Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/9ttx5z1p0nafCOgRUVjmK-BpGYw.roa
File: 9ttx5z1p0nafCOgRUVjmK-BpGYw.roa (raw, json)
Hash identifier: PrMThTVmSUvAH78i4T5Fgu+fRaplo4n7qwVqwxukIvs=
Subject key identifier: F6:DB:71:E7:3D:69:D2:76:9F:08:E8:11:51:58:E6:2B:E0:69:19:8C
Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Certificate serial: 019DEAB0CF73F06DB636FF520E8C72BE8A2D
Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/9ttx5z1p0nafCOgRUVjmK-BpGYw.roa
Signing time: Sat 02 May 2026 21:55:49 +0000
ROA not before: Sat 02 May 2026 21:55:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199742
IP address blocks: 2a01:ecc0:e00::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ea:b0:cf:73:f0:6d:b6:36:ff:52:0e:8c:72:be:8a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Validity
Not Before: May 2 21:55:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6db71e73d69d2769f08e8115158e62be069198c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:2a:e9:d9:81:ed:32:5c:cb:a4:4a:1c:53:
87:a3:a8:ec:2e:a6:58:06:0a:51:82:b2:9c:04:fe:
99:47:ed:46:49:e9:e4:34:c4:9a:0d:80:91:11:49:
8b:47:a4:47:6a:d2:ba:62:9e:4f:80:21:4d:69:ca:
fb:58:f3:7c:28:87:28:a7:68:f6:f0:29:e9:b8:b1:
0f:c3:cd:de:10:29:55:02:74:63:c1:20:03:84:a0:
c1:d6:a3:95:d5:27:72:18:1f:d8:c4:29:98:78:32:
ab:d0:52:e7:51:52:61:b5:86:10:f7:24:63:9a:f2:
6b:04:c1:7f:85:a0:e6:b6:4a:f2:bb:b0:bc:71:9b:
41:41:9c:c0:5d:f9:7d:8a:f2:47:49:d3:e0:bb:e8:
14:59:e9:ec:82:33:fa:11:c4:b4:75:ef:4f:29:8c:
ec:c1:69:85:de:65:36:ef:7b:79:ae:d6:da:08:7f:
58:03:6c:9d:b9:89:95:03:20:68:1c:c4:00:c8:0e:
15:c0:32:86:da:11:d4:32:85:c2:68:f5:7a:31:ce:
ef:60:d4:da:98:92:6f:b8:1d:a1:ae:b8:99:6a:77:
e6:40:a7:94:88:2f:3c:a7:53:36:2f:18:71:68:34:
96:96:70:d5:18:3c:6a:ff:ee:de:f3:eb:7c:a1:61:
ac:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DB:71:E7:3D:69:D2:76:9F:08:E8:11:51:58:E6:2B:E0:69:19:8C
X509v3 Authority Key Identifier:
keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/9ttx5z1p0nafCOgRUVjmK-BpGYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ecc0:e00::/42
Signature Algorithm: sha256WithRSAEncryption
4e:f8:bf:4d:81:82:ab:29:a5:c7:3e:c0:61:76:80:4b:c2:72:
ed:69:86:91:11:e1:e8:18:1a:1b:6e:8d:69:54:8a:b3:5b:df:
08:4c:bf:ab:db:7b:15:69:11:cf:21:1b:ab:a9:92:79:ac:9a:
9c:2d:53:af:d5:3e:6e:13:e7:68:c2:ce:c8:e6:65:ec:63:c2:
4e:30:75:74:65:7d:ac:f3:98:1a:ca:e5:e2:d5:ac:3e:ff:01:
a7:ed:47:7f:2e:07:8d:3d:6b:a8:93:52:d6:34:27:de:45:f1:
f2:fd:37:13:51:85:5d:3e:44:73:11:40:d2:72:f4:55:56:cf:
1d:12:02:66:0e:5b:40:29:c1:db:5b:6a:0a:71:4a:c6:91:02:
84:9e:60:bd:bf:0e:26:4f:1c:8b:b8:50:f3:8b:c1:f9:11:39:
74:4c:79:c0:8a:fc:2e:b3:7e:03:65:91:cf:77:f7:71:1c:07:
40:d7:ea:d7:e2:fa:73:0f:fb:c2:c0:ce:85:a9:d8:5c:e1:41:
3e:13:d0:70:a4:16:c4:63:c2:3f:15:e8:94:da:47:78:78:28:
2b:ef:c3:03:fb:b0:db:86:df:29:ab:29:4e:cc:3d:29:ac:e5:
ff:f0:16:f1:21:ce:05:1f:43:73:63:5d:bd:35:80:27:67:ec:
dc:23:79:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:58 2026 by rpki-client