Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/9LOBcCuKiSIsEc48LJsOFLx8pv8.roa
File: 9LOBcCuKiSIsEc48LJsOFLx8pv8.roa (raw, json)
Hash identifier: afdgRI5eC8fXQW7GUPyk2bIwAoB4/4X8Zlan6lpvko4=
Subject key identifier: F4:B3:81:70:2B:8A:89:22:2C:11:CE:3C:2C:9B:0E:14:BC:7C:A6:FF
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019F0E7A7CE92FE89E7DD353C20EF05E93BA
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/9LOBcCuKiSIsEc48LJsOFLx8pv8.roa
Signing time: Sun 28 Jun 2026 13:45:36 +0000
ROA not before: Sun 28 Jun 2026 13:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60445
IP address blocks: 2a09:3f01::/32 maxlen: 32
2a09:3f01:8888::/48 maxlen: 48
2a09:3f01:8890::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0e:7a:7c:e9:2f:e8:9e:7d:d3:53:c2:0e:f0:5e:93:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jun 28 13:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4b381702b8a89222c11ce3c2c9b0e14bc7ca6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:16:df:8f:a1:18:47:b5:91:15:fd:c1:de:
37:1b:5f:ac:3c:87:2f:86:ba:92:dd:79:57:ba:84:
6b:22:1c:dd:b9:bb:3a:de:c0:ae:ea:6d:5f:14:f2:
f9:45:d9:03:9a:a8:b6:4f:17:8c:af:36:1c:aa:b6:
a2:64:94:a6:f6:06:74:50:f2:45:82:0f:83:fb:76:
bd:a5:2c:b7:c5:05:ca:9c:9e:14:9d:db:af:26:52:
c9:d5:90:da:f1:43:5d:cd:a2:6c:89:3d:ad:77:b5:
b2:f4:4e:46:a4:0e:51:42:6b:b1:7d:f8:21:af:28:
2a:4f:76:18:8a:76:94:ff:9f:2a:c8:e5:3b:95:87:
68:fd:8b:5a:2a:0b:de:91:ff:74:f3:e5:0e:01:8a:
2d:64:12:75:8a:2a:39:ca:f3:77:70:57:c2:1d:78:
e1:4e:93:df:8e:c3:07:c6:09:69:f7:e2:d0:80:8d:
d1:ea:12:6c:3f:70:3b:15:c9:66:38:fa:54:2e:31:
af:22:3c:91:05:ab:6f:9a:9f:0b:23:b0:59:2e:8f:
3a:f5:c6:a9:62:b5:67:21:bb:b2:02:2c:48:f2:fb:
67:4a:33:7e:27:61:aa:d1:3d:95:c7:f3:fb:ae:a7:
ff:92:f2:51:5e:2e:ed:cc:4c:b6:e6:23:c5:b1:0a:
4a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B3:81:70:2B:8A:89:22:2C:11:CE:3C:2C:9B:0E:14:BC:7C:A6:FF
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/9LOBcCuKiSIsEc48LJsOFLx8pv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f01::/32
Signature Algorithm: sha256WithRSAEncryption
24:73:7f:2b:15:5e:3a:b2:8d:c6:2f:9e:b2:61:6c:da:0f:d1:
20:29:bd:3e:6b:99:b3:29:26:6d:5a:3d:96:81:e6:59:52:b6:
0b:93:e8:47:0d:c7:05:a4:6a:3f:ea:39:e8:df:7f:f3:03:a8:
12:00:d1:03:56:bf:a5:8a:76:21:d8:51:17:5d:7d:cb:e7:f4:
d8:1d:6d:a8:5f:34:a5:c7:35:79:e6:d5:67:65:b7:bf:fb:81:
ec:cc:6a:41:f3:ea:6d:43:17:98:ff:c5:71:9c:6e:8a:b4:9f:
b3:2a:9e:1b:8d:8d:83:b8:a3:ce:33:59:e5:4a:11:ab:3d:9d:
47:2c:c5:56:d6:8c:7a:f6:ee:19:da:ad:52:fd:52:99:74:5e:
4f:d0:b2:c6:02:1d:ff:01:4c:e8:28:56:b0:3f:52:6a:0b:66:
ad:b2:db:1a:2d:f5:e1:e9:2d:7e:33:a2:16:ab:79:eb:32:f9:
c4:a7:60:b8:96:b3:b6:32:b8:8b:5a:78:c9:0b:1c:60:2c:49:
ef:c5:64:bb:3a:1f:37:46:71:6c:f7:b4:86:ca:3a:09:38:f5:
ad:98:f3:f8:35:2a:88:1c:10:cf:7f:dd:56:8a:d7:c3:33:e4:
df:fa:7e:2f:3e:9d:58:45:10:4a:de:ed:62:33:f1:58:ce:36:
cd:cd:50:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:19:33 2026 by rpki-client