Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/U4Gshg9HikzigHh7vvbv2BXQLao.roa
File: U4Gshg9HikzigHh7vvbv2BXQLao.roa (raw, json)
Hash identifier: I5CETIh9+BZCo2XfD0EfCDLFmP3VVG0VaGQ3qRZa1VQ=
Subject key identifier: 53:81:AC:86:0F:47:8A:4C:E2:80:78:7B:BE:F6:EF:D8:15:D0:2D:AA
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 01A0C89CF509E26F73BA19EC7F5D45105C63
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/U4Gshg9HikzigHh7vvbv2BXQLao.roa
Signing time: Tue 22 Sep 2026 10:15:24 +0000
ROA not before: Tue 22 Sep 2026 10:15:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402402
IP address blocks: 2a11:fa00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:9c:f5:09:e2:6f:73:ba:19:ec:7f:5d:45:10:5c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Sep 22 10:15:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5381ac860f478a4ce280787bbef6efd815d02daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:ce:db:9a:93:6b:0c:bf:8e:e2:74:86:23:
bd:1a:d5:ff:8c:f0:14:77:92:dd:04:ba:1e:35:bc:
f9:4b:7b:c8:cf:7f:ae:6a:26:2d:3f:91:be:cb:73:
06:db:29:3d:3b:3c:55:36:da:54:95:04:e1:6d:e9:
5c:20:fd:27:6d:6e:95:2b:be:e3:87:d3:1c:e9:ff:
1e:70:b8:0d:c9:9f:91:12:83:46:ca:73:d3:a4:31:
15:8e:3f:00:09:9b:d7:fc:15:df:1a:24:7c:8e:43:
05:58:10:2e:af:0a:89:3a:47:1b:14:55:36:f9:c3:
2c:6e:eb:6b:ed:d9:0f:4a:7c:11:a0:09:23:3d:da:
35:09:90:3a:ae:e2:4b:31:2c:15:81:fb:cb:a0:b0:
89:5d:b4:49:e0:76:84:c0:40:93:90:e2:06:8b:4a:
4c:f6:69:b1:6c:6e:5e:71:5b:72:99:bd:90:28:aa:
ee:35:a0:d0:ab:21:59:bd:b7:e4:92:5e:90:be:ab:
11:21:99:c3:0f:83:3a:87:51:4b:fd:54:fc:88:82:
7b:75:a4:e7:d5:1b:ed:b6:c1:17:6b:8f:c9:47:44:
fb:a7:89:9f:ea:6e:6e:95:fa:de:3f:2d:3e:b9:79:
bc:2f:48:96:92:6e:95:ba:ec:32:94:fb:88:f2:b4:
4f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:81:AC:86:0F:47:8A:4C:E2:80:78:7B:BE:F6:EF:D8:15:D0:2D:AA
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/U4Gshg9HikzigHh7vvbv2BXQLao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:fa00::/29
Signature Algorithm: sha256WithRSAEncryption
16:0e:68:98:bb:87:2a:24:da:bc:a8:da:c4:79:00:ff:3b:87:
5d:30:01:d1:e9:91:79:80:af:64:b3:cf:f0:52:34:d8:11:12:
cf:65:22:c4:ee:4e:03:31:80:86:e1:35:2c:a8:30:c9:d4:0a:
c4:89:f2:15:28:a0:e2:5b:59:da:0d:41:40:da:63:e7:a4:85:
05:a9:71:a5:fe:e7:09:a1:60:bc:0d:00:a9:46:50:82:04:9c:
5b:e9:e8:d6:ff:78:97:8c:08:19:46:c1:9d:90:81:36:9c:a3:
d4:43:36:74:7b:6b:4e:e5:12:22:1b:1c:2e:ef:50:96:ea:53:
c9:04:56:c7:54:79:be:f2:f5:08:ab:b7:78:81:5b:21:89:52:
c7:e9:e4:d1:5b:d1:d3:80:62:e0:ba:da:64:28:18:8b:f2:7e:
34:7d:65:68:da:6a:c1:02:3b:ca:e1:b6:b1:9f:22:1f:ed:3f:
1c:54:1a:7c:d9:d0:00:af:07:1e:fd:33:6d:f8:9c:83:89:49:
0d:3d:e3:b8:3d:17:84:f8:a2:5a:b7:ac:2b:71:0b:8f:7d:c8:
8d:5b:2b:b3:53:5d:de:68:a0:8d:9e:f1:25:6d:ee:35:f2:75:
e1:9b:19:ed:26:f6:8b:28:66:37:1b:97:a3:77:37:36:cd:f0:
80:1a:9a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:01:27 2026 by rpki-client