Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l_7ioc9lgIOX1TdRzxZeCpPz_Bk.roa
File: l_7ioc9lgIOX1TdRzxZeCpPz_Bk.roa (raw, json)
Hash identifier: OUzVhFBU1IiQfUr0KEKp0o42P4xKqIG3+fWFgB6HLic=
Subject key identifier: 97:FE:E2:A1:CF:65:80:83:97:D5:37:51:CF:16:5E:0A:93:F3:FC:19
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A0C0D0DA451364C7F03DFFDFD1E7CCBA14
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l_7ioc9lgIOX1TdRzxZeCpPz_Bk.roa
Signing time: Sun 20 Sep 2026 21:55:07 +0000
ROA not before: Sun 20 Sep 2026 21:55:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219236
IP address blocks: 2a0c:9a40:8bd0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:d0:da:45:13:64:c7:f0:3d:ff:df:d1:e7:cc:ba:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Sep 20 21:55:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97fee2a1cf65808397d53751cf165e0a93f3fc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:10:88:07:62:0a:8f:cd:a9:46:57:0d:45:92:
33:48:4d:d8:bb:ce:80:9a:a6:70:4c:53:67:44:8e:
a7:73:b5:6e:75:e1:5d:49:01:d0:66:53:62:5e:5e:
1f:d2:a4:da:52:c2:c2:98:2a:a6:29:71:e0:aa:5c:
03:e6:14:ce:fd:d3:3a:c9:65:bb:78:ed:73:81:26:
47:b5:3d:b2:c5:36:12:4a:52:2d:21:90:ff:55:a7:
3a:0b:17:7b:03:5e:78:ce:6f:f6:fe:3a:21:0e:c7:
3e:28:f1:58:48:b0:a6:bd:0d:e6:8f:71:08:92:b7:
54:01:de:9f:36:b9:d3:bc:59:ac:44:43:94:e3:7a:
4b:ab:12:f4:d3:21:76:9d:19:a6:47:ef:8f:5c:21:
a8:b9:9a:11:1f:73:60:a2:7e:04:0e:18:08:a8:3c:
d2:a8:5a:99:b7:60:9d:48:95:62:68:f3:a5:dc:2c:
f6:4a:91:c2:8e:44:be:f1:1a:00:8d:5a:b0:5d:0b:
9a:55:8d:60:ba:a5:af:7c:b9:61:ab:4d:32:86:dd:
45:7a:fc:e5:0a:f0:07:d0:67:aa:ec:03:59:41:e0:
33:d5:df:4d:9e:79:e0:92:ba:78:89:e4:c9:4e:b9:
55:ce:af:42:b8:3b:38:da:d8:cb:40:ff:64:30:35:
ff:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FE:E2:A1:CF:65:80:83:97:D5:37:51:CF:16:5E:0A:93:F3:FC:19
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l_7ioc9lgIOX1TdRzxZeCpPz_Bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8bd0::/48
Signature Algorithm: sha256WithRSAEncryption
62:c3:6d:b7:99:eb:53:14:42:70:7a:40:7e:ca:78:bd:75:02:
51:42:57:8f:87:b6:84:bc:a7:48:95:9d:75:6e:20:84:36:aa:
df:fc:b5:07:2f:29:c9:5c:69:21:63:55:79:a9:2d:69:06:54:
0e:4b:bf:d5:d8:87:42:0b:f6:2c:83:6b:86:d9:c7:7b:f7:de:
92:e3:48:1c:21:93:15:94:b0:78:8d:8d:24:1b:94:07:9d:0a:
4c:11:a0:92:54:f6:de:37:98:a7:f4:93:d1:6d:b0:0c:a2:68:
69:e8:79:98:8b:5e:af:18:a7:0f:04:9a:79:58:2e:8d:c7:65:
ba:8f:1b:ab:39:e9:e9:df:6e:be:3f:d5:7a:3b:cf:70:16:cc:
ee:e7:d5:bc:12:eb:1c:88:54:4b:81:ae:1a:50:67:f2:13:1c:
f8:3a:b9:b0:f4:06:7b:01:87:2f:4c:2f:c3:b5:96:49:c2:ec:
28:13:c4:63:9d:00:3c:15:82:11:7e:27:44:1f:60:0b:ec:28:
f3:72:1a:41:df:a6:b7:79:dc:77:d1:8e:96:7b:84:fb:f1:28:
69:dd:1d:59:a7:7b:e9:e2:44:19:34:02:1f:fc:31:40:1c:e9:
35:2b:d5:56:88:c1:d0:1f:e2:21:50:ca:e7:b8:d2:b3:d2:3e:
30:24:b0:9c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaDA0NpFE2TH8D3/39HnzLoUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjYwOTIwMjE1NTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2ZlZTJhMWNmNjU4MDgzOTdkNTM3NTFjZjE2NWUwYTkzZjNmYzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhCIB2IKj82pRlcNRZIzSE3Yu86A
mqZwTFNnRI6nc7VudeFdSQHQZlNiXl4f0qTaUsLCmCqmKXHgqlwD5hTO/dM6yWW7
eO1zgSZHtT2yxTYSSlItIZD/Vac6Cxd7A154zm/2/johDsc+KPFYSLCmvQ3mj3EI
krdUAd6fNrnTvFmsREOU43pLqxL00yF2nRmmR++PXCGouZoRH3Ngon4EDhgIqDzS
qFqZt2CdSJViaPOl3Cz2SpHCjkS+8RoAjVqwXQuaVY1guqWvfLlhq00yht1Fevzl
CvAH0Geq7ANZQeAz1d9Nnnngkrp4ieTJTrlVzq9CuDs42tjLQP9kMDX/HQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJf+4qHPZYCDl9U3Uc8WXgqT8/wZMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvbF83aW9jOWxnSU9YMVRkUnp4WmVDcFB6X0JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIvQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBiw223metTFEJwekB+yni9dQJRQlePh7aEvKdI
lZ11biCENqrf/LUHLynJXGkhY1V5qS1pBlQOS7/V2IdCC/Ysg2uG2cd7996S40gc
IZMVlLB4jY0kG5QHnQpMEaCSVPbeN5in9JPRbbAMomhp6HmYi16vGKcPBJp5WC6N
x2W6jxurOenp326+P9V6O89wFszu59W8EusciFRLga4aUGfyExz4Ormw9AZ7AYcv
TC/DtZZJwuwoE8RjnQA8FYIRfidEH2AL7CjzchpB36a3edx30Y6We4T78Shp3R1Z
p3vp4kQZNAIf/DFAHOk1K9VWiMHQH+IhUMrnuNKz0j4wJLCc
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:47:57 2026 by rpki-client