Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/F9MecBFoB5ZAh5qF3-11SYimbwU.roa
File: F9MecBFoB5ZAh5qF3-11SYimbwU.roa (raw, json)
Hash identifier: Ny2nfOFlg2F8DrfMbgRKy3UMuPORqH+cAqCDTor4RY0=
Subject key identifier: 17:D3:1E:70:11:68:07:96:40:87:9A:85:DF:ED:75:49:88:A6:6F:05
Certificate issuer: /CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Certificate serial: 019C70BC94DAFAC34E23093AD58E416464D1
Authority key identifier: 2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/F9MecBFoB5ZAh5qF3-11SYimbwU.roa
Signing time: Wed 18 Feb 2026 12:32:12 +0000
ROA not before: Wed 18 Feb 2026 12:32:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209658
IP address blocks: 2a11:1fc0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:bc:94:da:fa:c3:4e:23:09:3a:d5:8e:41:64:64:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Validity
Not Before: Feb 18 12:32:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17d31e701168079640879a85dfed754988a66f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:32:71:59:c5:7c:0a:48:de:63:12:76:e4:e2:
2d:9a:27:31:94:34:d2:4e:3b:89:33:52:9b:c8:e6:
7c:d7:65:9f:99:83:af:a8:da:84:48:83:0b:32:42:
36:af:56:66:6a:e6:c1:c5:29:35:b3:04:b8:e8:f7:
91:bd:b2:d0:41:f7:2a:8f:c0:4a:c3:81:fc:ca:57:
3e:d3:ca:35:cb:15:ef:34:93:81:85:4c:f5:45:b5:
93:62:aa:2c:ea:0b:4e:39:85:24:1e:7b:ac:d8:d3:
e5:38:cb:db:7c:8c:04:d4:45:0a:38:a4:89:9f:95:
ac:7a:04:26:96:9d:f2:7f:85:b9:0e:35:a8:67:d0:
23:56:8d:d4:b3:6c:e1:b2:8a:06:62:8a:c3:16:39:
7e:6f:2b:79:d8:a6:65:a0:1b:71:64:1d:a3:82:0b:
ea:05:5b:85:d5:27:9f:cd:06:fd:95:a9:c5:c1:38:
b1:1f:86:8e:da:88:99:2f:2d:70:65:64:48:68:db:
a8:ca:a1:25:7f:17:01:aa:c0:fc:a7:a6:52:9f:87:
00:c8:30:94:f8:88:7d:76:25:c9:f5:ae:4b:6c:33:
dd:e0:24:59:d9:da:b8:1d:f3:13:a8:55:6d:c4:1d:
9b:09:8c:30:aa:f4:cd:46:86:8b:b1:27:2b:5d:61:
31:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D3:1E:70:11:68:07:96:40:87:9A:85:DF:ED:75:49:88:A6:6F:05
X509v3 Authority Key Identifier:
keyid:2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/F9MecBFoB5ZAh5qF3-11SYimbwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1fc0:1::/48
Signature Algorithm: sha256WithRSAEncryption
62:4c:5d:e5:03:44:b7:21:42:a9:c9:a5:12:c7:72:77:0d:b8:
50:ad:9c:c7:0e:b7:52:2c:ad:6e:24:67:c0:3f:cb:a6:d8:5f:
f5:1e:7a:41:db:1b:ba:2e:a4:6e:81:54:20:d4:b0:ff:5f:b9:
13:f2:22:c4:8d:10:b2:1d:27:a1:17:4c:fc:1e:80:0f:f4:c7:
51:b1:10:6d:11:8f:fb:5b:18:b2:a2:af:fa:2f:46:0e:fb:5f:
fc:75:3c:43:e5:63:ed:40:a8:fe:f1:7a:6a:a7:9c:0c:5b:7a:
4e:63:9a:82:f0:51:1d:10:d8:21:93:2c:f2:30:b2:23:bf:49:
7d:a9:ee:81:48:91:17:31:f8:2b:06:12:73:fd:91:31:d2:89:
6f:d1:81:c7:39:e8:d0:2c:4b:8f:15:04:33:0b:d5:b6:78:4b:
01:d4:1f:2c:e2:79:a1:81:6f:9f:b0:77:26:5a:4b:dc:48:84:
97:78:56:8f:32:68:f1:6b:d2:43:d9:ea:e4:a1:5a:ac:62:61:
7c:9d:9c:45:e3:cc:ec:27:25:1a:18:f4:eb:8f:80:03:00:b9:
d8:ea:18:c1:c4:b8:f7:cd:2f:0b:02:27:a1:89:d6:72:78:50:
fb:04:e0:22:2a:bc:8d:43:88:40:93:af:f2:12:68:5f:70:61:
6d:86:4b:93
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZxwvJTa+sNOIwk61Y5BZGTRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWMxNmY3ZWE3MTBhZjQ1ZTJiM2ExMWU2MjhhMzhjZTY3
YmM3YTUwHhcNMjYwMjE4MTIzMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2QzMWU3MDExNjgwNzk2NDA4NzlhODVkZmVkNzU0OTg4YTY2ZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jJxWcV8CkjeYxJ25OItmicxlDTS
TjuJM1KbyOZ812WfmYOvqNqESIMLMkI2r1ZmaubBxSk1swS46PeRvbLQQfcqj8BK
w4H8ylc+08o1yxXvNJOBhUz1RbWTYqos6gtOOYUkHnus2NPlOMvbfIwE1EUKOKSJ
n5WsegQmlp3yf4W5DjWoZ9AjVo3Us2zhsooGYorDFjl+byt52KZloBtxZB2jggvq
BVuF1SefzQb9lanFwTixH4aO2oiZLy1wZWRIaNuoyqElfxcBqsD8p6ZSn4cAyDCU
+Ih9diXJ9a5LbDPd4CRZ2dq4HfMTqFVtxB2bCYwwqvTNRoaLsScrXWExYQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBfTHnARaAeWQIeahd/tdUmIpm8FMB8GA1UdIwQY
MBaAFC0cFvfqcQr0Xis6EeYoo4zme8elMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ3VzktcHhDdlJlS3pvUjVpaWpqT1o3eDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81ZWIyMTItNDZmNS00MzhjLTg2NzIt
MWZhNzgwMThhNmU5LzEvRjlNZWNCRm9CNVpBaDVxRjMtMTFTWWltYndVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy81ZWIyMTItNDZmNS00MzhjLTg2NzItMWZhNzgwMThhNmU5
LzEvTFJ3VzktcHhDdlJlS3pvUjVpaWpqT1o3eDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhEfwAAB
MA0GCSqGSIb3DQEBCwUAA4IBAQBiTF3lA0S3IUKpyaUSx3J3DbhQrZzHDrdSLK1u
JGfAP8um2F/1HnpB2xu6LqRugVQg1LD/X7kT8iLEjRCyHSehF0z8HoAP9MdRsRBt
EY/7Wxiyoq/6L0YO+1/8dTxD5WPtQKj+8Xpqp5wMW3pOY5qC8FEdENghkyzyMLIj
v0l9qe6BSJEXMfgrBhJz/ZEx0olv0YHHOejQLEuPFQQzC9W2eEsB1B8s4nmhgW+f
sHcmWkvcSISXeFaPMmjxa9JD2erkoVqsYmF8nZxF48zsJyUaGPTrj4ADALnY6hjB
xLj3zS8LAiehidZyeFD7BOAiKryNQ4hAk6/yEmhfcGFthkuT
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:13:38 2026 by rpki-client