Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/I7mi3E0an_XwM501IzP6XoSy2Wk.roa
File: I7mi3E0an_XwM501IzP6XoSy2Wk.roa (raw, json)
Hash identifier: 7K4bWpncg05jTDQa+KG4OIN9CRZtSPgz2UdmkAKtJwc=
Subject key identifier: 23:B9:A2:DC:4D:1A:9F:F5:F0:33:9D:35:23:33:FA:5E:84:B2:D9:69
Certificate issuer: /CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Certificate serial: 019B7F846524EE1EA6263127F3D630B15F0D
Authority key identifier: 80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/I7mi3E0an_XwM501IzP6XoSy2Wk.roa
Signing time: Fri 02 Jan 2026 16:22:21 +0000
ROA not before: Fri 02 Jan 2026 16:22:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47368
IP address blocks: 2001:67c:9f0::/48 maxlen: 48
2001:67c:9f4::/48 maxlen: 48
2001:67c:9f8::/48 maxlen: 48
2001:67c:9fc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:65:24:ee:1e:a6:26:31:27:f3:d6:30:b1:5f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Validity
Not Before: Jan 2 16:22:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23b9a2dc4d1a9ff5f0339d352333fa5e84b2d969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:36:c9:e3:25:86:d3:f9:a7:28:3d:3b:f3:53:
13:1f:16:40:9c:c8:aa:72:82:72:c6:b7:d7:44:bc:
33:69:ad:06:33:60:a8:d9:87:6e:4a:07:d9:f8:f9:
ba:dc:9c:2e:61:48:fa:59:43:ac:0b:a6:b2:a2:77:
c4:c9:a5:80:d3:cd:a1:1a:91:ee:2e:f0:1f:da:33:
1d:34:5a:36:c9:65:fa:68:d6:0a:23:c2:79:f4:52:
1f:80:8e:36:e9:66:92:28:54:cd:85:aa:ae:76:00:
84:e2:61:e8:ea:cb:69:8a:dd:e2:a8:af:c3:9d:bb:
7a:05:08:a7:ca:89:9b:cc:f6:a5:36:b1:cd:9c:9d:
01:54:ca:79:26:d4:a7:44:68:ac:94:45:2e:79:e0:
23:12:39:2c:f0:b2:cb:f2:b4:80:8e:3f:e5:c1:b6:
0e:3a:13:94:43:01:80:cc:0b:07:45:47:16:9a:c0:
ae:b1:6c:f3:66:aa:a5:f1:e6:33:40:01:89:c7:b5:
3f:d1:36:92:aa:7e:bc:db:78:4c:e9:22:c5:4e:ef:
20:15:da:41:f3:01:ea:8e:f0:09:dc:0d:86:2c:94:
51:5c:9e:98:59:ec:2c:6e:d7:60:97:43:ad:c6:ab:
79:fd:53:9c:55:48:bb:44:9e:7d:b9:73:d0:2e:fe:
23:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B9:A2:DC:4D:1A:9F:F5:F0:33:9D:35:23:33:FA:5E:84:B2:D9:69
X509v3 Authority Key Identifier:
keyid:80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/I7mi3E0an_XwM501IzP6XoSy2Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:9f0::/48
2001:67c:9f4::/48
2001:67c:9f8::/48
2001:67c:9fc::/48
Signature Algorithm: sha256WithRSAEncryption
0b:3f:cc:47:2e:c8:c9:54:b5:c6:4f:82:d8:96:b7:a4:f2:d8:
6f:22:3e:20:b2:d4:8a:60:f8:53:3f:be:85:b5:1f:72:02:5c:
27:3c:33:74:c1:32:85:55:2d:be:20:f9:bd:7e:e8:b3:0b:5e:
4c:b5:dd:1d:61:ea:20:b6:2a:e2:d9:a2:b5:50:89:9e:ad:9f:
4b:11:71:1a:c8:6c:b5:9f:a9:ae:58:62:57:e7:0a:b9:e0:29:
f3:99:0f:af:d2:fc:c9:19:e8:e3:a3:67:93:14:03:25:a9:12:
18:ea:d5:08:cb:06:69:6f:a1:c5:ce:0d:90:d7:4e:f9:41:4b:
7d:59:22:86:54:ec:5f:16:26:01:df:01:e6:d8:cb:09:19:c6:
31:63:96:79:80:7b:73:39:9b:c1:2b:16:3a:f1:3f:ce:33:50:
cf:bf:13:a0:bc:32:7d:37:7f:c3:d3:82:86:02:60:3b:ff:24:
cf:6f:6e:0b:65:bb:e6:da:af:fa:f3:b5:d6:94:5a:51:d3:f3:
29:06:25:4f:e3:72:26:ee:b8:3e:45:c9:22:d2:83:50:eb:d6:
33:e0:21:6f:87:34:64:9c:48:b6:c5:91:8b:02:12:59:ab:a4:
e0:bb:75:7f:f9:51:51:86:db:5c:b8:78:90:b1:28:c5:8a:cb:
45:69:3a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:11:38 2026 by rpki-client