Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/duahywAb0bCd3NE788rEkikLdtc.roa
File: duahywAb0bCd3NE788rEkikLdtc.roa (raw, json)
Hash identifier: 0pz7gzTnGRYTPc/MFrzmuziOEOYBgy+W5wqpCqpWkvU=
Subject key identifier: 76:E6:A1:CB:00:1B:D1:B0:9D:DC:D1:3B:F3:CA:C4:92:29:0B:76:D7
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019E1E4E6F9CC8582B68736CE7F4A9D5D16B
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/duahywAb0bCd3NE788rEkikLdtc.roa
Signing time: Tue 12 May 2026 22:28:37 +0000
ROA not before: Tue 12 May 2026 22:28:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208471
IP address blocks: 2a0c:9a40:8ef0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:4e:6f:9c:c8:58:2b:68:73:6c:e7:f4:a9:d5:d1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: May 12 22:28:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76e6a1cb001bd1b09ddcd13bf3cac492290b76d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2a:fb:45:38:67:66:c7:02:b1:45:81:25:d5:
be:6d:98:0b:47:68:7e:82:c0:f3:98:09:83:3c:20:
01:e0:b4:d9:93:64:7b:bf:dc:8a:ea:07:aa:34:b8:
10:75:58:2d:38:e8:c0:e1:59:7e:e7:2a:d9:dd:10:
4b:a8:c4:6e:48:93:bd:91:e8:60:86:c2:f7:d1:4f:
54:fe:07:ca:80:a3:9e:c1:3a:10:66:fd:e6:c0:0c:
8e:19:b0:a4:bc:7e:2d:41:56:68:58:53:e0:76:f1:
7c:4a:e7:1a:df:43:08:85:e8:78:01:a1:70:82:25:
29:9e:5e:16:96:e4:12:66:ff:ee:77:42:94:d4:4a:
0d:47:ac:29:86:27:da:6f:a0:98:c5:e6:f6:72:28:
f2:d2:53:4b:c2:58:86:84:8e:d4:39:c0:8a:77:68:
cc:78:4b:c6:28:a8:a8:14:a2:9a:95:e3:38:79:bc:
23:4b:d3:12:39:bc:cc:b4:da:5f:8d:a4:96:3c:e1:
bb:76:8a:5e:52:b2:4d:6f:1e:95:7a:8d:45:99:66:
e6:94:0b:28:09:6d:53:fd:2b:3b:a6:82:aa:7c:1b:
a0:47:70:d9:56:f6:56:20:3f:c5:52:8f:f2:e0:b4:
94:4c:0d:38:4e:de:b9:6d:30:61:01:85:4c:72:21:
05:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E6:A1:CB:00:1B:D1:B0:9D:DC:D1:3B:F3:CA:C4:92:29:0B:76:D7
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/duahywAb0bCd3NE788rEkikLdtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8ef0::/44
Signature Algorithm: sha256WithRSAEncryption
ad:2a:bd:68:d3:4e:19:19:40:7f:20:9b:72:e2:83:aa:f9:eb:
8d:37:95:e0:72:83:48:32:32:f6:25:c8:cc:ae:86:54:fa:64:
2d:76:6f:48:df:a9:62:18:b3:15:ea:19:8a:42:be:59:3a:e1:
15:84:04:45:2e:78:7b:2c:a7:c0:4f:e5:89:1d:79:e3:ff:17:
be:f3:97:b9:b5:08:e2:28:09:10:87:a5:be:e2:7d:54:4c:db:
74:a0:d0:02:d0:42:d1:ba:3d:23:6b:bc:e0:6d:1a:2e:06:1f:
a6:9a:a8:a1:3d:45:83:c7:5b:f3:66:68:bd:38:46:f4:e7:d2:
53:fb:8b:86:db:8b:88:b8:20:8d:b6:22:5c:09:90:49:c4:92:
01:4c:23:48:73:54:ee:7a:1d:65:57:85:fc:65:f1:73:bf:3f:
cb:38:73:97:e7:fc:71:ff:29:09:f8:b3:2a:9e:b2:0c:e6:f2:
1f:66:68:fc:83:e9:ab:c6:9d:f3:93:40:dd:67:7d:b3:18:61:
15:0d:0d:2f:5a:6b:e7:b2:ac:41:6a:42:7a:0d:e0:cc:74:ca:
84:2d:5e:2f:8d:58:eb:48:ae:c8:9d:d9:46:58:25:3d:20:d0:
39:2d:00:56:e4:40:cf:23:13:cb:b9:14:ee:1a:52:15:91:a5:
a7:89:c3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:53 2026 by rpki-client