Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/mof6xABa_nGqS79lZW3MEn80zPI.roa
File: mof6xABa_nGqS79lZW3MEn80zPI.roa (raw, json)
Hash identifier: GWP6CyDwsuU6R2JSLP0qzlZxMJto6qHE9P2Mbf7sWk8=
Subject key identifier: 9A:87:FA:C4:00:5A:FE:71:AA:4B:BF:65:65:6D:CC:12:7F:34:CC:F2
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019F6BBCDA6BC01FA85D3CD7D4DCB21D60DF
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/mof6xABa_nGqS79lZW3MEn80zPI.roa
Signing time: Thu 16 Jul 2026 16:22:46 +0000
ROA not before: Thu 16 Jul 2026 16:22:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206540
IP address blocks: 2a09:3f00:201e::/48 maxlen: 48
2a09:3f00:201f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:bc:da:6b:c0:1f:a8:5d:3c:d7:d4:dc:b2:1d:60:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jul 16 16:22:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a87fac4005afe71aa4bbf65656dcc127f34ccf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:d4:f4:bf:c2:ec:33:9d:8a:17:1f:c8:64:
92:c8:b7:da:22:56:7e:a4:3f:71:1a:67:6e:57:80:
44:16:61:a8:25:83:ac:ed:66:91:12:90:e9:0f:28:
31:9c:c4:43:23:df:a6:25:02:36:aa:7d:b2:ee:0e:
94:9d:db:8d:8e:8c:80:31:28:57:45:be:12:c9:fe:
39:21:29:ad:42:32:4d:9d:bf:0d:fc:a8:b9:0e:12:
c6:ca:ec:15:aa:c0:36:4b:bf:72:17:31:1d:d9:06:
58:e3:30:a5:70:a0:fe:b5:74:a8:9e:12:50:f5:00:
3c:f6:c3:08:50:f2:f4:ac:cb:4f:69:c1:c9:15:5e:
cc:5e:4b:67:16:a0:3a:1e:94:94:b2:49:ce:16:61:
27:79:c6:7d:fc:e1:52:4a:e4:42:ae:31:26:32:8c:
16:90:f7:28:66:95:3b:f1:9f:e7:72:b8:54:48:68:
e1:db:02:07:1e:da:49:03:02:62:95:cf:3e:df:a7:
fd:2d:da:8c:5c:1d:ae:45:d9:98:45:7c:36:99:d2:
83:0b:a9:4c:ba:9a:d0:3a:a2:ed:23:94:a4:70:d5:
71:de:00:dd:7f:ad:ac:c4:29:0f:4a:b5:ad:a3:72:
85:95:00:fa:8c:7c:fe:78:38:f3:4a:f4:70:53:8c:
a0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:87:FA:C4:00:5A:FE:71:AA:4B:BF:65:65:6D:CC:12:7F:34:CC:F2
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/mof6xABa_nGqS79lZW3MEn80zPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:201e::/47
Signature Algorithm: sha256WithRSAEncryption
23:b0:8e:88:26:51:83:f5:b4:53:ae:16:88:81:0d:e7:47:6d:
65:0c:69:62:fe:44:2d:6e:be:65:77:43:bb:dd:27:d1:30:d7:
99:9c:d0:90:4d:c0:8f:c4:74:9e:6e:95:dc:71:11:80:d8:dd:
ca:03:68:a1:65:87:1a:43:47:41:8f:70:04:ce:d6:d6:18:99:
1a:58:3d:57:4b:ab:c3:56:e1:06:aa:3e:27:fb:1c:98:f6:d2:
21:45:ed:36:72:10:fc:c8:15:e6:fd:95:ee:c4:91:80:ea:4f:
40:c5:86:9e:21:59:02:9e:3a:e9:02:c5:76:c1:38:0d:5d:1d:
55:d0:4a:c6:73:34:49:ad:05:e7:fe:bd:7f:a5:f9:43:7b:15:
bb:f2:aa:d4:c1:71:2f:b8:10:38:0e:e8:93:b7:b2:22:a2:5e:
44:1f:ef:c4:1c:32:2f:71:05:bb:9d:ef:52:1e:59:81:84:48:
91:99:53:dc:da:1c:81:04:84:bf:4c:eb:4b:ee:a6:66:3b:95:
bc:db:f7:56:c7:23:f9:26:8f:38:ec:f5:f4:74:39:19:2e:fb:
2e:d1:c7:98:2d:a1:2f:eb:ed:ff:aa:aa:82:56:35:80:ae:86:
91:1a:a6:b9:32:e8:77:b0:cf:b2:8d:39:3d:61:57:6b:ed:00:
54:9c:7b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:19:32 2026 by rpki-client