Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/yXtKJtXl1GGBlYxXvK8ql3NPq6o.roa
File: yXtKJtXl1GGBlYxXvK8ql3NPq6o.roa (raw, json)
Hash identifier: tIwicRRSMx21IewgpFZvBk4WqVp51kxIDCo1e8mwH2Y=
Subject key identifier: C9:7B:4A:26:D5:E5:D4:61:81:95:8C:57:BC:AF:2A:97:73:4F:AB:AA
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 01A097858EB2D779826BE45EB2D961AD3F1B
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/yXtKJtXl1GGBlYxXvK8ql3NPq6o.roa
Signing time: Sat 12 Sep 2026 21:28:27 +0000
ROA not before: Sat 12 Sep 2026 21:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218938
IP address blocks: 2a09:3f00:100f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:97:85:8e:b2:d7:79:82:6b:e4:5e:b2:d9:61:ad:3f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Sep 12 21:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c97b4a26d5e5d46181958c57bcaf2a97734fabaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:a9:d5:7b:40:6d:72:d9:e8:49:35:bd:41:
52:d3:bd:0d:49:66:44:ff:76:d5:54:32:51:fc:47:
88:69:93:4f:45:ff:95:d9:f4:29:93:6d:2d:88:53:
fc:cd:1d:67:c6:df:1b:b0:81:ee:7d:86:04:5e:02:
16:d6:93:e0:45:53:bb:b9:65:52:a2:ea:3e:e6:45:
12:46:64:18:ae:d4:82:79:49:67:51:3d:60:5e:3b:
e1:1d:4f:55:62:15:df:bc:2b:3e:97:aa:67:61:48:
ca:a7:27:ab:29:87:a6:a3:ca:12:99:59:0a:f4:e3:
1b:fe:07:12:b1:1c:36:73:e0:c9:fb:c9:00:98:7c:
4c:50:d7:3d:c1:0f:9b:ce:3c:60:e2:37:cb:b2:d2:
58:df:9a:ae:32:85:df:85:a0:4d:d2:d4:22:75:65:
00:e1:9e:ba:7d:0e:b3:29:5d:f2:9e:f6:f1:26:bc:
c3:c1:44:39:d8:6e:25:48:a5:8f:e4:d2:6e:29:26:
f7:71:27:92:64:8c:5b:f3:f2:64:56:f7:9a:e0:32:
5c:fa:bf:93:08:05:64:9e:73:8c:36:94:8c:53:fb:
11:e7:fe:8a:8f:1b:a4:7e:53:a2:ce:6f:44:cf:c0:
e8:a4:2c:7c:ea:88:9f:ab:1d:76:9c:08:9f:c4:eb:
35:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7B:4A:26:D5:E5:D4:61:81:95:8C:57:BC:AF:2A:97:73:4F:AB:AA
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/yXtKJtXl1GGBlYxXvK8ql3NPq6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:100f::/48
Signature Algorithm: sha256WithRSAEncryption
29:17:2c:3a:44:be:24:f4:90:81:e1:0e:a8:2e:9f:2b:36:68:
cd:0c:82:d2:e0:ad:d0:cc:45:e8:73:7d:c6:0c:f8:0a:c6:b1:
73:c6:e2:57:f0:d5:02:d3:c2:9c:ac:33:6b:e9:03:e9:5b:e3:
ca:ff:6e:d6:69:43:cf:db:2b:8b:f5:59:20:41:6d:cc:18:21:
4b:6c:28:ae:ed:d1:e0:a6:f9:f1:c8:99:35:1f:35:c7:46:78:
16:6e:7f:bf:b8:14:24:9c:7c:c1:00:dc:9e:78:97:34:86:24:
95:e3:22:c3:ea:d8:cc:e5:10:c2:33:b4:ea:c4:07:72:1e:7c:
5a:fc:60:4a:a4:e3:67:43:18:2f:7f:16:7f:fa:2e:5f:10:4e:
1f:1a:b2:04:d5:0e:12:82:ae:71:98:9d:ea:10:09:c9:62:2a:
5f:6d:64:57:f6:09:a9:37:b0:46:39:f1:5c:bc:13:02:fb:b7:
9d:3e:44:fb:5e:6a:39:45:9e:70:2c:62:40:2b:8d:97:35:2e:
3a:ca:74:5b:50:a0:e9:d6:33:ba:07:f5:d6:eb:ea:98:a2:e4:
b4:45:de:98:1d:72:fe:07:80:e5:14:e5:cc:ae:81:3e:a2:0d:
12:cd:b5:2b:4b:74:b3:21:09:4a:2b:b4:bf:0a:19:53:68:95:
8b:63:f6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:18:08 2026 by rpki-client