Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/SP9bNmf259SVmVyuVWvocbsAb7k.roa
File: SP9bNmf259SVmVyuVWvocbsAb7k.roa (raw, json)
Hash identifier: 2yxQulpuVmdMzp77ccr7vVof7HKMLgOv/SLHeQH2cZI=
Subject key identifier: 48:FF:5B:36:67:F6:E7:D4:95:99:5C:AE:55:6B:E8:71:BB:00:6F:B9
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019ECFF7F486F53E89793009A4CEF569EFAC
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/SP9bNmf259SVmVyuVWvocbsAb7k.roa
Signing time: Tue 16 Jun 2026 10:26:34 +0000
ROA not before: Tue 16 Jun 2026 10:26:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204936
IP address blocks: 2a11:c940::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:f7:f4:86:f5:3e:89:79:30:09:a4:ce:f5:69:ef:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jun 16 10:26:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48ff5b3667f6e7d495995cae556be871bb006fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:96:1b:90:72:a2:89:cc:e0:55:75:01:c6:2b:
4b:98:45:12:14:dc:a1:c6:b7:7d:e8:54:10:11:9f:
49:6f:af:e5:b3:89:ca:eb:4f:07:8e:be:fc:b8:7c:
4d:98:8a:56:ed:9c:5f:2f:02:47:6f:7b:48:4f:72:
27:7d:8c:09:1b:16:e7:40:80:2d:b3:b8:5c:18:27:
3a:2c:40:51:5e:42:96:8d:c4:eb:86:40:3b:e2:71:
0b:03:6c:9a:28:d6:a1:01:5a:1a:bd:86:51:16:72:
06:70:b6:f1:40:91:00:08:99:27:15:69:19:3b:0c:
c1:69:1c:a3:3e:b6:35:ae:66:3e:74:97:f6:f3:48:
32:12:e7:66:cd:8e:a6:22:4e:a9:14:d1:b8:ac:0c:
cd:2f:be:a1:35:ee:30:a0:f1:75:cd:05:11:fa:ae:
c9:9e:26:19:b4:7f:7f:6b:bc:a5:06:0b:21:c1:2e:
90:17:79:17:b5:f7:53:ba:9e:60:e1:ce:46:b6:c0:
7e:05:11:40:08:a2:14:17:f5:93:61:35:55:1c:15:
33:0e:ac:aa:b6:ac:67:a5:5e:37:c8:c2:16:25:1b:
10:5a:b4:c3:45:22:3c:56:2f:bf:94:04:78:8b:4c:
f5:4a:d1:15:f4:86:9c:01:bd:7c:2a:f1:a7:9a:30:
78:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FF:5B:36:67:F6:E7:D4:95:99:5C:AE:55:6B:E8:71:BB:00:6F:B9
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/SP9bNmf259SVmVyuVWvocbsAb7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:c940::/29
Signature Algorithm: sha256WithRSAEncryption
7d:b0:47:0e:b4:ed:00:37:76:5a:bb:4a:ae:f8:bd:97:18:ce:
23:f2:33:32:91:7d:64:be:1e:8b:2e:3a:81:a2:bf:4c:33:7e:
d8:57:2b:be:7f:ae:1d:fd:1b:38:b0:a9:c6:cd:73:b9:23:dc:
48:73:d9:2c:64:ad:be:d6:6d:c1:99:62:6a:8c:97:23:8a:aa:
b4:f6:84:17:1a:f9:e9:ac:90:30:5f:1d:d5:8a:67:ce:91:0b:
0a:41:1c:3d:1c:12:a2:f0:44:2d:ca:a5:17:8f:cc:0d:d2:ae:
43:29:b2:62:34:82:f8:7f:66:69:d6:a7:28:a5:89:d4:5b:13:
d5:15:d9:bd:8f:e5:1c:b8:1f:98:2b:ae:95:07:40:95:d0:94:
92:bd:d6:d5:a8:d2:dc:4d:f0:13:a0:86:cb:c5:5a:39:9c:6a:
35:8a:b7:b4:6f:f5:3d:aa:88:42:70:fe:79:b4:b1:41:b2:ed:
ac:a0:e3:27:d5:0a:c6:7d:cf:cb:7a:73:eb:59:d4:71:63:07:
cb:14:60:d6:44:f8:aa:6a:b2:db:e8:fb:f0:58:83:70:7b:56:
f6:be:f4:f2:c2:ee:99:fb:16:14:bc:ee:b5:7a:d2:e8:9e:57:
e2:0f:a4:38:ca:cd:35:88:40:62:82:e2:59:53:b8:0c:9c:fa:
b0:f4:d8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:58 2026 by rpki-client