Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/v9QIrZrro3fNTXHzJ9i-WXp7YDc.roa
File: v9QIrZrro3fNTXHzJ9i-WXp7YDc.roa (raw, json)
Hash identifier: ycxrVcxT6hzdZ9cCnHhOzF1SYBYj+akBiGaWZrxA79U=
Subject key identifier: BF:D4:08:AD:9A:EB:A3:77:CD:4D:71:F3:27:D8:BE:59:7A:7B:60:37
Certificate issuer: /CN=0a93d99e490a35d929b01a6cb73c583f10afcaf1
Certificate serial: 019F2368CE952844611B663E0ACA5B6634B0
Authority key identifier: 0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/v9QIrZrro3fNTXHzJ9i-WXp7YDc.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41783
IP address blocks: 217.26.16.0/21 maxlen: 21
2a00:7c00::/32 maxlen: 39
2a00:7c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ce:95:28:44:61:1b:66:3e:0a:ca:5b:66:34:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a93d99e490a35d929b01a6cb73c583f10afcaf1
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfd408ad9aeba377cd4d71f327d8be597a7b6037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7d:bf:21:b9:2b:cd:33:df:19:a3:89:fd:aa:
80:36:e4:8e:38:79:77:7f:03:93:fe:50:28:4c:40:
95:00:03:23:c0:46:c8:96:1e:a7:ca:d2:4b:23:90:
4b:39:68:ef:20:cc:9e:86:a1:c1:da:60:aa:09:f1:
25:b5:bf:09:69:9d:df:4e:9e:9e:cd:86:dd:4c:6b:
95:03:75:56:a7:be:dc:22:cc:37:43:f7:d1:59:56:
60:0b:bb:97:cd:c7:75:2f:48:97:9b:1f:10:09:75:
ca:e4:8a:b4:49:fc:ca:0e:ed:9f:6b:b7:65:3e:e8:
c4:27:fb:6b:c4:40:f8:a4:9b:50:52:dc:b4:18:13:
db:d9:24:50:05:56:9d:af:65:5d:bc:cd:82:c2:8c:
28:58:ee:cb:02:fd:9c:e3:1d:6c:21:63:73:e0:a5:
90:c8:4e:13:28:71:b5:b9:1a:dc:79:64:a5:64:46:
91:58:07:31:2f:7c:37:65:d0:3e:cf:0b:52:68:04:
9f:8f:b7:eb:7d:99:49:39:07:8b:55:fa:84:03:58:
e9:36:fe:40:74:66:4d:de:30:1d:a4:d4:bf:96:06:
a7:05:4a:87:e5:12:c8:a3:59:82:e3:59:21:f9:d1:
4f:4e:61:fb:5c:bd:b5:8f:1d:ee:f8:a5:63:b0:f1:
3e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D4:08:AD:9A:EB:A3:77:CD:4D:71:F3:27:D8:BE:59:7A:7B:60:37
X509v3 Authority Key Identifier:
keyid:0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/v9QIrZrro3fNTXHzJ9i-WXp7YDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.26.16.0/21
IPv6:
2a00:7c00::/32
Signature Algorithm: sha256WithRSAEncryption
cd:fd:40:a4:67:dd:4f:f4:24:85:1b:43:df:7c:17:a2:5f:7c:
57:02:9c:69:ba:27:28:b9:d8:37:ad:52:e8:31:2a:ce:47:bd:
02:7c:41:d0:05:f7:79:e8:a5:8c:05:7c:1a:e9:1f:9a:60:c3:
2e:74:5d:11:38:d7:a2:5b:6c:30:f6:65:5b:26:7d:7c:4d:fa:
e1:c6:4c:b3:2d:6f:ae:07:df:d8:eb:c4:3b:45:41:a5:ed:3b:
99:32:38:3b:3b:7e:68:6b:cc:38:39:a6:7c:0e:12:39:df:53:
37:f4:cd:e4:b4:34:48:4f:b9:b0:f7:fa:62:d0:25:b9:66:c8:
1d:6c:c3:d7:74:2b:d6:70:b1:18:1c:b7:a5:96:e5:b7:8d:c3:
f9:ad:fb:a6:76:49:e1:28:49:66:4c:91:62:6b:79:2d:06:7f:
6d:ee:2a:dd:5c:03:b4:b0:57:ad:60:97:ce:e6:91:4d:bb:6f:
81:b8:e4:ae:fe:d5:7b:41:3f:56:7b:2d:9a:a9:a3:0b:2a:4d:
55:7b:e9:1f:3a:4c:a4:30:40:8b:2a:96:09:25:60:1c:5e:33:
76:0e:bd:7f:4d:16:ba:4e:fb:07:bd:63:aa:f3:87:39:a5:8c:
db:45:9d:d9:c2:49:89:e3:83:ff:de:0e:55:24:ee:6a:c5:64:
bc:79:a4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:37:06 2026 by rpki-client