Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/Cel5VebU9XnFn51DXpiqtq9Yzgo.roa
File: Cel5VebU9XnFn51DXpiqtq9Yzgo.roa (raw, json)
Hash identifier: kkcF/4JG58YgyDcke34pD97l1aVYXpHB/nNUlwXCa6Y=
Subject key identifier: 09:E9:79:55:E6:D4:F5:79:C5:9F:9D:43:5E:98:AA:B6:AF:58:CE:0A
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 01A0C980A98C478C0420562007C4972CFADC
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/Cel5VebU9XnFn51DXpiqtq9Yzgo.roa
Signing time: Tue 22 Sep 2026 14:24:07 +0000
ROA not before: Tue 22 Sep 2026 14:24:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402671
IP address blocks: 2a11:e1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:80:a9:8c:47:8c:04:20:56:20:07:c4:97:2c:fa:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Sep 22 14:24:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09e97955e6d4f579c59f9d435e98aab6af58ce0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:74:62:e2:46:1d:68:b6:2a:0c:db:93:55:ca:
d4:47:9b:4b:62:24:0a:ab:96:89:bc:55:5a:06:1b:
6d:14:4f:eb:8a:d9:ef:0d:b3:93:3e:bc:18:54:e0:
44:9f:10:37:58:22:54:25:70:9a:47:b0:ce:8b:21:
97:ad:8a:bf:aa:7c:d5:b1:c8:62:3c:14:64:ca:99:
de:20:2a:98:fb:76:ca:42:c6:8e:0e:e4:d6:f2:9f:
43:26:01:60:e1:a7:e0:fb:0d:eb:0d:db:a9:18:d7:
ac:02:d1:96:09:ca:55:a1:c9:7f:ed:c5:70:ec:d5:
03:3c:43:ca:60:da:35:5b:9f:1f:d0:08:13:e5:9c:
50:b9:56:9e:ab:07:96:ad:fa:47:97:62:11:48:82:
8e:39:62:aa:56:af:37:7b:d0:13:25:18:63:18:1c:
d7:1a:6a:b8:cf:fb:7f:4e:f4:68:81:79:c8:f9:aa:
59:72:c6:95:18:dc:8a:8c:96:3f:c8:5c:ac:49:48:
98:a9:50:65:8a:ba:44:9c:bf:6f:e3:27:81:46:e9:
df:d2:95:0b:c9:15:af:e8:a7:63:c1:1e:de:09:98:
1a:df:1e:34:a6:34:37:2a:00:39:b4:c0:f4:70:8f:
89:20:63:a4:d8:0b:8b:eb:34:87:17:8f:33:8e:d9:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E9:79:55:E6:D4:F5:79:C5:9F:9D:43:5E:98:AA:B6:AF:58:CE:0A
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/Cel5VebU9XnFn51DXpiqtq9Yzgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:e1c0::/29
Signature Algorithm: sha256WithRSAEncryption
32:7c:40:bb:90:38:58:70:76:6f:a4:60:59:71:d4:b1:8c:62:
06:02:e0:bb:57:1e:d8:03:64:e2:b3:47:f7:f6:b7:9a:97:51:
5e:cf:49:e4:8e:7b:55:61:c0:b3:6f:47:eb:23:4f:6e:6f:1e:
3e:ad:1f:e0:68:4d:16:ed:3d:d3:53:ce:a3:7b:fb:1a:11:ef:
a9:b7:f2:f2:f1:40:80:41:ac:8d:92:2e:f0:91:1c:9b:68:e8:
71:68:94:7c:03:f7:45:9a:58:fa:9e:b5:ef:5c:b9:e3:7c:73:
eb:93:02:67:c0:01:9f:2a:77:29:1d:84:72:f5:1f:98:6e:21:
17:6b:4d:fd:b0:91:5e:45:52:ac:59:a4:ba:78:ae:9f:2e:ee:
40:fc:9d:d3:a4:9e:e8:10:4f:5d:14:d4:60:8f:71:ce:2e:83:
30:b4:03:7d:3f:86:54:65:09:0f:be:38:54:aa:37:a3:b7:92:
7f:d9:fd:62:a9:d4:2d:87:c5:a2:69:e9:31:fb:88:f4:73:b2:
59:b9:5e:6a:37:56:6c:79:c2:46:47:c3:6f:03:ae:2a:e7:6a:
32:19:b4:6a:bb:0e:0b:cd:56:e6:3c:b6:e9:47:ee:4a:a6:ec:
73:64:33:58:93:4c:77:d1:71:0b:bc:ae:21:ec:ff:0c:27:df:
ad:de:af:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:36:30 2026 by rpki-client