Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/b61f2d-8c09-4de6-84ea-8496908a2f3e/1/n2RhIUHOwFu-_erNECMjxlXopBo.roa
File: n2RhIUHOwFu-_erNECMjxlXopBo.roa (raw, json)
Hash identifier: zQjo4G06oZMmRcjAfeGNnJ+GFuHoTw/0ORMmlgccTvY=
Subject key identifier: 9F:64:61:21:41:CE:C0:5B:BE:FD:EA:CD:10:23:23:C6:55:E8:A4:1A
Certificate issuer: /CN=d21fcccc6b864e7471854d8177e1a8c6b19d1d7d
Certificate serial: 01A1A6DEBEC7429D5F7542EFCB9973DE8BDF
Authority key identifier: D2:1F:CC:CC:6B:86:4E:74:71:85:4D:81:77:E1:A8:C6:B1:9D:1D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0h_MzGuGTnRxhU2Bd-GoxrGdHX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/b61f2d-8c09-4de6-84ea-8496908a2f3e/1/n2RhIUHOwFu-_erNECMjxlXopBo.roa
Signing time: Wed 04 Nov 2026 14:02:58 +0000
ROA not before: Wed 04 Nov 2026 14:02:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61335
IP address blocks: 2a12:6300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/b61f2d-8c09-4de6-84ea-8496908a2f3e/1/0h_MzGuGTnRxhU2Bd-GoxrGdHX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/b61f2d-8c09-4de6-84ea-8496908a2f3e/1/0h_MzGuGTnRxhU2Bd-GoxrGdHX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0h_MzGuGTnRxhU2Bd-GoxrGdHX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:de:be:c7:42:9d:5f:75:42:ef:cb:99:73:de:8b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21fcccc6b864e7471854d8177e1a8c6b19d1d7d
Validity
Not Before: Nov 4 14:02:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f64612141cec05bbefdeacd102323c655e8a41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:b3:56:7c:da:8c:1c:34:47:e2:24:d3:8e:
1a:6f:62:36:6b:66:84:13:e3:d3:d1:0f:03:82:52:
fa:90:d9:a5:13:e6:f2:5d:eb:ee:50:8a:07:6c:4a:
73:6f:0b:77:8d:04:0b:df:73:25:ae:aa:10:ac:09:
90:4c:18:af:be:98:ad:13:7f:02:45:8a:ea:f0:f0:
36:24:2c:24:f3:ed:f1:f5:25:e9:31:03:c4:0c:9a:
1e:29:51:8b:eb:f0:60:c9:f8:1e:c7:ed:50:25:6e:
8b:dc:28:cc:46:d1:27:ac:3f:d2:a8:85:0c:7e:d3:
49:00:f4:35:65:06:86:b5:67:0e:fc:ec:fb:15:d0:
58:10:82:ef:c5:d8:d8:35:13:0f:f2:f0:38:25:45:
74:9b:2c:b6:dc:ab:2c:2f:a2:82:1b:84:3e:44:4e:
9a:23:3d:10:84:1c:dc:ce:89:1f:e8:15:7c:ae:2e:
3a:5b:05:31:96:d2:3e:67:f7:fc:d6:96:50:89:fd:
3f:49:61:59:52:bc:e3:de:43:53:cf:a6:83:3a:e0:
ca:47:95:26:ed:80:e2:9c:9c:9f:e1:e3:39:38:86:
0d:d7:66:98:19:19:2f:48:ed:4e:f0:ae:41:f2:6a:
cb:25:7f:91:03:38:a1:7c:11:ba:b1:8f:87:2c:1a:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:64:61:21:41:CE:C0:5B:BE:FD:EA:CD:10:23:23:C6:55:E8:A4:1A
X509v3 Authority Key Identifier:
keyid:D2:1F:CC:CC:6B:86:4E:74:71:85:4D:81:77:E1:A8:C6:B1:9D:1D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0h_MzGuGTnRxhU2Bd-GoxrGdHX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b61f2d-8c09-4de6-84ea-8496908a2f3e/1/n2RhIUHOwFu-_erNECMjxlXopBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b61f2d-8c09-4de6-84ea-8496908a2f3e/1/0h_MzGuGTnRxhU2Bd-GoxrGdHX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6300::/48
Signature Algorithm: sha256WithRSAEncryption
78:4f:63:64:32:77:ca:df:0b:b0:6c:76:ef:d8:fa:5d:75:54:
5e:38:f3:3d:f2:9c:e2:18:e0:11:7b:7b:ba:40:11:4b:b9:da:
98:fe:94:3c:08:3c:3d:1e:0c:2c:2e:f3:e9:5f:50:85:ec:ab:
86:a5:a7:56:f6:c8:dc:bd:61:45:b0:d6:47:d8:3c:cb:56:75:
36:bf:e0:38:ac:ed:81:1d:60:02:b0:92:10:0a:25:70:18:c9:
6a:7c:c2:d5:ca:de:5d:10:7a:40:4c:70:e8:c1:4b:40:d8:23:
38:96:7b:a3:62:40:6c:94:07:ed:c5:16:61:e3:4f:06:5e:8d:
99:1d:de:be:ce:37:d8:66:75:47:11:74:f3:93:dc:23:80:36:
25:03:cc:e4:d1:ae:4e:87:12:51:f0:9e:4b:9f:59:bf:48:fb:
93:dc:73:d9:13:2c:e1:89:8f:6c:36:62:be:63:c8:4f:1b:48:
74:a3:d3:c1:66:aa:57:8e:fe:1e:15:54:fe:3c:14:72:07:9b:
7c:01:46:aa:39:28:95:a2:73:48:14:bd:46:0f:26:ac:80:18:
f5:f1:d7:52:50:97:83:3a:19:d8:f8:32:1f:0e:e2:cb:8c:1e:
bb:12:ab:86:07:bd:c3:cc:fd:1e:22:2a:8b:7d:08:2c:32:3e:
7f:3c:95:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:16:10 2026 by rpki-client