Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/KflG9L2MtyeqYblpb3zFJPu7Ni8.roa
File: KflG9L2MtyeqYblpb3zFJPu7Ni8.roa (raw, json)
Hash identifier: +NOOzMfOHyXSNDnk/q8hTI/UGb/h32Uhfm8Nx9FPMeU=
Subject key identifier: 29:F9:46:F4:BD:8C:B7:27:AA:61:B9:69:6F:7C:C5:24:FB:BB:36:2F
Certificate issuer: /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Certificate serial: 01A1AC9ABB5C614403B76B909E949F03EA39
Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/KflG9L2MtyeqYblpb3zFJPu7Ni8.roa
Signing time: Thu 05 Nov 2026 16:46:24 +0000
ROA not before: Thu 05 Nov 2026 16:46:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 2a10:9007:100::/48 maxlen: 48
2a10:9007:101::/48 maxlen: 48
2a10:9007:102::/48 maxlen: 48
2a10:9007:103::/48 maxlen: 48
2a10:9007:104::/48 maxlen: 48
2a10:9007:105::/48 maxlen: 48
2a10:9007:106::/48 maxlen: 48
2a10:9007:107::/48 maxlen: 48
2a10:9007:108::/48 maxlen: 48
2a10:9007:109::/48 maxlen: 48
2a10:9007:10a::/48 maxlen: 48
2a10:9007:10b::/48 maxlen: 48
2a10:9007:10c::/48 maxlen: 48
2a10:9007:10d::/48 maxlen: 48
2a10:9007:10e::/48 maxlen: 48
2a10:9007:10f::/48 maxlen: 48
2a10:9007:110::/48 maxlen: 48
2a10:9007:111::/48 maxlen: 48
2a10:9007:112::/48 maxlen: 48
2a10:9007:113::/48 maxlen: 48
2a10:9007:114::/48 maxlen: 48
2a10:9007:115::/48 maxlen: 48
2a10:9007:116::/48 maxlen: 48
2a10:9007:117::/48 maxlen: 48
2a10:9007:118::/48 maxlen: 48
2a10:9007:119::/48 maxlen: 48
2a10:9007:11a::/48 maxlen: 48
2a10:9007:11b::/48 maxlen: 48
2a10:9007:11c::/48 maxlen: 48
2a10:9007:11d::/48 maxlen: 48
2a10:9007:11e::/48 maxlen: 48
2a10:9007:11f::/48 maxlen: 48
2a10:9007:120::/48 maxlen: 48
2a10:9007:121::/48 maxlen: 48
2a10:9007:122::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:9a:bb:5c:61:44:03:b7:6b:90:9e:94:9f:03:ea:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Validity
Not Before: Nov 5 16:46:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29f946f4bd8cb727aa61b9696f7cc524fbbb362f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4e:25:64:b1:43:a1:c0:2e:d6:55:c0:b4:c9:
f8:e0:3d:51:2c:f6:aa:0d:22:e8:ec:cf:b7:a1:ef:
49:63:1d:8c:ba:90:75:b8:f8:c2:0c:68:dd:fc:e3:
61:12:17:d1:99:fb:a1:d2:b3:53:b5:91:ac:4a:b1:
77:b2:c9:37:ad:4b:31:f4:71:bc:61:5a:57:09:cb:
e6:ae:96:f2:ed:97:48:9d:57:13:7e:46:19:98:81:
80:ca:58:21:cc:a9:f1:36:46:10:01:02:86:ad:d8:
f4:08:49:dc:8a:d4:b0:4d:9f:2c:c6:56:7f:46:3c:
a6:49:2e:b2:20:47:90:5b:a1:f1:ed:f9:b3:94:9f:
5b:4b:ff:74:c5:0f:1c:b0:e2:73:03:4a:f2:64:7e:
c9:4b:63:56:f3:db:7d:ce:4c:6d:da:59:b8:64:ec:
84:69:08:3e:bb:e9:94:40:93:3a:e2:b4:e9:5f:ac:
ae:19:74:42:54:18:aa:36:b1:25:74:87:93:12:67:
07:57:47:1c:f2:2b:2d:aa:84:ac:00:85:31:c7:22:
3d:64:80:20:59:97:22:53:21:01:12:ed:4b:32:68:
b4:39:6c:be:a8:29:e0:aa:da:91:60:ab:63:8a:9c:
55:de:e0:4d:49:41:7d:8f:e2:7a:86:83:50:6b:32:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F9:46:F4:BD:8C:B7:27:AA:61:B9:69:6F:7C:C5:24:FB:BB:36:2F
X509v3 Authority Key Identifier:
keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/KflG9L2MtyeqYblpb3zFJPu7Ni8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:9007:100::-2a10:9007:122:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
02:29:ce:3a:98:a9:45:92:44:42:e5:01:a5:e3:71:92:02:aa:
14:6e:8b:a0:6b:53:2f:35:d0:c3:6a:18:a7:a9:a7:eb:49:a6:
37:29:59:32:b9:fc:d0:da:e6:54:08:39:3f:6b:c3:0b:a0:73:
b5:7e:55:27:05:26:23:09:f6:52:e3:e4:13:89:ae:8d:c5:1b:
24:9c:76:7e:4e:b7:fa:4c:9b:2a:92:44:b9:55:da:af:e7:cd:
a3:42:2f:ae:32:ae:8d:60:61:da:0f:1b:fb:12:cb:84:71:5b:
ed:cc:32:a9:8b:34:f2:03:9f:23:c0:bc:07:ff:e2:ef:7a:8b:
b3:38:0f:15:70:d3:5e:71:9e:f9:02:94:1c:80:b9:d0:a8:e2:
6d:c3:db:33:83:32:93:26:18:8b:6f:22:a1:f2:cc:a8:28:24:
1b:19:d3:28:e8:35:6e:bc:ac:5b:bf:57:57:d9:1a:ab:fc:8e:
c3:a6:bb:28:94:de:d7:ac:2e:be:aa:9f:25:6d:99:9a:4e:c4:
a2:87:47:85:f9:9a:c5:2c:8b:b6:6b:69:f0:e7:67:18:18:d9:
4a:b1:e1:45:81:9b:14:76:1a:9a:88:61:bf:d0:36:5a:bf:9a:
5c:e4:4e:a0:c5:e6:6b:c8:dc:49:00:4c:c5:3d:8b:d4:8c:11:
bf:fc:fb:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:45:57 2026 by rpki-client