Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/k-p9Fg8rjI1imzkvwugWIowv0NQ.roa
File: k-p9Fg8rjI1imzkvwugWIowv0NQ.roa (raw, json)
Hash identifier: CSgzBeSYnf9Fj1se7JtNWogVsq+HJpVVsy7BayeIy9I=
Subject key identifier: 93:EA:7D:16:0F:2B:8C:8D:62:9B:39:2F:C2:E8:16:22:8C:2F:D0:D4
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A0CA4EA9A172B2BE3EFB9A0E9475D248F4
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/k-p9Fg8rjI1imzkvwugWIowv0NQ.roa
Signing time: Tue 22 Sep 2026 18:09:07 +0000
ROA not before: Tue 22 Sep 2026 18:09:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206174
IP address blocks: 2a11:77c0::/32 maxlen: 32
2a11:7d07::/32 maxlen: 32
2a11:9642::/32 maxlen: 32
2a11:ab82::/32 maxlen: 32
2a11:bdc0::/32 maxlen: 32
2a12:e81::/32 maxlen: 32
2a12:f983::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:4e:a9:a1:72:b2:be:3e:fb:9a:0e:94:75:d2:48:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Sep 22 18:09:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93ea7d160f2b8c8d629b392fc2e816228c2fd0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d8:37:7a:20:2d:2a:e8:19:df:01:45:b8:57:
38:28:98:ba:ce:4f:e5:9c:25:08:d8:25:35:66:c1:
ef:cd:18:bd:81:8c:59:fe:c9:76:62:d1:df:6a:86:
3e:5a:a7:05:d4:bc:77:9c:3e:45:bf:44:96:6b:c9:
f3:fb:d4:92:40:3b:a2:64:a7:a9:35:70:28:93:53:
58:66:ab:0b:15:fe:e6:0b:34:ce:b0:52:2f:e2:6e:
93:8b:bb:c2:b9:d5:17:68:1f:6c:4f:ad:f6:ad:6d:
68:0f:d3:f4:47:78:8f:a0:d6:dc:42:a8:e3:5f:a5:
50:ec:14:a9:35:9b:32:cf:ae:a3:69:b3:48:c0:03:
3e:42:f8:33:f5:1c:c7:9c:cc:38:bd:5e:e4:2d:ec:
a0:5b:35:cc:cf:53:73:e9:f4:d7:ae:02:b6:2e:f5:
bd:a3:4a:32:1b:39:06:2e:a4:59:8c:a2:e0:1f:ea:
63:43:6f:94:45:0a:e9:b1:8c:90:db:3b:cd:54:53:
19:61:9c:7c:d9:5a:24:71:1d:29:87:d1:19:d3:74:
86:ac:52:db:92:85:a5:2b:d5:06:5c:37:cc:5f:e9:
fe:26:d0:5e:08:5a:86:33:27:a0:83:20:71:c3:14:
86:06:1e:e1:0b:5c:91:68:9b:8f:36:b3:47:15:59:
f0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EA:7D:16:0F:2B:8C:8D:62:9B:39:2F:C2:E8:16:22:8C:2F:D0:D4
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/k-p9Fg8rjI1imzkvwugWIowv0NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:77c0::/32
2a11:7d07::/32
2a11:9642::/32
2a11:ab82::/32
2a11:bdc0::/32
2a12:e81::/32
2a12:f983::/32
Signature Algorithm: sha256WithRSAEncryption
2b:73:ee:6a:f8:09:cb:d9:2c:70:31:24:98:6f:55:8f:ff:42:
bb:e7:a3:0b:fe:bd:dd:ba:44:76:83:9e:d7:a5:9e:52:00:cd:
2c:f5:32:ed:2e:a3:ec:52:e1:a6:f3:f3:91:1f:af:31:87:43:
38:25:0b:01:0a:01:ef:7d:c7:86:8b:30:68:43:f1:5d:af:7d:
49:67:8a:b0:fb:97:e8:44:62:ab:b7:54:8d:ef:6f:cc:89:be:
b6:80:a5:aa:95:69:4a:d9:98:cb:4c:b2:43:9a:cd:a7:d5:0e:
d5:57:ab:58:74:9d:28:f8:33:67:be:8f:1c:33:41:6f:13:a4:
a4:a4:68:0a:d8:0f:14:f6:7e:90:3b:c0:52:b7:58:34:ff:f4:
3e:3b:a8:2f:f4:c1:69:c1:6b:09:7d:72:48:88:76:64:36:0a:
ab:c5:f4:f3:a0:c6:68:6d:a4:8f:28:ce:71:96:8a:8b:61:7b:
f8:0a:eb:cf:ba:d6:ac:a9:65:c3:88:3f:a4:bd:13:1e:7b:b5:
7a:66:e4:34:a4:2b:75:86:f1:19:7f:b2:c4:cb:fb:af:4b:52:
ff:3c:9f:24:42:5c:85:2b:44:6b:e0:0f:d8:d7:48:08:71:96:
68:32:40:68:1e:6b:f8:c9:69:af:7f:48:10:13:50:e5:84:7b:
0f:f6:08:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:26:25 2026 by rpki-client