Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/cIK95HEC9ymTPma61LBpaM1Yung.roa
File: cIK95HEC9ymTPma61LBpaM1Yung.roa (raw, json)
Hash identifier: MjLh0I1gcVcqu6CDJuR82IPY9M9LzPOPMAazoIA8Btk=
Subject key identifier: 70:82:BD:E4:71:02:F7:29:93:3E:66:BA:D4:B0:69:68:CD:58:BA:78
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 01A0C8B0D5E21ECA3F8476908F821E2F853F
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/cIK95HEC9ymTPma61LBpaM1Yung.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7289
IP address blocks: 2a11:9f80::/29 maxlen: 29
2a12:7500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d5:e2:1e:ca:3f:84:76:90:8f:82:1e:2f:85:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7082bde47102f729933e66bad4b06968cd58ba78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:09:79:c5:81:41:a4:97:d6:9e:ff:10:24:17:
19:12:9d:50:5a:0f:bc:92:8f:14:2e:ca:eb:ca:09:
f1:c1:a6:1f:33:b7:3b:3d:5e:e4:31:56:2f:30:a9:
49:82:8a:bc:5d:43:2d:c2:28:60:46:d4:67:94:0f:
1f:71:b8:53:eb:36:9a:2a:02:5c:3c:93:4d:1b:69:
97:6c:32:82:88:57:9e:90:58:83:d0:0d:e3:a7:61:
2c:b9:51:a1:1b:48:4e:e5:d9:22:df:31:da:31:0b:
0e:e3:2a:e8:b0:86:6b:1e:4e:58:69:55:fd:43:e6:
7c:c9:bd:26:d0:14:a8:3d:dc:1d:d8:16:f1:94:c6:
9d:61:06:16:42:19:9c:34:b8:61:bb:fa:4f:50:d3:
73:ab:4c:07:b6:8e:4b:bd:d5:66:d9:f4:4a:18:16:
4d:6f:8b:b6:ce:ab:09:87:48:dc:9e:7c:fc:bd:43:
84:03:51:53:b2:34:ea:f8:70:9e:7b:e2:ce:f3:0c:
d8:38:d8:1c:7a:8c:4a:b9:a4:87:f8:97:e3:d2:4f:
1e:2f:4f:07:65:96:ff:4e:7a:66:3e:8e:02:ca:47:
91:cc:b6:b2:f0:c1:64:a6:c8:6e:ec:05:b5:b8:d8:
5e:8b:f2:0b:c2:09:26:64:ed:8e:7d:4c:3e:04:3d:
ec:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:82:BD:E4:71:02:F7:29:93:3E:66:BA:D4:B0:69:68:CD:58:BA:78
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/cIK95HEC9ymTPma61LBpaM1Yung.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:9f80::/29
2a12:7500::/29
Signature Algorithm: sha256WithRSAEncryption
9d:70:4b:85:1b:5d:a3:62:6f:9c:66:0e:6c:00:08:a6:5f:90:
01:ba:cb:ab:b6:d3:9e:3b:ac:dc:0c:cc:7f:1b:46:d4:b2:b0:
3d:4f:00:df:d5:2b:f4:e1:12:31:bd:5c:ee:58:42:42:02:d1:
af:64:1b:1d:34:0d:14:1c:34:93:01:32:bf:74:52:86:8b:2d:
f9:2f:81:d6:9d:d0:50:38:90:63:7e:bd:8c:eb:2f:1d:90:84:
5d:b3:43:ad:f8:df:5b:3f:74:b5:33:81:f1:b0:83:38:73:a2:
3e:51:8d:59:a8:e5:90:99:e3:e4:6d:bf:5f:af:71:1e:c0:44:
bf:47:cc:af:05:cc:b2:84:25:7a:0d:4d:6f:49:8b:4f:bf:ac:
16:28:f7:a9:b2:c2:b6:21:d6:5b:a6:26:2a:86:34:3d:f6:32:
a4:68:46:39:5a:6c:03:a4:9b:6b:ff:96:3d:70:ca:93:d4:20:
58:e1:0b:14:eb:48:3b:c5:9c:f0:57:8a:e3:0f:33:96:68:a7:
66:da:e3:8c:90:17:f4:ba:05:ab:33:c2:81:3a:c9:14:d6:50:
ee:e4:4d:94:b2:be:ea:cc:8d:55:30:39:7f:93:1f:bc:f5:95:
95:da:dc:1f:1e:bc:d4:1b:a3:90:8e:1b:fa:62:8e:97:f7:dc:
21:65:f4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:04:01 2026 by rpki-client