Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/ee3459-93d9-42f5-8821-5c5c4e53b595/1/S9DRlZSxOCUy_vfhA7p4MAW2H_o.roa
File: S9DRlZSxOCUy_vfhA7p4MAW2H_o.roa (raw, json)
Hash identifier: ubSfjTbFEJE4yQZULDcAUJBM6v4tk1C6cKvO6EK7KFY=
Subject key identifier: 4B:D0:D1:95:94:B1:38:25:32:FE:F7:E1:03:BA:78:30:05:B6:1F:FA
Certificate issuer: /CN=06c2deff46ac1200da121861b60881a2b46901a3
Certificate serial: 01A1A6ACA0E77C34B82FA74929E2FCD00C63
Authority key identifier: 06:C2:DE:FF:46:AC:12:00:DA:12:18:61:B6:08:81:A2:B4:69:01:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsLe_0asEgDaEhhhtgiBorRpAaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ee3459-93d9-42f5-8821-5c5c4e53b595/1/S9DRlZSxOCUy_vfhA7p4MAW2H_o.roa
Signing time: Wed 04 Nov 2026 13:08:13 +0000
ROA not before: Wed 04 Nov 2026 13:08:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218189
IP address blocks: 2a12:a180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ee3459-93d9-42f5-8821-5c5c4e53b595/1/BsLe_0asEgDaEhhhtgiBorRpAaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ee3459-93d9-42f5-8821-5c5c4e53b595/1/BsLe_0asEgDaEhhhtgiBorRpAaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsLe_0asEgDaEhhhtgiBorRpAaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:ac:a0:e7:7c:34:b8:2f:a7:49:29:e2:fc:d0:0c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c2deff46ac1200da121861b60881a2b46901a3
Validity
Not Before: Nov 4 13:08:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4bd0d19594b1382532fef7e103ba783005b61ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:41:6b:01:a0:bb:14:44:84:f8:e6:a2:e8:55:
be:38:7b:ce:67:87:fc:31:92:be:6d:99:44:e5:93:
02:e6:8f:ba:ee:a8:13:a1:a8:27:cc:d3:1c:bd:78:
9c:0c:aa:09:26:2e:9a:56:16:be:02:a9:9f:a3:9b:
51:42:56:23:af:9e:52:0c:3a:fc:fc:c5:84:24:4e:
84:5c:1a:ff:d7:ea:96:cc:62:d1:3a:c2:eb:b6:ce:
a9:cf:48:ca:77:eb:5f:7d:94:59:a2:0a:4c:60:74:
eb:8e:97:29:3d:bd:72:62:3c:75:c2:8f:b6:38:1d:
df:2d:b1:f6:cf:d1:4d:42:a7:b3:7a:ba:a0:4f:33:
08:db:00:8f:2f:ec:1d:ce:5d:c5:1e:ce:f3:89:c4:
83:07:8e:3f:64:31:00:32:41:56:36:ab:5c:de:01:
c2:61:d2:96:a0:0e:35:cd:9a:97:08:2a:7f:53:da:
4f:d4:6b:1f:e0:93:ab:40:e8:8b:83:15:88:fb:46:
2d:17:25:fc:8e:06:01:0a:6f:c9:8a:cb:b5:aa:2a:
f8:81:a0:9c:82:e7:2c:a7:a8:67:dc:b3:98:69:40:
5a:b6:61:28:68:8c:7b:5a:76:78:a5:f9:24:da:ad:
83:db:05:cb:cb:f8:ee:64:eb:21:31:cb:43:cc:83:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D0:D1:95:94:B1:38:25:32:FE:F7:E1:03:BA:78:30:05:B6:1F:FA
X509v3 Authority Key Identifier:
keyid:06:C2:DE:FF:46:AC:12:00:DA:12:18:61:B6:08:81:A2:B4:69:01:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsLe_0asEgDaEhhhtgiBorRpAaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ee3459-93d9-42f5-8821-5c5c4e53b595/1/S9DRlZSxOCUy_vfhA7p4MAW2H_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ee3459-93d9-42f5-8821-5c5c4e53b595/1/BsLe_0asEgDaEhhhtgiBorRpAaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a180::/29
Signature Algorithm: sha256WithRSAEncryption
9c:a6:7d:6f:35:a2:f2:9f:aa:f1:23:fe:3a:29:d8:06:85:d9:
9a:6b:4d:b2:53:b8:08:65:3b:9b:fc:27:1c:49:50:b6:9f:17:
01:0d:c1:8b:86:ba:ba:29:45:46:27:66:45:14:2c:eb:ad:20:
05:e7:cd:8d:3d:b9:6e:1d:b5:2c:8a:f0:fc:a0:03:dd:4c:23:
c6:41:50:77:0a:e5:ea:73:42:0e:75:83:61:28:5e:09:51:ef:
42:88:87:53:6d:64:be:5f:6c:63:2f:b7:b2:6f:86:30:18:f4:
14:b9:02:20:e8:12:c6:15:97:b0:1b:ff:99:3c:b5:30:99:3c:
ae:12:81:d2:ef:c6:67:07:78:67:39:81:74:bd:e1:7d:1d:da:
2e:ec:46:5b:8e:a3:92:8b:6e:36:af:4d:90:ce:d7:6e:b0:93:
d3:ab:17:2d:77:3c:6b:1c:24:91:4e:14:04:2d:29:0f:ef:a9:
41:ab:53:21:fe:33:55:22:9b:8b:90:f7:0a:3f:7d:7e:49:2e:
c8:37:7a:0a:da:5b:ac:a8:65:fb:9b:4f:d2:01:6b:22:4f:cb:
c5:0d:46:bc:e3:59:1e:cc:eb:e7:75:f7:15:ac:38:18:0e:84:
11:63:7e:4c:c8:3d:d2:69:b6:7c:07:79:d1:94:a8:4b:84:95:
17:09:64:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:22:07 2026 by rpki-client