Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l0fcWq55eWbkj_8eHYtUABR1Cxs.roa
File: l0fcWq55eWbkj_8eHYtUABR1Cxs.roa (raw, json)
Hash identifier: czvLuokGcSRIsjB2bruOHp25yXYd3ODK5l5VNZ3L//4=
Subject key identifier: 97:47:DC:5A:AE:79:79:66:E4:8F:FF:1E:1D:8B:54:00:14:75:0B:1B
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A1871AEBD515D29FCCBA0331CA2ECA4909
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l0fcWq55eWbkj_8eHYtUABR1Cxs.roa
Signing time: Thu 29 Oct 2026 10:00:50 +0000
ROA not before: Thu 29 Oct 2026 10:00:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139331
IP address blocks: 2a0c:9a40:d600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:1a:eb:d5:15:d2:9f:cc:ba:03:31:ca:2e:ca:49:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Oct 29 10:00:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9747dc5aae797966e48fff1e1d8b540014750b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:02:91:68:2a:85:e8:fe:d3:9b:46:e9:99:22:
0c:b9:01:84:12:2c:1a:06:8e:3f:cd:64:a4:5e:46:
f2:36:37:4b:5a:84:c6:65:3c:a1:f4:ec:f7:0e:fd:
4a:cf:3f:92:81:14:b0:16:a7:45:80:2d:86:83:ac:
86:21:ae:8a:8a:4f:6f:e8:e3:b1:e1:87:8f:f5:b1:
c6:e0:45:2d:b3:31:1c:16:57:19:cf:11:d2:69:41:
1f:40:0b:3e:1b:28:4d:57:22:fc:d5:83:0e:56:95:
de:eb:e8:13:7c:00:3f:ac:69:90:9a:d1:98:1a:e0:
86:66:a0:0b:9b:61:d3:14:f9:8d:da:33:83:eb:26:
d1:73:8a:70:b2:a5:dc:2a:c0:35:ce:9f:51:c3:48:
21:ba:e1:ea:6c:59:ff:45:54:96:63:09:8c:e9:63:
2e:96:36:de:9c:ea:eb:71:65:bc:18:64:7c:b4:e3:
00:c1:d5:04:2b:62:7e:c2:81:3f:5b:d4:d4:28:72:
7a:bb:6c:88:99:ae:ab:f3:81:6e:26:09:f0:b2:0e:
f0:90:d2:8f:d0:85:d4:ef:a8:cb:ed:31:85:82:3d:
0c:82:36:07:a1:9e:13:b4:bd:e9:5a:2b:f4:db:6d:
ff:7f:d9:1a:e5:ec:f3:b6:d9:b8:a9:14:b5:48:09:
4c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:47:DC:5A:AE:79:79:66:E4:8F:FF:1E:1D:8B:54:00:14:75:0B:1B
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l0fcWq55eWbkj_8eHYtUABR1Cxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:d600::/40
Signature Algorithm: sha256WithRSAEncryption
95:77:ab:47:68:be:a0:f5:84:6d:6d:f1:1b:1e:52:e5:25:3f:
77:0b:e0:b9:39:1a:06:97:61:53:b3:f7:aa:77:a5:36:f6:8a:
68:1f:41:62:f4:74:db:e3:79:f0:8d:fd:95:5d:9c:e3:82:ea:
ef:78:13:05:7d:47:6f:e0:57:9c:da:83:e7:4d:ba:1e:e6:9b:
25:c1:26:2a:35:ac:83:5d:d8:ee:2b:2a:d7:02:f8:7e:49:dd:
c7:d4:30:52:0d:a9:a7:eb:74:29:4a:cf:90:eb:53:d1:20:33:
61:8c:a9:69:35:93:e0:ba:b9:1a:a9:65:b1:b2:38:73:a7:79:
4c:01:cb:64:6e:73:43:20:77:5f:9e:ba:35:1b:a0:c7:17:82:
00:e8:80:67:f7:f9:f7:43:b7:95:fb:4a:71:4e:5b:ee:a0:1e:
13:2f:01:fe:c4:9c:d0:02:40:2c:2d:6e:e8:52:06:31:3a:ee:
29:8a:72:07:de:56:db:4e:0c:95:15:85:06:59:33:69:3e:6a:
04:fb:55:08:20:ad:cc:fc:b4:82:9d:0e:09:20:a2:d9:66:d7:
e8:e4:d5:eb:87:70:6f:16:92:48:52:1f:e0:7c:20:c9:80:77:
b9:09:32:d7:ef:a4:71:ab:46:53:f5:46:0c:d6:5c:c6:5f:db:
18:00:00:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:12:08 2026 by rpki-client