Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/Z3Ut3UJi9jEAPnsBvQE1E4LZn-k.roa
File: Z3Ut3UJi9jEAPnsBvQE1E4LZn-k.roa (raw, json)
Hash identifier: 4aFydu6gTaGFBt1at8ydxXffwjFjIjZOCgz0ATVvCyQ=
Subject key identifier: 67:75:2D:DD:42:62:F6:31:00:3E:7B:01:BD:01:35:13:82:D9:9F:E9
Certificate issuer: /CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Certificate serial: 01A1D018C232E3C6490CC5FFFBDB5099F943
Authority key identifier: 9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/Z3Ut3UJi9jEAPnsBvQE1E4LZn-k.roa
Signing time: Thu 12 Nov 2026 14:10:45 +0000
ROA not before: Thu 12 Nov 2026 14:10:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218101
IP address blocks: 2a0c:6500:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d0:18:c2:32:e3:c6:49:0c:c5:ff:fb:db:50:99:f9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Validity
Not Before: Nov 12 14:10:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67752ddd4262f631003e7b01bd01351382d99fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:de:be:ce:39:29:26:07:09:a2:cb:51:ea:57:
81:b6:57:32:0c:f8:eb:e1:7a:87:ec:73:6e:98:55:
e7:d6:4b:f2:19:6f:99:b6:1e:76:83:0b:d7:1e:f7:
fb:34:fd:58:1b:3f:7f:cb:19:a4:90:50:0c:69:ac:
0d:f3:89:82:f9:d0:69:af:5d:c3:f7:2f:d0:d9:79:
e5:58:19:1a:33:6d:ee:45:b2:d2:23:11:bb:79:99:
d2:58:c3:d0:74:72:01:cb:4c:a3:ea:81:d2:cc:c0:
f7:c6:45:dc:be:72:37:ee:14:64:49:6b:ab:49:4e:
aa:c8:89:1e:2b:d5:04:bb:bc:a6:f8:4c:76:df:53:
2d:53:80:84:80:33:20:f6:94:3a:f6:5c:1b:74:e2:
39:f2:07:e4:be:95:2c:2b:47:d3:00:dc:6e:45:bd:
6f:1f:07:78:39:75:dc:22:49:9a:92:c3:62:89:09:
8d:7c:97:63:33:2c:ba:0e:78:2f:03:7f:d5:35:e2:
1b:b8:68:55:1a:d5:2f:fd:e0:0b:8d:cf:11:40:35:
7b:3c:e2:13:33:f8:a6:eb:82:db:7b:e2:b8:14:13:
72:e6:48:99:dc:ff:44:11:45:b8:8f:71:41:ce:6e:
7b:2a:e8:db:b3:5e:7a:67:fc:fc:7f:73:5e:13:61:
a9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:75:2D:DD:42:62:F6:31:00:3E:7B:01:BD:01:35:13:82:D9:9F:E9
X509v3 Authority Key Identifier:
keyid:9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/Z3Ut3UJi9jEAPnsBvQE1E4LZn-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:6500:6::/48
Signature Algorithm: sha256WithRSAEncryption
ac:75:71:b1:a3:f5:fe:a6:76:39:bb:90:05:86:51:2b:00:d4:
f7:83:16:6a:31:65:1b:86:d1:48:cb:84:ef:ed:f3:cc:f6:f0:
d7:fc:18:55:9a:03:a2:79:e9:3e:e2:a1:57:2a:0b:07:14:fb:
11:ce:86:55:64:16:40:dc:60:d6:53:7c:20:4e:23:49:81:31:
ec:27:34:1c:f5:77:88:2d:d7:03:7d:84:4f:d1:fd:b6:04:a7:
7d:88:57:f6:44:97:25:3a:a4:16:6f:20:fb:3c:82:40:ba:7f:
83:ea:d9:ab:84:a0:b6:bf:f0:73:ce:9a:6b:06:70:38:a1:49:
fe:ed:97:9e:71:23:0e:07:c6:8f:a1:86:48:ae:c1:53:33:9c:
0a:0f:e0:ba:5a:82:3f:7a:3f:38:91:19:e3:02:fe:ee:8c:31:
af:b4:a6:e9:e3:dc:1d:a6:f9:13:98:f7:dc:9a:70:b4:c1:fa:
78:8a:1c:94:03:9e:12:6a:61:70:e8:2c:bb:66:22:ed:7f:cd:
0b:de:a8:bb:dd:6c:c1:49:1d:2c:47:8d:ad:ae:fa:b0:a0:71:
1c:bd:e9:5d:c7:b4:01:f0:ff:40:52:44:9c:b2:85:88:37:5a:
20:85:0d:bf:30:aa:9b:cf:07:45:6f:76:3d:3b:78:f0:47:aa:
f3:da:51:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:32:33 2026 by rpki-client