Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/AuE2rwLS8SAwP0zsffvoZ2RJKhw.roa
File: AuE2rwLS8SAwP0zsffvoZ2RJKhw.roa (raw, json)
Hash identifier: TM4O7+3WS0xFrNfC6juWwcHyA2+UIAU1iXbpY1CJY+s=
Subject key identifier: 02:E1:36:AF:02:D2:F1:20:30:3F:4C:EC:7D:FB:E8:67:64:49:2A:1C
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01A0853B8C9807ACDAD07E9CEE649A1FB8D5
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/AuE2rwLS8SAwP0zsffvoZ2RJKhw.roa
Signing time: Wed 09 Sep 2026 08:14:27 +0000
ROA not before: Wed 09 Sep 2026 08:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7843
IP address blocks: 9.236.0.0/16 maxlen: 24
161.104.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:3b:8c:98:07:ac:da:d0:7e:9c:ee:64:9a:1f:b8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Sep 9 08:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02e136af02d2f120303f4cec7dfbe86764492a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c1:f5:37:08:66:67:2e:af:df:2b:99:89:80:
ee:d4:87:e0:a0:0e:3e:1c:69:84:12:b6:63:29:1c:
40:be:dc:f9:02:39:0a:8d:8a:2d:79:38:58:99:2a:
5f:83:0e:9d:1d:23:78:98:fa:8b:9f:86:bb:f6:6f:
54:cb:a2:a7:a8:8f:40:10:0a:95:ee:2c:90:7f:a4:
9f:be:77:e6:5d:7a:70:3a:58:eb:24:40:5a:ba:6a:
12:c7:7a:d6:f9:56:fa:27:92:b9:22:3f:53:05:61:
74:38:f2:4c:39:cf:ef:4b:f6:14:9b:73:f1:94:2c:
ef:e2:3e:8f:74:ac:d2:70:97:bf:f6:80:28:6b:41:
f0:48:12:26:cd:e7:63:7f:3f:89:eb:41:c9:6b:85:
71:9d:ef:c4:ec:f4:f9:7b:0c:10:d1:b5:d6:c4:56:
3f:aa:44:e4:55:96:a5:ca:8a:b4:30:e5:d0:f9:f3:
12:b1:73:29:05:6a:f2:74:21:10:7b:c7:2e:e2:80:
81:a3:19:b0:7b:52:79:64:e7:a1:e6:e8:6f:41:69:
14:34:64:bc:63:05:cb:08:2a:8a:d1:94:86:27:ea:
b0:7a:58:9d:fb:4f:ca:a0:c5:eb:30:7f:f6:1a:0e:
bd:89:56:bf:7d:cb:41:5f:19:b5:ec:49:d3:05:58:
d2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E1:36:AF:02:D2:F1:20:30:3F:4C:EC:7D:FB:E8:67:64:49:2A:1C
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/AuE2rwLS8SAwP0zsffvoZ2RJKhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.236.0.0/16
161.104.112.0/20
Signature Algorithm: sha256WithRSAEncryption
42:dc:c2:6c:19:b7:da:33:e2:d2:b2:af:75:7e:e2:c1:f0:76:
cc:4d:74:5b:96:ac:46:9c:77:df:0a:06:16:c7:b9:4c:40:49:
99:fa:ce:6e:d3:0b:2f:04:f2:1e:13:5e:b6:cf:ee:d2:f6:bb:
81:f5:52:1c:2d:62:e1:f9:41:2d:fe:6a:1f:f9:2c:f5:a2:be:
0d:06:5c:3e:33:57:b9:be:b7:bd:8c:3f:ae:15:3a:7e:28:a7:
f4:27:2f:0e:39:f4:a3:c3:cb:7d:42:5e:a4:f3:57:c6:36:5b:
3d:e8:a4:53:5d:7f:45:8a:31:bc:c8:b9:d5:09:39:a3:2c:e2:
c9:03:10:ce:3a:db:12:d4:d7:7e:10:d3:6d:44:5d:e8:5f:d8:
c9:0d:f1:46:51:a9:7d:5c:65:bf:51:98:08:e9:d4:3c:3b:31:
44:12:51:0f:01:3e:a9:e5:f1:78:f4:26:2c:bd:54:0d:15:ef:
c1:8c:bf:7f:f2:e5:38:e2:d7:c1:d1:b9:2b:ec:95:f0:c7:f4:
48:a2:c1:ae:35:6c:6b:87:41:45:46:2a:f3:bf:b1:66:31:c2:
c4:12:5e:68:3b:a0:f6:30:6d:99:d5:b3:87:9c:6a:ee:66:8c:
09:a1:6e:c2:30:c9:90:94:6b:2f:d5:55:a0:e2:19:66:f7:23:
fa:da:65:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:12:15 2026 by rpki-client