Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/Cpm35s9Ka4hhJWZn8CGNJk4Go5w.roa
File: Cpm35s9Ka4hhJWZn8CGNJk4Go5w.roa (raw, json)
Hash identifier: QYqaTylwZdrWR4V7QHicMTlDarm+SapwyzyHuoF8w3Y=
Subject key identifier: 0A:99:B7:E6:CF:4A:6B:88:61:25:66:67:F0:21:8D:26:4E:06:A3:9C
Certificate issuer: /CN=9708f65b7b58104256e0d33cc46c2e9d7628bb78
Certificate serial: 019FB2391D92F426790C916FEC42351C8D25
Authority key identifier: 97:08:F6:5B:7B:58:10:42:56:E0:D3:3C:C4:6C:2E:9D:76:28:BB:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwj2W3tYEEJW4NM8xGwunXYou3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/Cpm35s9Ka4hhJWZn8CGNJk4Go5w.roa
Signing time: Thu 30 Jul 2026 08:51:55 +0000
ROA not before: Thu 30 Jul 2026 08:51:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 766
IP address blocks: 150.128.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/lwj2W3tYEEJW4NM8xGwunXYou3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/lwj2W3tYEEJW4NM8xGwunXYou3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwj2W3tYEEJW4NM8xGwunXYou3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:39:1d:92:f4:26:79:0c:91:6f:ec:42:35:1c:8d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9708f65b7b58104256e0d33cc46c2e9d7628bb78
Validity
Not Before: Jul 30 08:51:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a99b7e6cf4a6b8861256667f0218d264e06a39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ef:8a:35:80:27:17:7f:2b:70:23:dd:45:19:
c5:77:ea:ab:43:1c:5b:6a:6b:80:59:8d:17:bc:3d:
0b:f7:41:83:53:c3:fb:17:be:bf:57:fa:fe:93:84:
33:29:08:f4:d3:f1:29:2d:2a:74:b5:0b:57:46:62:
81:62:ce:82:7c:59:cf:0c:cc:7a:a1:fd:46:24:5a:
1f:e5:77:b6:59:79:77:31:c9:29:06:4b:2d:df:84:
1b:ff:9b:32:87:f9:cd:66:2e:b7:d1:15:bf:4f:08:
7f:80:3c:3f:02:96:b1:28:45:ab:51:80:cd:43:28:
a0:b2:86:52:06:91:5e:42:b3:47:39:10:14:f9:ed:
8f:f2:a3:4f:8d:1b:94:8e:e4:82:9d:f1:53:d6:e1:
c6:b7:81:44:1e:92:84:37:4d:5e:44:3e:04:29:e6:
7f:72:9c:28:f8:b0:41:12:d6:ed:81:6b:c3:bb:25:
cc:0e:9d:e9:09:b8:e6:ed:c0:44:a6:2f:da:a0:8c:
ff:9b:83:d7:a5:2d:24:8c:2f:82:0f:a5:59:a3:98:
e4:de:37:ef:c0:3f:10:87:63:61:3f:97:80:b4:12:
bf:4c:d5:cc:f3:c7:42:42:f3:13:29:3d:b4:4d:b8:
f2:f4:83:20:20:49:eb:75:ef:e5:25:a2:62:60:10:
d4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:99:B7:E6:CF:4A:6B:88:61:25:66:67:F0:21:8D:26:4E:06:A3:9C
X509v3 Authority Key Identifier:
keyid:97:08:F6:5B:7B:58:10:42:56:E0:D3:3C:C4:6C:2E:9D:76:28:BB:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwj2W3tYEEJW4NM8xGwunXYou3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/Cpm35s9Ka4hhJWZn8CGNJk4Go5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/lwj2W3tYEEJW4NM8xGwunXYou3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.128.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:3f:f1:a7:05:a2:d9:19:13:8f:68:4e:2c:e1:e4:ce:ec:45:
29:6d:a8:2a:f3:7c:66:ac:2b:0b:f9:67:01:68:e6:f0:9b:71:
27:16:49:22:61:b5:ee:b9:23:dc:e3:2d:76:de:3b:e0:24:17:
25:ad:a7:8e:62:9c:88:07:15:d8:9d:2b:48:3e:d1:25:34:f0:
80:a1:52:65:55:21:97:71:72:20:f3:df:b7:ab:6a:57:65:4f:
37:10:14:b8:39:32:84:41:3d:51:8f:0a:f3:cb:2a:c0:c8:8e:
fd:3d:0d:22:77:84:93:22:bb:8e:bf:2b:dd:a8:1a:6f:fc:0e:
4d:8b:e2:d4:88:90:a2:7f:2c:02:85:df:eb:fd:f7:e6:b7:3c:
90:4e:7d:ad:70:7f:54:1a:8c:91:75:01:dd:82:52:0c:68:85:
54:11:b4:9c:09:e5:4e:09:c3:43:20:d6:65:a8:f1:e9:9d:a5:
56:fe:93:16:c1:b0:b2:2e:35:02:86:16:99:1e:e8:e3:9b:ab:
f3:3d:1b:0f:de:19:4b:01:8f:dd:46:88:1b:cd:fb:c4:f9:b5:
b9:94:62:89:92:e5:54:c8:ff:d7:ae:26:10:0c:1b:c7:47:34:
6a:51:e6:4d:56:d3:5b:26:22:cf:01:b1:3c:fe:f1:96:5a:d0:
eb:46:d1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:10:50 2026 by rpki-client