Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/v6ipUcT4iHHH3ktJfozkkPrT1dM.roa
File: v6ipUcT4iHHH3ktJfozkkPrT1dM.roa (raw, json)
Hash identifier: xroYjniQt81cWIJipLSJ3u4lQ0HyLF/KOJoWlGUC+y0=
Subject key identifier: BF:A8:A9:51:C4:F8:88:71:C7:DE:4B:49:7E:8C:E4:90:FA:D3:D5:D3
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A0CC79BD1C3801D63F337851A8A7D3949E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/v6ipUcT4iHHH3ktJfozkkPrT1dM.roa
Signing time: Wed 23 Sep 2026 04:15:25 +0000
ROA not before: Wed 23 Sep 2026 04:15:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 5.181.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:79:bd:1c:38:01:d6:3f:33:78:51:a8:a7:d3:94:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 23 04:15:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfa8a951c4f88871c7de4b497e8ce490fad3d5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:cc:93:b1:18:13:7c:15:c3:f7:8b:a1:c3:
74:4b:1a:43:e3:d6:17:2e:90:7a:9a:81:0d:42:fb:
6d:95:53:b5:c0:23:61:20:3c:76:25:cc:92:84:ab:
76:16:fa:1e:92:89:8b:a3:59:91:49:c8:a9:38:2b:
92:83:fa:25:10:95:b1:8b:ff:27:1e:a8:d4:55:3f:
a1:4d:ab:fb:64:c1:dd:39:52:f3:9b:1a:1c:bf:1b:
92:82:80:62:b3:3b:b0:d6:2c:88:b4:e1:a1:1c:02:
37:9d:99:63:c4:80:b9:b3:17:5f:20:27:ab:d1:1d:
64:76:0d:f7:e7:1c:a7:e2:45:6f:cf:0c:2b:bc:5b:
78:c3:54:8c:28:02:9a:fb:de:00:97:20:f9:d8:ec:
eb:b4:85:e4:c7:85:4c:4f:2d:e7:c0:21:16:a1:e8:
98:fa:18:c7:39:fa:00:e9:cf:da:d2:3b:f4:e6:62:
8f:7d:88:84:a0:23:82:c4:28:d4:c2:a5:ed:52:37:
6e:2f:c8:94:06:27:c5:4b:69:86:60:1f:a5:f1:d5:
85:00:83:a1:26:4b:db:5d:78:d5:53:b6:52:9e:da:
16:85:0a:d8:b1:c4:d3:e9:45:a6:00:18:bf:22:ec:
89:92:b8:4d:24:b7:65:ed:03:e5:0b:42:14:48:4a:
7b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A8:A9:51:C4:F8:88:71:C7:DE:4B:49:7E:8C:E4:90:FA:D3:D5:D3
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/v6ipUcT4iHHH3ktJfozkkPrT1dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/24
Signature Algorithm: sha256WithRSAEncryption
91:51:0c:a6:fb:e5:e2:78:9f:ee:5c:24:cd:a2:3f:86:b9:1f:
ca:c6:73:60:2e:5e:cc:55:81:9b:ff:d7:77:fc:b6:48:6d:81:
d6:59:09:60:05:f6:4e:87:3c:dc:60:b9:76:5f:b5:5e:36:c7:
94:a4:aa:09:e0:07:af:4f:ae:f1:7a:07:2d:22:be:06:fd:35:
ac:8e:ef:7c:1b:48:12:9b:0b:7b:4e:be:3c:90:11:ad:80:7f:
b2:b9:e0:43:18:a3:1b:61:00:9d:1a:f3:83:1a:fc:d7:bf:b0:
5c:0c:f3:5e:0d:cd:1b:d7:06:5a:f9:a3:d1:07:0d:e5:0f:a8:
f8:c3:a8:f8:0a:6a:f1:05:39:63:1a:9b:9e:cd:48:4f:0f:0a:
63:c7:13:32:99:65:30:f2:da:ef:10:11:6d:f3:fc:d0:bc:31:
94:73:fc:82:0f:df:f5:17:75:a4:23:a9:1f:e4:80:1d:9f:8b:
e0:24:7e:df:39:d1:d5:1b:17:8e:ea:bb:c8:e4:14:93:23:4a:
72:10:3b:7f:aa:18:bd:92:9e:29:e7:00:32:b5:c2:0e:6d:f9:
1d:c0:f4:39:4a:ba:a5:4a:00:95:b1:9a:34:53:2c:fb:23:48:
bd:85:63:cd:77:e3:c1:02:d3:d5:ad:35:08:4d:43:29:34:32:
b1:a8:58:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:31:45 2026 by rpki-client