Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/m1OT9_Oh7JS7V3R1rRviHcm-juY.roa
File: m1OT9_Oh7JS7V3R1rRviHcm-juY.roa (raw, json)
Hash identifier: uQvi7Pqqu7zxP6O5SMttYeiMgTQzQ+VIUvmzfarhEtw=
Subject key identifier: 9B:53:93:F7:F3:A1:EC:94:BB:57:74:75:AD:1B:E2:1D:C9:BE:8E:E6
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 01A0C85F5962789DFD23C9450BE4F5DA2DCD
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/m1OT9_Oh7JS7V3R1rRviHcm-juY.roa
Signing time: Tue 22 Sep 2026 09:08:07 +0000
ROA not before: Tue 22 Sep 2026 09:08:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48274
IP address blocks: 2a11:cc0::/29 maxlen: 29
2a11:3ac0::/29 maxlen: 29
2a11:9500::/29 maxlen: 29
2a11:b7c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:5f:59:62:78:9d:fd:23:c9:45:0b:e4:f5:da:2d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Sep 22 09:08:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b5393f7f3a1ec94bb577475ad1be21dc9be8ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:36:88:e4:c9:b1:fa:6b:11:a8:cf:d1:b8:
5e:d0:e9:d8:39:93:20:58:81:3a:c8:ba:f8:d7:25:
90:d8:b6:78:95:16:92:aa:3e:58:7e:b9:d6:92:5e:
33:2b:f3:4a:e7:5c:dd:8a:b7:ab:c3:21:66:4a:6b:
1b:22:1c:8c:2e:64:9d:5e:37:dd:3c:c1:17:6d:22:
e7:e7:7b:10:7c:f4:81:12:1d:65:a9:81:2f:8e:cd:
48:3e:fe:0c:ba:5e:56:08:a1:4b:f4:9d:b5:94:74:
f3:7c:70:7c:1f:6f:44:11:7e:0e:19:0d:c4:3b:63:
c9:9f:b1:5e:70:67:58:c4:7c:b4:d2:44:1d:61:fa:
a9:4b:e1:b0:c3:a4:86:8f:2a:f4:81:69:09:95:6d:
85:fb:e1:83:7a:05:a2:a4:e6:7b:4c:ae:72:8e:bb:
46:96:bb:69:b4:60:4b:81:7d:bc:e6:2d:09:9d:36:
98:25:88:fb:a5:b6:13:d7:1a:e4:e9:07:a4:a0:78:
8f:6f:f2:34:5b:d3:f4:59:b1:c0:7f:09:bc:0a:2d:
a1:bf:f3:95:33:af:0c:93:4f:12:0e:95:40:75:19:
5d:65:2a:ab:b6:03:02:91:10:be:19:19:42:4d:0e:
b3:aa:25:2b:88:2e:0c:b2:9f:71:d5:01:45:58:55:
b7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:53:93:F7:F3:A1:EC:94:BB:57:74:75:AD:1B:E2:1D:C9:BE:8E:E6
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/m1OT9_Oh7JS7V3R1rRviHcm-juY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:cc0::/29
2a11:3ac0::/29
2a11:9500::/29
2a11:b7c0::/29
Signature Algorithm: sha256WithRSAEncryption
c5:66:ec:ab:a7:2d:72:30:ef:f3:22:8c:3f:8a:ea:63:d2:8c:
4d:c7:de:ee:59:a2:d5:a1:a5:e8:94:1e:36:63:23:7e:3d:16:
fd:46:de:0e:c1:5e:5c:70:ca:4e:7e:a1:7c:3f:ec:d2:31:b6:
49:ec:88:80:2b:1e:27:50:6a:dc:72:1c:50:48:61:da:76:9d:
38:26:9c:ba:72:38:b9:c8:8b:e1:2f:48:bf:ad:5d:bc:3a:46:
f1:90:2c:ed:45:75:2c:24:a9:4e:c4:95:47:63:8e:1b:0d:c6:
24:5b:d1:ff:05:cf:7f:d4:20:01:dd:81:cb:51:73:1d:e9:df:
f6:df:fc:02:72:25:6d:48:cb:de:6f:e1:ad:8c:ac:e5:03:22:
20:00:5f:11:4f:61:bc:dd:92:3a:09:bc:5b:78:7a:00:22:29:
60:da:f9:b1:1f:20:d8:83:60:fc:23:3c:47:c4:45:e5:69:33:
79:b5:c9:42:4e:b2:e4:03:d3:72:6c:ab:50:ae:7b:1e:a6:e0:
09:b4:49:38:2e:73:00:61:3c:f4:8c:4c:a7:37:63:70:af:d9:
9d:63:4a:de:1d:a1:49:bd:f3:46:68:f6:6d:ed:4c:7b:3d:10:
b8:b1:7c:eb:cd:c8:dc:ed:9a:6d:8c:aa:c9:bc:48:80:f5:cc:
ed:4e:f8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:01:37 2026 by rpki-client