Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/90pIRo4oGPb_c3zVAWaT7rGauh4.roa
File: 90pIRo4oGPb_c3zVAWaT7rGauh4.roa (raw, json)
Hash identifier: RxEmlJAzt3qSpThLmZZ1Q1w3EgvczeGl5RqcbpfL92o=
Subject key identifier: F7:4A:48:46:8E:28:18:F6:FF:73:7C:D5:01:66:93:EE:B1:9A:BA:1E
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 01A0C85F5A1CF4F682CFBC153B7B416482BA
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/90pIRo4oGPb_c3zVAWaT7rGauh4.roa
Signing time: Tue 22 Sep 2026 09:08:07 +0000
ROA not before: Tue 22 Sep 2026 09:08:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 2a11:4f40::/29 maxlen: 29
2a11:9b80::/29 maxlen: 29
2a11:b800::/29 maxlen: 29
2a11:c400::/29 maxlen: 29
2a12:2a00::/29 maxlen: 29
2a12:9a80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:5f:5a:1c:f4:f6:82:cf:bc:15:3b:7b:41:64:82:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Sep 22 09:08:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f74a48468e2818f6ff737cd5016693eeb19aba1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:5d:75:c4:6a:7d:5e:48:d2:ff:1e:44:d7:
02:62:69:b0:71:07:1d:f4:78:a7:8d:10:46:7b:32:
6d:4f:6e:01:c7:75:29:45:37:41:74:80:b4:00:98:
80:70:74:f4:cd:a7:69:0a:74:6f:64:73:90:a7:37:
69:5c:7f:54:52:79:92:fa:40:a7:b9:f3:dc:38:07:
1f:8a:17:bc:8b:a6:44:e8:f2:88:1e:78:ba:b8:22:
8a:ee:96:f9:c0:68:4c:bc:be:89:49:85:04:97:53:
7f:e8:70:d7:e8:a8:c9:2e:93:53:51:f7:e6:5b:77:
ab:2b:e6:df:88:58:d4:eb:57:b7:c1:13:be:31:75:
34:31:45:96:de:57:48:32:09:4d:40:f4:19:12:c2:
86:57:28:d4:3e:a9:88:66:d0:91:01:04:bb:48:97:
72:04:d3:ed:e3:2f:35:42:6b:fc:52:21:f0:86:fd:
e4:f9:45:0d:46:a7:89:38:4d:64:3c:49:a6:6b:3c:
6c:e1:77:74:df:3a:da:86:71:9d:b8:f7:83:2b:7e:
58:42:a0:d5:b0:eb:5d:5d:40:0a:02:00:c3:e7:89:
52:97:cf:2c:1d:7b:a7:c3:ba:05:15:42:69:00:4f:
3b:73:e0:69:2d:41:d4:cb:ff:0d:3a:4a:49:6b:e2:
fc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4A:48:46:8E:28:18:F6:FF:73:7C:D5:01:66:93:EE:B1:9A:BA:1E
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/90pIRo4oGPb_c3zVAWaT7rGauh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4f40::/29
2a11:9b80::/29
2a11:b800::/29
2a11:c400::/29
2a12:2a00::/29
2a12:9a80::/29
Signature Algorithm: sha256WithRSAEncryption
b8:3b:93:db:49:fb:91:88:c8:84:69:9b:aa:1e:e0:94:be:90:
f2:be:5b:83:7f:83:34:f1:09:4b:fb:b3:89:30:64:e8:55:6b:
d7:5e:c8:4a:68:a7:fc:4b:b1:05:ae:7f:cc:95:59:7b:81:ba:
34:40:52:9b:d4:2a:17:a7:76:dd:10:ef:cb:e4:5d:27:01:88:
cd:df:51:7f:be:d5:e8:b9:cc:a0:9f:10:0a:ff:8a:8c:a4:52:
3f:00:79:52:dc:dd:c7:95:a3:4a:8c:6d:c1:e0:1b:f0:fe:66:
b6:96:f5:b2:7f:4b:8b:88:9e:47:77:7f:39:5f:77:f1:85:d1:
3a:92:82:4e:cb:b2:2d:49:f2:0f:4c:1e:65:ad:ce:37:c4:57:
68:5f:d6:7e:0f:01:b5:04:6a:88:62:7a:2e:87:42:04:bc:7a:
f5:a4:ad:ca:9e:b9:77:25:d0:4c:ed:42:0d:78:6a:cb:aa:81:
b7:3b:77:c4:c8:38:d4:32:89:81:09:e1:c0:bb:f7:7f:c4:5c:
b0:52:7b:f2:6b:f7:c6:41:df:dd:2c:ca:de:1f:c1:3c:0d:04:
04:f2:02:ed:61:73:b6:bd:8b:d0:ad:6a:02:9e:0d:f7:e1:15:
22:c6:65:7b:7c:09:64:4e:1c:2d:53:88:91:37:7e:3c:09:59:
c8:20:70:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:53:38 2026 by rpki-client