Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fChaVrM3CxWsSFkcqlWdX9dLbDA.roa
File: fChaVrM3CxWsSFkcqlWdX9dLbDA.roa (raw, json)
Hash identifier: g9arP4E4hYxw18KS6ctLTtgE4tAwvH0vOSITnAIzrqc=
Subject key identifier: 7C:28:5A:56:B3:37:0B:15:AC:48:59:1C:AA:55:9D:5F:D7:4B:6C:30
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019FA79B396413CA4921FA0E10A16681A13E
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fChaVrM3CxWsSFkcqlWdX9dLbDA.roa
Signing time: Tue 28 Jul 2026 07:23:15 +0000
ROA not before: Tue 28 Jul 2026 07:23:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27411
IP address blocks: 2a11:ac40::/29 maxlen: 29
2a11:d840::/29 maxlen: 29
2a12:3300::/29 maxlen: 29
2a12:4000::/29 maxlen: 29
2a12:4c80::/29 maxlen: 29
2a12:4f00::/29 maxlen: 29
2a12:5280::/29 maxlen: 29
2a12:5600::/29 maxlen: 29
2a12:6200::/29 maxlen: 29
2a12:f300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:9b:39:64:13:ca:49:21:fa:0e:10:a1:66:81:a1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 28 07:23:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c285a56b3370b15ac48591caa559d5fd74b6c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c4:c9:19:3e:38:6b:bc:e3:30:d5:fe:32:83:
9a:1d:08:09:c7:41:16:62:d6:8c:4f:74:cd:77:7b:
e7:8d:1b:6f:3e:97:37:78:ea:5a:3c:78:90:7c:11:
8d:c6:68:ac:38:5f:6b:90:98:ae:f5:f1:9a:81:5a:
4c:6d:fb:56:5e:ab:92:40:37:55:c9:b0:53:0f:c3:
86:e8:5d:c7:dd:e5:8f:04:d5:5c:d2:2e:ba:0d:2e:
79:b0:a9:73:25:3e:4a:77:de:58:81:ca:04:d0:67:
5f:41:38:7e:01:73:1e:2a:2a:a0:36:92:15:66:7d:
4a:5d:ee:f1:ee:ee:d8:db:6f:eb:84:c4:b1:a7:25:
d9:e4:b2:ce:54:ea:6b:d9:90:04:ed:fd:a2:db:71:
45:02:9c:3d:25:7d:cd:1f:03:be:3e:cc:a1:ac:71:
81:ad:75:ba:33:98:c4:32:3d:9c:8e:60:01:bc:de:
8b:26:8e:9a:5a:5d:3f:4c:66:d3:17:ae:bf:8b:a4:
9b:ef:e4:b1:00:ba:55:7e:8b:bb:87:57:16:47:73:
61:f2:3e:be:3b:a3:d9:00:6f:4d:ec:26:d4:bd:56:
e2:db:93:ac:de:23:09:fc:e2:d0:2d:9f:eb:b9:ef:
eb:57:e5:4c:f3:60:20:ba:ee:01:0e:3d:63:04:59:
05:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:28:5A:56:B3:37:0B:15:AC:48:59:1C:AA:55:9D:5F:D7:4B:6C:30
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fChaVrM3CxWsSFkcqlWdX9dLbDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:ac40::/29
2a11:d840::/29
2a12:3300::/29
2a12:4000::/29
2a12:4c80::/29
2a12:4f00::/29
2a12:5280::/29
2a12:5600::/29
2a12:6200::/29
2a12:f300::/29
Signature Algorithm: sha256WithRSAEncryption
68:39:84:18:92:dc:40:23:cc:9c:53:07:14:ef:2d:9a:46:20:
39:a6:32:9c:cd:ed:03:ee:31:4f:3d:83:d4:fe:f5:7c:b7:19:
e0:2c:cd:56:4c:6c:17:f2:3c:07:14:a1:bc:92:46:da:89:cd:
25:d0:ef:86:01:85:89:24:20:e7:75:b3:8a:1a:15:be:da:93:
8f:d8:55:55:56:20:35:b9:22:c0:42:d5:a4:7d:db:1d:cf:6e:
3f:ff:ec:61:37:b1:db:6f:ae:12:6d:62:fd:f7:d6:7b:6f:f8:
93:72:5b:b7:2f:ff:80:cf:4f:f9:cf:ac:59:67:f0:29:c2:aa:
ed:61:cd:f7:a2:c3:b0:06:51:d8:4e:83:d3:22:a5:0a:72:0f:
c4:cb:c5:e9:86:fc:40:99:19:37:76:ff:05:db:cc:c7:76:36:
2f:71:ca:57:c8:7f:bb:d4:40:c4:ef:8a:50:1e:ff:ae:2b:48:
7c:9e:97:4d:4c:62:71:93:aa:26:42:ec:9d:45:57:93:8f:14:
28:23:08:4d:61:80:4a:31:8f:52:9e:d5:56:0d:9f:9f:a5:e9:
c4:d8:e6:d7:91:dd:c2:d4:20:2c:1f:ba:a5:96:75:36:b7:7e:
23:3a:d7:f2:b3:ed:eb:27:68:d1:5a:a3:a5:42:dc:3d:83:a2:
a9:27:e9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:34:48 2026 by rpki-client