Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/iJkYsp6te_2vw5z_YCRGa3FNDdY.roa
File: iJkYsp6te_2vw5z_YCRGa3FNDdY.roa (raw, json)
Hash identifier: Eq9mxJsPS4Rq4+95eR+zvIog8by2A5lDpauU8NxPG9A=
Subject key identifier: 88:99:18:B2:9E:AD:7B:FD:AF:C3:9C:FF:60:24:46:6B:71:4D:0D:D6
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019FA79B36F7FDB199D19C5D22C0435EB110
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/iJkYsp6te_2vw5z_YCRGa3FNDdY.roa
Signing time: Tue 28 Jul 2026 07:23:14 +0000
ROA not before: Tue 28 Jul 2026 07:23:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7203
IP address blocks: 2a09:30c0::/29 maxlen: 29
2a11:2240::/29 maxlen: 29
2a11:3740::/29 maxlen: 29
2a11:5140::/29 maxlen: 29
2a11:6b40::/29 maxlen: 29
2a11:8fc0::/29 maxlen: 29
2a11:b540::/29 maxlen: 29
2a11:cd80::/29 maxlen: 29
2a11:d740::/29 maxlen: 29
2a12:c000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:9b:36:f7:fd:b1:99:d1:9c:5d:22:c0:43:5e:b1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 28 07:23:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=889918b29ead7bfdafc39cff6024466b714d0dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:4f:52:6c:0b:10:b8:71:83:8f:d3:b9:ba:
f5:d0:bb:b4:5e:fe:f4:ed:16:c5:ca:1b:b6:64:9d:
43:98:9b:16:8e:2c:4f:f9:d9:c5:07:4a:b6:26:0b:
ad:59:39:f8:3c:da:b9:e7:b2:32:af:ca:b9:d6:0b:
6d:06:3b:3a:a0:e4:b8:2e:47:00:0d:22:18:49:71:
d8:b7:17:17:67:72:70:00:b0:c2:e3:6d:c3:41:5f:
7a:e5:37:e6:b7:ac:65:65:0e:12:60:27:91:56:f0:
32:f6:98:bd:c0:59:9c:39:65:fe:7f:57:14:7d:59:
e4:a0:54:19:c1:27:ab:f5:b2:9a:8e:0c:7e:ab:12:
ae:97:2c:b5:d7:7e:b6:2d:f0:26:92:0c:fc:82:d0:
21:ab:be:99:93:5b:d7:a3:98:3d:69:07:6c:30:7b:
f8:5f:23:0f:e4:a7:ed:f5:80:8b:27:75:b6:ed:4c:
39:66:07:84:54:bc:6d:d8:b7:f1:91:bc:26:5c:44:
2e:8f:7d:44:af:df:38:37:6d:98:d5:a7:47:32:e0:
cb:a5:be:97:b3:81:1b:c1:09:00:e2:1c:00:bc:3a:
93:3b:1d:02:83:29:07:1a:6d:0c:df:4e:f4:d5:b8:
29:b8:4c:0d:29:16:33:57:51:04:97:f4:de:22:0d:
a1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:99:18:B2:9E:AD:7B:FD:AF:C3:9C:FF:60:24:46:6B:71:4D:0D:D6
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/iJkYsp6te_2vw5z_YCRGa3FNDdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:30c0::/29
2a11:2240::/29
2a11:3740::/29
2a11:5140::/29
2a11:6b40::/29
2a11:8fc0::/29
2a11:b540::/29
2a11:cd80::/29
2a11:d740::/29
2a12:c000::/29
Signature Algorithm: sha256WithRSAEncryption
0d:c8:bf:23:58:e6:1f:38:38:ca:70:21:62:ef:3f:9f:f1:04:
1e:e0:a5:27:4b:b3:aa:bc:7a:d4:1b:00:2d:ba:ae:a1:a8:06:
b9:78:1f:2a:2d:0e:00:d3:3a:41:35:0f:76:19:51:bf:e5:85:
e0:42:68:21:42:e6:13:58:02:8a:5b:27:a1:04:a3:af:8e:49:
e4:18:a5:85:42:bd:29:99:d4:67:b0:f3:91:a3:55:08:92:33:
84:0d:ad:41:9d:f9:2e:aa:9c:ec:fc:5e:0d:bb:ce:5f:b1:e9:
d1:c5:93:ed:88:8d:f9:9c:c7:4f:ef:1c:90:98:15:8d:10:e5:
98:2d:78:57:61:17:0a:95:5b:68:c8:40:b3:cd:62:c9:11:5f:
f6:ab:57:c1:bf:90:17:16:33:b5:9f:b1:32:03:06:c3:ad:9b:
9a:e1:f0:97:dd:8b:92:57:df:e1:16:30:dc:98:7f:5e:d6:7b:
2c:d8:a3:8e:45:61:99:ef:ac:2c:ed:3f:97:a9:1a:3f:d6:64:
36:99:6c:ff:a0:62:da:b5:26:dd:6b:75:2b:64:4c:47:03:02:
4a:d9:3e:c8:1a:46:17:59:a8:99:82:1a:39:4c:57:a9:21:6c:
cc:f6:35:a6:24:04:60:4d:3f:72:c9:ed:57:5e:da:d2:77:be:
b9:bb:b6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:05:55 2026 by rpki-client