Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/cWj4UtL1sFgLiFO9xaoYNOUaYKA.roa
File: cWj4UtL1sFgLiFO9xaoYNOUaYKA.roa (raw, json)
Hash identifier: 9hZRVxjwWZjY8LooPQ/ZoNmU0pcSfdMkHBQ4mNIdQvQ=
Subject key identifier: 71:68:F8:52:D2:F5:B0:58:0B:88:53:BD:C5:AA:18:34:E5:1A:60:A0
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 01A0C980A90348EFCE823010DEF658F863A9
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/cWj4UtL1sFgLiFO9xaoYNOUaYKA.roa
Signing time: Tue 22 Sep 2026 14:24:07 +0000
ROA not before: Tue 22 Sep 2026 14:24:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402642
IP address blocks: 2a11:a640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:80:a9:03:48:ef:ce:82:30:10:de:f6:58:f8:63:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Sep 22 14:24:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7168f852d2f5b0580b8853bdc5aa1834e51a60a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7d:cc:b2:5e:f9:32:6f:49:70:ad:11:30:97:
6a:0b:a7:16:a4:27:d2:fb:0a:b1:17:88:79:c3:1d:
9e:66:20:de:82:00:c4:b3:4d:cb:d7:d8:78:e8:72:
bd:1e:64:2a:d6:1a:f1:00:42:ce:33:5a:ec:aa:c1:
9c:cc:d7:a1:c5:b5:28:4d:18:27:e9:cf:63:ad:b5:
07:e3:06:68:3f:8f:e8:1f:31:1d:04:d2:5b:57:d2:
ec:d4:b9:ad:51:bf:93:04:bb:e8:30:68:f1:4a:7f:
2f:b9:2c:ae:4b:a5:90:a1:24:56:0e:7b:b7:9c:6e:
04:03:27:e5:c1:00:1b:bb:cb:5b:e6:8a:45:97:5c:
06:ba:5d:b9:ab:5c:40:8c:ee:b7:7b:f6:71:65:f1:
32:95:fa:bb:ea:f9:2d:90:de:d8:55:08:4d:cf:a8:
71:32:0d:63:41:a5:8a:11:92:a8:e6:81:37:df:3f:
e9:1c:1c:33:52:c8:70:80:a6:62:d0:e9:b0:3b:eb:
54:71:b7:56:13:cb:de:c7:9a:f6:18:ac:65:50:38:
c9:05:37:3a:70:21:c5:53:b6:bf:3a:af:f5:e1:85:
3a:15:80:6d:f7:79:ef:ef:60:44:95:17:62:4e:af:
14:90:5a:15:c7:a6:0a:77:18:78:76:2a:db:f2:f5:
b5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:68:F8:52:D2:F5:B0:58:0B:88:53:BD:C5:AA:18:34:E5:1A:60:A0
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/cWj4UtL1sFgLiFO9xaoYNOUaYKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:a640::/29
Signature Algorithm: sha256WithRSAEncryption
45:c5:6c:d4:42:ab:1e:92:8d:5b:6e:93:6f:9e:72:c3:10:18:
a9:60:a3:79:d7:95:ca:af:ae:94:61:5e:b4:f8:b7:8d:1a:cd:
ea:97:4b:fc:e6:02:dc:f8:e7:fa:6e:34:ac:bb:ba:e4:43:2d:
45:1b:5d:6e:a4:96:67:54:02:1f:6d:76:f4:86:6f:5f:70:d8:
7a:24:44:06:ea:7e:56:d9:36:9e:48:c8:eb:ae:b1:8f:ea:77:
51:53:d0:9f:73:9c:55:5f:c4:e3:b7:d3:c5:08:c9:3d:d9:8e:
17:1d:d8:cb:ac:c9:4b:bc:76:23:d0:99:fd:ea:05:ca:2d:84:
79:2b:27:70:d9:e2:19:a0:58:e8:9d:f3:f0:12:fe:4c:51:a6:
09:54:ee:e8:fb:f5:32:54:10:62:bb:ca:86:53:a0:ea:80:61:
5a:45:6c:c7:e1:b7:c5:35:4c:1f:85:52:1e:02:42:d2:f4:16:
04:7f:f8:81:50:a4:42:37:dc:2b:7a:70:75:72:18:0d:9b:27:
19:06:14:f5:18:a2:75:74:77:07:bb:f4:4a:68:3a:63:79:0f:
2c:78:5c:4b:20:df:3f:9a:27:99:a9:13:42:d2:37:92:20:a8:
7b:4b:12:5d:7c:83:a5:6e:65:43:3d:17:dd:b0:69:a1:b4:73:
39:4e:1c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:21:07 2026 by rpki-client