Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/n9hfxlzMrKjl_ez1Jru0AUxKJqo.roa
File: n9hfxlzMrKjl_ez1Jru0AUxKJqo.roa (raw, json)
Hash identifier: wMMEhDIFHLMDz45INJ2mEHVBm4ljHgWChRaMaS+Z7dk=
Subject key identifier: 9F:D8:5F:C6:5C:CC:AC:A8:E5:FD:EC:F5:26:BB:B4:01:4C:4A:26:AA
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019F89B825FD38A5521E5D0D393EBE919D6B
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/n9hfxlzMrKjl_ez1Jru0AUxKJqo.roa
Signing time: Wed 22 Jul 2026 12:06:14 +0000
ROA not before: Wed 22 Jul 2026 12:06:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a0e:4001:10::/48 maxlen: 48
2a0e:4001:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:b8:25:fd:38:a5:52:1e:5d:0d:39:3e:be:91:9d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jul 22 12:06:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fd85fc65cccaca8e5fdecf526bbb4014c4a26aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:e9:c4:64:98:73:75:be:5b:d4:2e:e1:11:
b0:a0:4e:b7:d6:f0:e3:76:86:8f:fd:5a:84:62:eb:
32:05:b7:7d:07:ea:04:c2:b8:89:8c:fb:7a:56:78:
0f:d0:98:93:91:2c:32:ad:02:32:ce:93:25:95:4a:
37:db:4b:a1:36:8c:63:ff:2a:47:41:2a:50:a2:43:
ef:85:b6:c8:d6:ec:34:7b:3a:7a:90:1a:8a:c3:e5:
c2:92:f2:b4:b1:9c:19:41:2c:65:b2:c5:20:52:d3:
cd:49:e9:25:17:82:a1:5b:28:5c:26:9b:89:6b:17:
77:2e:9b:15:84:48:41:9f:2c:12:eb:b1:46:d2:7f:
fd:87:78:64:8f:93:25:c1:d5:66:a0:85:73:e5:e0:
a7:c4:87:f5:45:9a:aa:9d:c9:a8:09:c4:87:71:01:
f8:d9:ed:81:54:90:06:ec:fe:18:12:1f:bd:2a:5d:
e6:6a:0d:7f:e7:27:65:eb:bb:72:88:f7:01:7f:7e:
dc:21:40:9e:94:d2:0a:61:be:9c:cc:f0:06:f4:af:
e8:e8:9d:bc:e0:a1:f3:55:86:3a:83:00:3b:62:fa:
09:f6:b6:42:6a:0e:1e:46:f0:5e:2d:3e:c2:6f:27:
6f:a6:74:f2:e9:a3:13:7b:ca:77:f8:55:49:3e:d5:
15:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D8:5F:C6:5C:CC:AC:A8:E5:FD:EC:F5:26:BB:B4:01:4C:4A:26:AA
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/n9hfxlzMrKjl_ez1Jru0AUxKJqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4001:10::/47
Signature Algorithm: sha256WithRSAEncryption
90:b6:2f:2b:05:24:a9:6d:62:2c:b6:7f:d7:1a:56:9c:d0:08:
ac:59:9a:95:bc:1c:42:aa:f5:85:5f:9a:0c:d9:d7:26:9f:a0:
61:06:0b:82:f5:9d:a6:4f:ae:ca:0c:5a:4d:4c:b7:7c:16:bb:
b5:70:d9:e5:66:80:a8:3d:2d:0f:f6:06:30:59:1b:d0:15:e5:
5a:20:23:e2:57:40:cf:de:f8:f7:a3:04:92:5e:96:b3:3b:52:
5c:44:e2:5d:25:dd:11:45:da:3b:2f:d4:0b:ac:9c:77:af:5a:
99:61:73:f3:3b:8b:30:09:f1:bc:b0:27:02:e5:24:61:d9:56:
34:78:07:06:c9:57:1e:21:53:72:58:7e:0c:41:c5:e6:b3:cf:
0a:f5:29:14:0e:c4:ae:89:30:9c:aa:4a:19:dd:06:05:8c:d6:
b7:79:25:17:cb:4f:58:83:c3:b8:ae:f9:20:89:da:ee:4b:e5:
c4:64:80:db:6e:19:15:fb:fd:bf:27:53:37:0d:6d:77:7d:73:
fa:e8:92:b2:d9:f6:d3:5d:a0:b2:c9:9a:4f:0c:2f:f9:d8:f7:
44:9c:99:e4:92:30:f8:b6:18:60:43:29:b8:50:0d:2e:3a:95:
0f:41:80:2b:0f:55:c4:69:23:e9:0d:31:73:0e:44:31:07:b8:
e7:aa:42:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:54:46 2026 by rpki-client