Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/d4OSwoXQlpA_V2IlmsumrCVG0eA.roa
File: d4OSwoXQlpA_V2IlmsumrCVG0eA.roa (raw, json)
Hash identifier: GrvCqW7XhLqAfO+TfzgF+JV4za+LPwgcaVQvzgfpvP0=
Subject key identifier: 77:83:92:C2:85:D0:96:90:3F:57:62:25:9A:CB:A6:AC:25:46:D1:E0
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 01A0C9A806DA6181987026DA995D83250D55
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/d4OSwoXQlpA_V2IlmsumrCVG0eA.roa
Signing time: Tue 22 Sep 2026 15:07:07 +0000
ROA not before: Tue 22 Sep 2026 15:07:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207847
IP address blocks: 2a09:3f00:2020::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a8:06:da:61:81:98:70:26:da:99:5d:83:25:0d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Sep 22 15:07:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=778392c285d096903f5762259acba6ac2546d1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d9:35:57:8a:4c:e1:d3:b2:f0:d8:a1:f0:8e:
37:3b:8d:70:fa:a3:b8:64:c2:29:5a:14:aa:f8:6f:
cb:73:a6:79:d8:b1:c8:1f:96:bc:ea:6e:f5:95:d5:
c7:d5:16:48:ad:e1:fb:68:cd:3b:46:a4:f2:ec:cb:
03:97:e5:ec:bc:84:3f:91:be:ce:5c:ae:1e:53:76:
94:46:bd:ba:17:c6:ee:3f:0d:06:99:2d:4f:11:d9:
41:bc:0f:2a:c2:79:e1:24:46:4b:4c:5e:e2:a5:e2:
d1:1c:bc:60:1f:2d:28:0e:38:8f:39:00:a5:9f:a1:
6b:6e:a5:e8:a2:7b:07:df:16:11:b3:c6:cb:bc:34:
87:9c:cc:ee:8a:fc:b0:5e:12:33:de:36:ea:72:b7:
eb:95:3c:dc:47:5d:ec:a7:02:36:ed:7d:eb:f9:1d:
c4:88:85:93:dc:12:db:df:6e:df:4b:7c:28:1c:f3:
91:ce:1a:a6:fa:ee:80:64:d0:4a:b4:bd:e8:d9:43:
b0:91:a7:7b:2b:60:5e:f8:96:c4:3c:4d:cb:54:a8:
4d:be:07:bd:90:f3:5a:fe:d9:5d:ea:b6:c5:de:06:
a2:bd:99:a8:12:a8:d2:64:63:8c:f2:86:61:3f:17:
11:02:c2:2b:31:35:34:3f:63:1b:a5:57:7b:37:15:
c3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:83:92:C2:85:D0:96:90:3F:57:62:25:9A:CB:A6:AC:25:46:D1:E0
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/d4OSwoXQlpA_V2IlmsumrCVG0eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:2020::/44
Signature Algorithm: sha256WithRSAEncryption
9a:81:70:ea:b9:ef:38:7d:ca:79:cd:75:bc:5b:25:43:e9:8d:
f8:74:93:c8:6c:7b:40:a3:9b:c6:45:5b:cf:db:82:d2:be:5d:
8b:d2:64:72:68:48:d2:3c:f9:83:f4:00:f8:1b:8f:82:c4:9f:
68:6c:0c:3a:57:d0:97:6c:8d:9f:5a:8b:43:d4:7e:2d:86:b5:
03:e4:e2:6f:b8:6b:31:40:78:e4:de:54:0e:c6:84:da:ac:dd:
d8:8c:a4:03:b0:23:51:79:2b:c4:f1:28:53:be:8b:9c:37:c5:
21:cf:2c:c9:0c:fd:b1:59:52:3c:27:90:9f:d8:00:7c:b6:07:
2e:5f:b7:56:9d:2c:a8:25:72:16:e5:76:36:32:e7:59:b3:01:
46:2e:34:97:ec:bf:16:e1:3d:ec:90:f2:b9:e3:f8:67:67:53:
a7:e2:76:26:dc:5d:e7:b0:0f:ff:07:d5:bd:1e:74:5f:d4:be:
01:3b:7b:a1:25:ce:d8:ef:fe:30:31:50:59:3e:4d:12:d8:a3:
09:60:82:c7:83:bb:2e:44:a8:38:d8:37:fe:d5:5a:70:9f:59:
a7:7d:23:72:cc:0e:86:71:7b:fe:89:31:db:a9:16:ed:99:53:
0c:e4:bc:cc:76:f8:c0:0f:20:60:b1:e0:17:9a:76:7f:a0:fe:
2a:05:8d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:40:25 2026 by rpki-client