnqeOziiJY1u1D70+I
JKwF+iPOmtIjGijVJMcnJD5TN3lPrt/M/QhX3eR1h3kFhXh9xSKiqE95bnyGmbxS
ffBMCM4k9EqmyHfFsnYjW1pJwuGsVNUBFThAB2GiMjFgn0Qnd5ehOva4OnU/pfML
yld9MWJCMmG4xGIXepWIvhyWusPhrOFOpGMsG+21OxMmR+eLMbAFM9pu2QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJ44PRKjoZB7vi+XomRtKlWuaUr/MB8GA1UdIwQY
MBaAFGDOIsf2UEletRIgEO029tJkv0fmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU00aXhfWlFTVjYxRWlBUTdUYjIwbVNfUi1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mYTkzYzYtYzU1OS00OWVjLWI2ODUt
ZjdhOWU5YTBkNmMyLzEvbmpnOUVxT2hrSHUtTDVlaVpHMHFWYTVwU3Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mYTkzYzYtYzU1OS00OWVjLWI2ODUtZjdhOWU5YTBkNmMy
LzEvWU00aXhfWlFTVjYxRWlBUTdUYjIwbVNfUi1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgcDAAAA
AwcAKgcDAAAQMA0GCSqGSIb3DQEBCwUAA4IBAQCaEFE8XD40UglQxSyiZTNM+z7o
Cy9VH3+T7B3qx9kYYVqZkn9hPvcaPR2FWIs3hDnIJbaNfvudwDz/81kakaJMP9Wd
0DzMAqE1hpNr/LjcCqJam/DA8fF1kpKPa2Xs9U03oAj2uGrSce1ILINJ7Ns0Y6U+
Q9TzVuHF60qGei67HSqKPScnGUzjbq8BWZjRJ4uf7pj7FmknrVFtde8RyTxBR9WB
b5BG4O0krMEPzhgmJiC80JpB+AfH1Ge5o0aB7QoDXhtdW+FxqrtYCevI7PimeiDb
1wxQogl3/juQ/kaC3RsDdX4in9ZVDstsypvEpAav/AA+rMxlKU7jNvdJ5ZaT
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:34:06 2026 by rpki-client