Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ACfe1-ovXKBRjlHTF6HM46jKkto.roa
File: ACfe1-ovXKBRjlHTF6HM46jKkto.roa (raw, json)
Hash identifier: Ettw8X83MRJyQrg65Hu0tRAfd28MfpIXG6t1JTkb0m4=
Subject key identifier: 00:27:DE:D7:EA:2F:5C:A0:51:8E:51:D3:17:A1:CC:E3:A8:CA:92:DA
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01A07D15448563209A3DA76DC30E1EAF880F
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ACfe1-ovXKBRjlHTF6HM46jKkto.roa
Signing time: Mon 07 Sep 2026 18:15:40 +0000
ROA not before: Mon 07 Sep 2026 18:15:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62610
IP address blocks: 2a09:fd80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7d:15:44:85:63:20:9a:3d:a7:6d:c3:0e:1e:af:88:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 7 18:15:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0027ded7ea2f5ca0518e51d317a1cce3a8ca92da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:d3:31:37:2c:55:2d:7e:6b:79:34:79:bf:
f1:7b:07:fd:47:ce:75:63:7b:22:bb:f8:e7:7d:db:
33:05:6b:a2:34:9a:bc:9d:32:e5:36:83:07:9e:d6:
68:34:b5:72:4d:58:db:f0:d6:f0:70:21:b7:9d:55:
8b:d0:3f:65:ec:b0:7c:af:b2:d6:d8:ff:fe:2c:7f:
50:51:e8:5b:b8:43:5a:ed:45:44:45:98:5d:39:ff:
cc:cb:cb:d5:f2:c9:7f:ac:ea:f4:62:7b:72:44:c2:
bc:7e:78:17:c9:ef:d9:42:07:8b:23:4e:f1:0a:f4:
f0:14:47:3c:21:c5:e6:97:34:d8:c7:d1:7f:ce:22:
81:ba:95:dc:1f:2b:58:28:eb:a9:da:7b:ee:0d:10:
78:26:f0:4f:ba:51:a4:16:83:4b:7a:bf:87:dd:89:
a0:1b:99:a0:0e:eb:0a:3a:87:fb:d0:15:e4:fb:e2:
6f:fc:fa:08:d9:6f:30:8b:75:1b:76:5c:39:0e:99:
91:21:cf:3b:0d:ce:bd:ba:d8:88:a1:22:44:fe:ad:
9a:6e:71:ae:6a:7e:00:ae:23:a9:d2:12:54:1d:51:
91:19:c1:49:f0:6f:63:ef:ef:6b:42:41:18:a5:8d:
80:25:e1:85:e9:97:fa:2d:2b:6b:f4:74:81:41:0e:
95:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:27:DE:D7:EA:2F:5C:A0:51:8E:51:D3:17:A1:CC:E3:A8:CA:92:DA
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ACfe1-ovXKBRjlHTF6HM46jKkto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:fd80::/29
Signature Algorithm: sha256WithRSAEncryption
09:7c:76:85:f2:e8:19:dc:2a:a7:4c:18:c7:41:44:6b:7a:10:
ab:5c:e8:b4:3a:32:61:ac:57:07:a8:9f:c2:c6:8a:b9:54:47:
45:88:c9:42:3e:f0:07:d0:02:6e:75:99:2a:3d:c1:58:ad:24:
c1:1a:86:92:db:67:08:ef:5e:39:2f:3b:2f:02:11:b0:61:c5:
1a:08:e7:3d:e9:7b:2d:68:c6:59:e2:01:03:c1:af:f3:0b:8b:
e4:c2:7b:e1:d0:16:a3:21:ca:f3:11:cd:d2:7f:bb:53:9c:57:
fa:df:6b:da:23:ce:72:a6:8c:99:fc:20:99:f3:dc:35:f5:de:
0b:61:2b:ce:5d:e5:6d:8f:de:c1:6b:0c:09:c8:d4:d4:d4:a9:
14:19:d3:50:9d:86:b4:93:78:64:5f:67:6f:88:b7:15:ba:37:
cc:04:ac:e1:4f:27:2c:88:67:d5:9e:93:b2:7d:ad:cd:7e:b4:
b8:18:08:78:ab:b8:8e:1d:42:b3:7e:60:f9:c1:b2:ae:3a:9a:
6e:bc:a9:0c:b9:bb:d0:37:0f:23:d4:04:3a:69:c8:3c:22:06:
88:e7:84:f2:d0:19:f5:ec:48:d8:4a:88:bf:ac:78:fc:f7:27:
1f:b0:f2:8a:f5:c0:4a:8a:2f:81:a6:44:11:bf:5f:a7:a0:bb:
5a:57:f8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:11:54 2026 by rpki-client