Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/9NIJd9NSqmoLslfe0HJ5ccWnsl4.roa
File: 9NIJd9NSqmoLslfe0HJ5ccWnsl4.roa (raw, json)
Hash identifier: DPjXHAZ3hSLyPJl3srgoVYlxdlrp+NCbSEmdy+N8HU8=
Subject key identifier: F4:D2:09:77:D3:52:AA:6A:0B:B2:57:DE:D0:72:79:71:C5:A7:B2:5E
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019D85C0860EFEC4ADA2393D768A769FDF43
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/9NIJd9NSqmoLslfe0HJ5ccWnsl4.roa
Signing time: Mon 13 Apr 2026 07:31:20 +0000
ROA not before: Mon 13 Apr 2026 07:31:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208399
IP address blocks: 2a03:5840:153::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:85:c0:86:0e:fe:c4:ad:a2:39:3d:76:8a:76:9f:df:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Apr 13 07:31:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4d20977d352aa6a0bb257ded0727971c5a7b25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:33:fd:f1:34:5b:2e:8a:ae:c3:90:9a:79:
5d:7f:33:4a:e5:4b:e4:52:6b:d9:2f:07:e3:1b:c6:
5b:68:ad:b5:3b:6f:48:ac:cd:91:72:70:77:82:4b:
55:96:60:9e:4b:ae:2e:b8:70:cb:6f:37:26:b7:0a:
65:2e:49:3c:d2:c2:91:e2:80:82:bf:10:ec:9c:c5:
b1:d6:cb:d4:d9:2e:10:8a:55:3a:f3:a6:3d:8d:c5:
4c:13:75:b9:1d:61:53:ae:50:7d:46:cd:4e:1d:39:
6c:51:6a:5a:a3:ab:74:74:8c:80:31:44:ba:19:8f:
46:5a:ca:dc:37:8c:65:16:22:3d:b4:83:f3:93:83:
72:a3:5e:56:86:7f:70:3d:bc:fb:7d:e2:23:d3:c5:
d7:3e:16:06:7e:24:02:af:36:bb:29:f6:2d:6d:71:
0d:3e:8e:cf:3f:81:5e:96:4d:e2:94:6a:6f:3b:52:
59:56:0d:5c:1e:0c:08:bb:34:72:5e:67:9a:fc:b3:
47:54:3f:f4:79:00:02:7d:0e:3b:eb:38:07:c6:c8:
4e:89:18:1e:42:de:38:51:ee:5a:95:70:fa:9a:6a:
1b:92:5f:d4:a5:b8:59:45:b8:06:17:b5:c2:a8:94:
4e:e3:44:2a:16:90:6b:99:81:0a:12:c3:bc:af:2e:
4d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D2:09:77:D3:52:AA:6A:0B:B2:57:DE:D0:72:79:71:C5:A7:B2:5E
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/9NIJd9NSqmoLslfe0HJ5ccWnsl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:153::/48
Signature Algorithm: sha256WithRSAEncryption
8b:38:cf:30:3b:ce:ff:84:3f:ee:40:9e:8c:8b:15:2c:42:86:
de:34:0f:2e:2c:3b:36:fb:2b:2e:eb:70:dd:28:02:91:f6:26:
6c:1b:96:c8:6e:c3:15:4a:5c:6f:c6:be:e1:70:5a:0c:06:ca:
82:3e:3d:8b:5a:0d:d3:d7:6f:ec:ad:94:93:70:41:e0:30:b9:
90:a6:c8:64:d3:d3:3f:87:46:da:6c:91:59:f7:67:0c:4e:bb:
54:17:ec:a9:f6:02:6a:04:5c:5d:75:27:50:05:e2:f4:c6:36:
d8:f9:d5:cb:c7:e8:50:03:ed:af:45:7c:95:14:ed:14:81:94:
30:c2:71:81:da:d8:c8:f1:15:f8:74:01:29:00:46:62:96:0e:
08:41:67:4f:8e:15:65:a7:86:7f:52:3f:d9:17:9c:5c:27:f5:
f1:8f:c9:17:c4:23:b0:c5:b4:06:14:46:2e:0d:2a:7e:1f:b3:
aa:e3:13:3f:e3:2b:6d:12:90:9a:ae:3a:ba:0d:2e:40:ec:6f:
d0:1d:a0:cd:57:24:40:d6:28:67:58:f4:ea:98:41:0d:51:94:
58:60:e0:c5:74:26:f2:6c:36:3a:84:b6:b4:13:a9:9a:bb:c9:
bd:eb:d8:03:e4:62:f1:45:18:70:2b:10:c0:8e:25:e5:f9:e1:
d2:b4:bd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:42 2026 by rpki-client