Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/SkNEFGwKRN9mRQCM7U0JkrIarOM.roa
File: SkNEFGwKRN9mRQCM7U0JkrIarOM.roa (raw, json)
Hash identifier: 36WWKzmIPOKIYLxJS4LA6gPs7zc6o9CmokqNuZH2WHE=
Subject key identifier: 4A:43:44:14:6C:0A:44:DF:66:45:00:8C:ED:4D:09:92:B2:1A:AC:E3
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019FA79B3BD4C00B076BB73ABB7D29CA29A4
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/SkNEFGwKRN9mRQCM7U0JkrIarOM.roa
Signing time: Tue 28 Jul 2026 07:23:16 +0000
ROA not before: Tue 28 Jul 2026 07:23:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396190
IP address blocks: 2a09:7f80::/29 maxlen: 29
2a0d:83c0::/29 maxlen: 29
2a0d:9400::/29 maxlen: 29
2a10:fdc0::/29 maxlen: 29
2a11:1700::/29 maxlen: 29
2a11:6000::/29 maxlen: 29
2a11:7900::/29 maxlen: 29
2a11:8400::/29 maxlen: 29
2a11:9200::/29 maxlen: 29
2a11:cb00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:9b:3b:d4:c0:0b:07:6b:b7:3a:bb:7d:29:ca:29:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 28 07:23:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a4344146c0a44df6645008ced4d0992b21aace3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:16:1c:de:f3:fe:5b:7a:63:51:0e:ae:d6:20:
bb:e6:07:fe:9c:e8:89:f0:81:62:08:b5:fa:d1:b2:
6f:0b:c1:3b:30:a2:a1:c1:63:b8:ab:2f:40:71:ae:
ba:aa:58:87:df:44:46:7c:71:e7:18:b8:c3:8c:7d:
82:94:80:2f:9c:25:89:a8:7b:95:9d:74:7b:f9:10:
c6:e1:69:3c:8d:03:b0:08:e9:51:a0:2d:9a:b3:dd:
ad:12:b5:26:18:c4:0e:13:23:52:c5:f4:94:55:95:
d9:14:a0:bc:21:a1:33:d8:d2:77:cd:fe:f5:1c:ce:
8e:f9:13:2f:b4:7b:82:87:71:35:88:15:19:a5:02:
32:8f:9a:e7:31:a3:d3:3f:2d:bf:56:44:a9:d0:05:
ae:bb:30:31:9d:78:fb:27:93:66:66:2d:09:a8:e9:
d2:39:c6:c9:79:c6:1a:2c:2e:47:c8:46:0b:30:7d:
b5:3e:4e:4c:ce:f2:49:5e:36:5f:6b:60:e9:04:63:
d2:5e:c9:db:6c:25:cc:c3:b7:87:9d:b9:8c:86:85:
41:a9:26:a6:e3:9c:46:0b:a9:da:51:9b:3e:d4:ec:
42:21:17:51:b1:28:27:d7:cf:ad:d9:9f:3c:07:d6:
f2:6a:aa:f8:c8:fa:f1:55:a9:2a:b3:3a:88:cb:dc:
69:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:43:44:14:6C:0A:44:DF:66:45:00:8C:ED:4D:09:92:B2:1A:AC:E3
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/SkNEFGwKRN9mRQCM7U0JkrIarOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7f80::/29
2a0d:83c0::/29
2a0d:9400::/29
2a10:fdc0::/29
2a11:1700::/29
2a11:6000::/29
2a11:7900::/29
2a11:8400::/29
2a11:9200::/29
2a11:cb00::/29
Signature Algorithm: sha256WithRSAEncryption
4c:8f:da:fd:0a:bb:3b:72:90:df:2a:e2:48:b0:2c:37:a2:4c:
db:fc:34:a2:c9:0c:36:ea:38:df:4a:21:23:cc:b0:af:da:dd:
23:13:5e:f8:5b:15:3f:71:6a:aa:2b:0d:3e:f9:ce:3a:73:45:
52:b3:55:4a:8f:c7:f5:79:b3:83:b9:bc:9f:06:f9:ec:a9:6f:
1f:4c:07:30:ab:46:fe:f6:3f:c2:01:4b:3d:e9:64:8d:2e:7d:
18:93:df:a5:31:7f:c2:df:23:85:98:69:42:8c:2e:ae:48:80:
fe:ae:a0:40:59:32:2e:b9:d1:5c:d0:90:05:da:11:18:1b:39:
6c:fb:38:09:a8:be:e6:66:0a:d1:e5:6a:c0:90:36:41:06:bd:
e1:c0:82:6d:1f:32:f3:27:f4:c2:b8:a8:45:a7:5e:cf:98:f1:
ff:b6:28:31:ec:66:64:9a:cc:01:a1:a6:de:4a:0a:0e:ff:b0:
ad:39:ce:10:f9:4d:5b:95:0e:49:23:80:ac:e3:b5:ba:23:c3:
c9:b0:c8:8a:db:9d:7a:d8:80:4b:23:17:56:fb:e3:10:50:92:
81:55:29:da:cb:9f:45:28:95:f2:fa:d8:ac:41:73:cc:cb:9d:
52:d7:ad:a6:77:09:00:bf:10:45:7e:db:2b:27:d7:5e:28:e5:
a0:34:69:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:17:28 2026 by rpki-client