Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/f09a86-a5af-4cd8-b6ef-7505ed997ade/1/b91U6HYF0ho-j3RbSoom-vw6azw.roa
File: b91U6HYF0ho-j3RbSoom-vw6azw.roa (raw, json)
Hash identifier: u+n1AmOZJw8G3qiLP8bKsVx/fGf6mN4ChrHMCSiOMho=
Subject key identifier: 6F:DD:54:E8:76:05:D2:1A:3E:8F:74:5B:4A:8A:26:FA:FC:3A:6B:3C
Certificate issuer: /CN=993f99ccdce1d71a6c5ee85b67e2d1fefead8848
Certificate serial: 019FF0657E722867EE168E43BFAC7098E059
Authority key identifier: 99:3F:99:CC:DC:E1:D7:1A:6C:5E:E8:5B:67:E2:D1:FE:FE:AD:88:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f09a86-a5af-4cd8-b6ef-7505ed997ade/1/b91U6HYF0ho-j3RbSoom-vw6azw.roa
Signing time: Tue 11 Aug 2026 10:36:50 +0000
ROA not before: Tue 11 Aug 2026 10:36:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21051
IP address blocks: 2a05:c3c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f09a86-a5af-4cd8-b6ef-7505ed997ade/1/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f09a86-a5af-4cd8-b6ef-7505ed997ade/1/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:65:7e:72:28:67:ee:16:8e:43:bf:ac:70:98:e0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993f99ccdce1d71a6c5ee85b67e2d1fefead8848
Validity
Not Before: Aug 11 10:36:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fdd54e87605d21a3e8f745b4a8a26fafc3a6b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:af:4a:c3:20:59:29:b0:52:b8:35:88:d7:76:
61:45:54:30:1e:51:7b:62:84:35:d5:a5:b4:8d:39:
ed:7d:69:3a:08:82:71:b0:3e:44:0d:aa:c8:fd:24:
67:3b:3b:89:7f:8d:d1:5b:3d:c0:f9:0f:63:fd:fb:
b0:ed:89:c5:28:83:9a:4b:04:9c:59:51:ce:7d:63:
bb:14:cd:bd:f1:02:82:d7:d9:43:22:46:f8:90:0d:
7f:6e:31:f6:43:08:4c:0c:c6:81:61:fa:ec:2b:ab:
26:cf:50:b8:13:23:b3:0d:0c:12:6f:45:cf:b7:e7:
ac:7b:cb:36:61:8e:64:2d:e1:ba:ee:3c:f3:82:d0:
e1:23:f0:97:c0:34:eb:c6:9c:22:b0:a0:fe:af:6d:
9a:fb:fe:cd:6c:2f:d1:f2:1a:39:27:d3:29:ab:13:
1a:13:f9:5f:46:77:8e:b6:ef:9e:6e:6d:b6:6b:2f:
1f:ef:42:da:d1:e6:a8:31:0e:60:06:ee:e9:0c:39:
f0:b7:22:b8:6a:3f:db:e6:5a:a8:f8:d5:e2:0a:4b:
ed:a1:58:35:dc:31:62:3c:2f:2e:33:aa:34:96:16:
5a:c5:90:c6:b5:ea:32:81:55:b5:0d:63:d6:57:83:
85:65:50:af:02:61:ac:34:f8:ab:a1:f5:87:0c:17:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DD:54:E8:76:05:D2:1A:3E:8F:74:5B:4A:8A:26:FA:FC:3A:6B:3C
X509v3 Authority Key Identifier:
keyid:99:3F:99:CC:DC:E1:D7:1A:6C:5E:E8:5B:67:E2:D1:FE:FE:AD:88:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f09a86-a5af-4cd8-b6ef-7505ed997ade/1/b91U6HYF0ho-j3RbSoom-vw6azw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f09a86-a5af-4cd8-b6ef-7505ed997ade/1/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:c3c0::/32
Signature Algorithm: sha256WithRSAEncryption
8e:5c:c5:16:52:96:36:4a:0e:51:a4:cb:f5:2e:8d:09:f7:a3:
a5:9a:73:12:e9:60:b2:27:a5:9a:dc:b9:21:c1:4f:d8:b0:7b:
ab:0b:bf:bb:41:76:33:35:21:76:83:e3:60:28:88:e3:60:e3:
3b:88:61:c5:51:49:92:f6:bd:8c:72:28:eb:2c:42:11:a0:87:
a0:99:91:26:b5:cb:71:81:11:7b:71:de:ea:12:7b:de:a3:53:
d1:db:c9:1d:46:18:8a:70:59:fd:75:51:dc:1b:57:75:28:20:
31:54:ce:6f:5e:b5:e2:47:48:c8:2b:07:c8:ab:2c:70:90:94:
9b:3b:bc:98:3f:3f:c5:85:eb:e2:d7:4e:45:1c:3e:00:0f:ab:
13:74:7b:94:0d:f1:e7:c4:8d:15:87:43:1d:2e:a1:cf:b4:79:
62:99:93:05:72:4f:f1:90:2c:5c:eb:ad:93:2b:df:3d:e6:2d:
da:ab:49:89:49:2a:5f:99:73:86:5b:ae:3d:f4:f6:79:b9:fa:
ff:6f:e6:ab:2d:61:20:7f:89:1c:15:80:7f:22:e9:f8:c3:33:
26:5d:26:4c:0e:ff:c1:b1:c0:88:1a:b8:87:58:7f:73:59:fa:
2c:82:63:ac:e2:9a:c2:66:42:fd:98:63:c5:7f:85:ce:2e:b0:
3f:75:c8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:14:04 2026 by rpki-client