Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/9xHCGe0Y59fr8gMg0qbyLJIanpc.roa
File: 9xHCGe0Y59fr8gMg0qbyLJIanpc.roa (raw, json)
Hash identifier: zJe/dNecJRP3c4xdhOSB+341XLf53Knz5JJSaKOP2T0=
Subject key identifier: F7:11:C2:19:ED:18:E7:D7:EB:F2:03:20:D2:A6:F2:2C:92:1A:9E:97
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01A0C9790AF21426F7A1EB3A48F579CE5804
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/9xHCGe0Y59fr8gMg0qbyLJIanpc.roa
Signing time: Tue 22 Sep 2026 14:15:48 +0000
ROA not before: Tue 22 Sep 2026 14:15:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393886
IP address blocks: 2a09:43c0::/29 maxlen: 29
2a11:2ec0::/29 maxlen: 29
2a11:49c0::/29 maxlen: 29
2a11:6cc0::/29 maxlen: 29
2a11:9a40::/29 maxlen: 29
2a11:b840::/29 maxlen: 29
2a12:5e80::/29 maxlen: 29
2a12:6000::/29 maxlen: 29
2a12:7600::/29 maxlen: 29
2a12:ad00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:79:0a:f2:14:26:f7:a1:eb:3a:48:f5:79:ce:58:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 22 14:15:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f711c219ed18e7d7ebf20320d2a6f22c921a9e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:59:2e:a5:79:6f:63:32:72:42:e3:76:d3:66:
c5:a3:8f:7f:e8:06:1b:64:e3:31:3c:59:03:a8:8d:
99:5e:86:d3:a9:6e:c3:74:91:00:55:79:9d:02:de:
69:8d:7a:50:6f:d2:2b:09:24:a3:a6:27:2c:22:d4:
0e:5a:92:3f:d0:02:7f:f2:c7:d6:96:41:e7:68:99:
3b:b3:52:db:8c:b6:87:86:98:1b:35:16:e3:60:63:
5a:e9:27:e0:8f:0f:a5:c8:47:88:4a:92:26:dd:46:
c7:a1:5e:c1:13:46:21:39:b5:11:85:21:6a:7b:fc:
fa:d8:20:bf:9e:d4:1f:bd:f1:86:29:27:54:eb:9c:
a2:2c:bd:a2:b5:88:67:d0:69:9a:d7:7c:95:54:cb:
c9:6e:a0:34:3a:27:fe:3d:58:79:65:80:d9:54:93:
6a:fe:4d:42:71:3e:7b:8e:0d:4a:1a:4a:0b:df:14:
9f:14:09:44:40:02:69:0e:06:04:7a:05:47:b8:0b:
08:d8:fd:7d:f3:3e:a3:7b:b7:4e:43:06:c5:82:78:
1c:dc:23:f7:cd:ca:9a:11:07:1e:83:c7:0b:f5:73:
cd:e4:6c:e8:4a:5a:50:ad:e5:ca:c3:5f:70:ae:bb:
ed:57:73:0e:c1:34:18:4d:a4:b5:c1:02:e1:21:92:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:11:C2:19:ED:18:E7:D7:EB:F2:03:20:D2:A6:F2:2C:92:1A:9E:97
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/9xHCGe0Y59fr8gMg0qbyLJIanpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:43c0::/29
2a11:2ec0::/29
2a11:49c0::/29
2a11:6cc0::/29
2a11:9a40::/29
2a11:b840::/29
2a12:5e80::/29
2a12:6000::/29
2a12:7600::/29
2a12:ad00::/29
Signature Algorithm: sha256WithRSAEncryption
14:dc:c5:12:85:90:a9:e2:11:aa:06:af:de:dc:f2:d5:9b:2d:
b8:d7:cb:1e:d8:92:28:54:68:87:06:d0:f2:b2:7e:a8:c1:1b:
df:97:d1:59:ea:cb:1d:3b:3e:53:56:83:b7:12:73:57:6a:3d:
6d:7a:44:33:36:39:18:c0:f7:8f:e3:85:87:26:9b:68:3a:dc:
cd:6b:e6:46:4e:45:82:65:2e:f7:4d:31:fb:6c:59:0f:7f:1a:
f1:a3:bb:27:c2:22:6d:ed:9e:7e:83:f0:47:24:14:f8:b3:3d:
f7:99:b6:50:fa:fa:02:16:8d:ae:f9:db:70:84:64:f8:79:b3:
46:33:8e:cf:aa:9e:82:99:e9:17:1d:54:5f:ad:e4:6a:ef:40:
59:62:a7:74:ce:58:32:81:6a:0c:8d:37:6c:a9:52:15:4b:71:
dd:08:87:62:59:f5:d0:9b:d8:f2:8b:20:b7:01:9d:86:6e:ad:
ca:81:51:da:51:37:81:af:76:07:89:3b:93:85:5a:72:da:a6:
8f:58:57:dd:22:a8:0a:4d:f2:6e:0e:5a:cb:34:99:83:9c:c1:
22:10:09:67:96:46:e2:0f:32:22:5c:29:ba:b9:53:c5:b2:71:
c0:26:ce:8d:7c:1e:26:68:6f:31:0e:d5:2b:50:d2:44:45:27:
97:1a:72:65
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAaDJeQryFCb3oes6SPV5zlgEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjYwOTIyMTQxNTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzExYzIxOWVkMThlN2Q3ZWJmMjAzMjBkMmE2ZjIyYzkyMWE5ZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FkupXlvYzJyQuN202bFo49/6AYb
ZOMxPFkDqI2ZXobTqW7DdJEAVXmdAt5pjXpQb9IrCSSjpicsItQOWpI/0AJ/8sfW
lkHnaJk7s1LbjLaHhpgbNRbjYGNa6Sfgjw+lyEeISpIm3UbHoV7BE0YhObURhSFq
e/z62CC/ntQfvfGGKSdU65yiLL2itYhn0Gma13yVVMvJbqA0Oif+PVh5ZYDZVJNq
/k1CcT57jg1KGkoL3xSfFAlEQAJpDgYEegVHuAsI2P198z6je7dOQwbFgngc3CP3
zcqaEQceg8cL9XPN5GzoSlpQreXKw19wrrvtV3MOwTQYTaS1wQLhIZJKMwIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFPcRwhntGOfX6/IDINKm8iySGp6XMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvOXhIQ0dlMFk1OWZyOGdNZzBxYnlMSklhbnBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAAjBGAwUDKglDwAMF
AyoRLsADBQMqEUnAAwUDKhFswAMFAyoRmkADBQMqEbhAAwUDKhJegAMFAyoSYAAD
BQMqEnYAAwUDKhKtADANBgkqhkiG9w0BAQsFAAOCAQEAFNzFEoWQqeIRqgav3tzy
1ZstuNfLHtiSKFRohwbQ8rJ+qMEb35fRWerLHTs+U1aDtxJzV2o9bXpEMzY5GMD3
j+OFhyabaDrczWvmRk5FgmUu900x+2xZD38a8aO7J8Iibe2efoPwRyQU+LM995m2
UPr6AhaNrvnbcIRk+HmzRjOOz6qegpnpFx1UX63kau9AWWKndM5YMoFqDI03bKlS
FUtx3QiHYln10JvY8osgtwGdhm6tyoFR2lE3ga92B4k7k4Vactqmj1hX3SKoCk3y
bg5ayzSZg5zBIhAJZ5ZG4g8yIlwpurlTxbJxwCbOjXweJmhvMQ7VK1DSREUnlxpy
ZQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:47:13 2026 by rpki-client