Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0cbF_Fy1co0DNhLaxe9jFnmaG7s.roa
File: 0cbF_Fy1co0DNhLaxe9jFnmaG7s.roa (raw, json)
Hash identifier: K19VYYri7mIeeaVKmodKjzxZ3Jv1O4wDzhI/8sNanxM=
Subject key identifier: D1:C6:C5:FC:5C:B5:72:8D:03:36:12:DA:C5:EF:63:16:79:9A:1B:BB
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019D06FA269BB6DB637A227250856658ABF6
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0cbF_Fy1co0DNhLaxe9jFnmaG7s.roa
Signing time: Thu 19 Mar 2026 16:42:30 +0000
ROA not before: Thu 19 Mar 2026 16:42:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a0c:9a40:8060::/44 maxlen: 44
2a0c:9a40:8b20::/48 maxlen: 48
2a0c:9a40:9c10::/44 maxlen: 48
2a0c:9a40:9c20::/44 maxlen: 48
2a0c:9a40:9c90::/44 maxlen: 48
2a0c:9a40:9ca0::/44 maxlen: 48
2a0e:7d45::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:fa:26:9b:b6:db:63:7a:22:72:50:85:66:58:ab:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Mar 19 16:42:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1c6c5fc5cb5728d033612dac5ef6316799a1bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:dd:92:71:9f:4a:04:aa:aa:4c:99:16:39:d7:
b6:e8:d5:40:d7:24:0b:a6:91:8d:43:64:2d:95:cf:
fc:ec:10:56:f7:87:0c:d8:6b:1e:3f:f3:9f:84:83:
01:dc:06:1f:09:a4:42:f0:18:e1:99:ad:62:f1:ed:
2c:2f:d1:6a:30:ea:b5:d3:b7:19:58:5c:15:bd:63:
2b:f1:9d:1f:70:41:76:5f:38:4c:8e:81:11:c5:5a:
5c:7d:c8:d8:c4:8d:bf:b8:5b:f7:d7:21:bb:54:95:
38:7c:33:48:e2:6b:b3:21:6e:60:9b:dc:74:39:ea:
f5:4e:bb:fa:5f:7a:dc:a3:a2:49:ce:6b:54:0d:7c:
ca:c0:e7:04:b7:14:65:95:01:c4:a8:fd:cf:45:78:
c6:11:de:77:82:6d:a4:6e:49:23:2e:1f:8f:93:3f:
58:ca:18:a8:21:3b:78:aa:76:b2:0e:82:9f:86:86:
ca:53:a6:89:5e:8f:da:91:e4:e9:37:ff:73:1d:88:
c8:ab:94:c7:e8:70:65:21:fe:eb:e8:82:d3:44:15:
04:6d:7c:67:da:62:bc:ab:b6:07:54:0b:b9:4c:26:
12:b7:38:51:91:09:97:1b:ec:e9:bd:f4:e0:5d:c6:
54:0e:3f:48:62:82:34:7a:3d:69:31:b9:cd:d2:8a:
95:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C6:C5:FC:5C:B5:72:8D:03:36:12:DA:C5:EF:63:16:79:9A:1B:BB
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0cbF_Fy1co0DNhLaxe9jFnmaG7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8060::/44
2a0c:9a40:8b20::/48
2a0c:9a40:9c10::-2a0c:9a40:9c2f:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:9c90::-2a0c:9a40:9caf:ffff:ffff:ffff:ffff:ffff
2a0e:7d45::/32
Signature Algorithm: sha256WithRSAEncryption
72:4b:f0:95:3c:7c:eb:4e:94:8d:a4:02:8f:cb:dc:1c:09:bc:
48:1f:79:13:60:34:62:9d:3c:41:97:9c:b8:e8:ea:62:44:06:
3c:62:02:69:81:46:df:12:9b:cf:c3:b4:f5:c0:ab:0d:a0:b8:
ac:f3:d1:29:65:f0:11:99:50:ff:9c:30:9f:fe:8a:1b:59:0d:
4e:fd:13:31:f8:23:d0:2b:33:d8:45:ce:3a:ba:57:63:27:b9:
2a:ec:a2:15:cf:7b:7f:af:29:16:41:9d:56:a8:9a:e5:4b:09:
b7:14:83:17:b6:60:70:4d:71:40:88:ae:1a:95:94:bd:79:04:
b4:89:37:be:01:fc:21:b6:16:b0:e1:af:ce:0f:a3:c9:70:07:
d3:98:1c:54:a5:06:fd:79:9d:0f:6c:b1:dd:e9:ab:bd:0a:3c:
1e:e5:23:72:a0:30:d7:0c:95:1b:83:e9:b4:41:c1:cc:99:41:
c9:92:af:eb:6e:84:10:30:c5:b8:b8:8f:7e:88:ce:1b:7e:c4:
af:42:53:40:39:af:85:12:fa:fa:7d:8a:f1:5c:4b:23:9f:7d:
4d:bd:f6:6a:58:11:16:6a:6b:92:e0:9f:59:01:97:28:4b:04:
77:6c:0b:38:45:cf:96:96:ed:79:10:47:5e:54:ec:79:58:5c:
76:e4:98:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:13:20 2026 by rpki-client