Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/cl7D5sLVFgWW6CJVfHhm7mfl2_A.roa
File: cl7D5sLVFgWW6CJVfHhm7mfl2_A.roa (raw, json)
Hash identifier: KZ46QW9dJukZBAOrwrzMelQp6Uobu1FxR+ZVUcdS1Uk=
Subject key identifier: 72:5E:C3:E6:C2:D5:16:05:96:E8:22:55:7C:78:66:EE:67:E5:DB:F0
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01A0C9790A15307D10128CA416504CE2421A
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/cl7D5sLVFgWW6CJVfHhm7mfl2_A.roa
Signing time: Tue 22 Sep 2026 14:15:47 +0000
ROA not before: Tue 22 Sep 2026 14:15:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27411
IP address blocks: 2a11:ac40::/29 maxlen: 29
2a11:d840::/29 maxlen: 29
2a12:3300::/29 maxlen: 29
2a12:4000::/29 maxlen: 29
2a12:4c80::/29 maxlen: 29
2a12:4f00::/29 maxlen: 29
2a12:5280::/29 maxlen: 29
2a12:5600::/29 maxlen: 29
2a12:6200::/29 maxlen: 29
2a12:f300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:79:0a:15:30:7d:10:12:8c:a4:16:50:4c:e2:42:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 22 14:15:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=725ec3e6c2d5160596e822557c7866ee67e5dbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:59:6f:d4:21:00:7b:96:68:e4:c8:26:e3:
23:31:1b:c2:08:40:5f:23:9d:20:d3:8e:eb:e0:bd:
ad:48:82:73:b4:b4:82:4e:07:dd:45:4b:95:50:b4:
13:e4:6b:70:3e:5f:a6:9e:6b:6e:13:0f:93:83:0b:
b6:38:59:95:a5:65:6e:a3:d4:cb:8f:d0:9f:d8:20:
9e:0f:e1:85:09:c7:99:0c:b6:ac:8c:3a:63:ac:01:
cd:93:e9:88:00:4d:82:32:e3:26:8e:12:a0:2f:69:
52:60:97:6e:7c:0a:f9:3b:00:f5:de:de:c5:85:4a:
f9:2f:e1:5d:5f:e1:d8:55:1e:53:b6:41:f5:09:ec:
86:c9:9d:d9:02:4d:9e:9b:d2:68:d9:b6:0b:1c:fd:
81:c6:ca:b5:2a:0b:13:f5:a0:3a:55:46:58:9b:1b:
fe:3c:7c:fc:3b:0e:2d:8d:88:c2:ee:af:1e:83:47:
eb:a7:3e:03:f7:f1:d2:fa:a5:ad:80:39:74:88:48:
62:26:13:48:21:48:d6:53:49:84:bf:1a:03:62:da:
be:09:41:a4:82:e7:aa:07:77:a6:ac:fd:e4:b4:80:
0e:ad:34:42:1b:fe:5f:1c:9d:7c:d7:de:91:aa:f8:
3f:db:1c:1e:92:83:a6:38:d9:2a:5a:af:57:c4:f2:
38:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5E:C3:E6:C2:D5:16:05:96:E8:22:55:7C:78:66:EE:67:E5:DB:F0
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/cl7D5sLVFgWW6CJVfHhm7mfl2_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:ac40::/29
2a11:d840::/29
2a12:3300::/29
2a12:4000::/29
2a12:4c80::/29
2a12:4f00::/29
2a12:5280::/29
2a12:5600::/29
2a12:6200::/29
2a12:f300::/29
Signature Algorithm: sha256WithRSAEncryption
82:15:72:93:f8:26:c5:ed:b0:d2:0a:9d:97:ef:36:2e:41:92:
cd:84:4b:42:32:f3:15:2d:ff:e2:9c:47:0d:7f:4b:1c:ce:c9:
a5:9b:e1:b6:e0:15:58:dd:6c:67:2e:d4:d9:e5:c4:a8:8b:02:
f2:dc:22:93:d5:75:46:86:65:ca:c3:38:dc:59:09:2f:e8:68:
b6:5a:89:0d:8c:74:53:cb:6c:50:62:a9:c6:c4:7a:56:24:ef:
9e:0c:14:4b:5f:e1:2a:ab:73:d4:04:41:ca:fd:ab:dc:09:c6:
86:6e:83:87:af:fa:c7:0d:3e:55:6b:27:25:df:1e:61:31:b9:
43:29:91:6a:53:de:62:7d:fd:65:d5:b8:bc:52:b6:64:01:fe:
e7:a6:94:b2:a9:0a:b3:8c:b6:76:2c:d2:69:df:04:24:19:28:
04:67:ad:0d:54:5a:37:46:13:4f:4a:53:d5:14:f1:23:d5:a7:
98:70:9b:53:34:0a:a2:51:af:10:ac:29:cc:bf:f1:46:fc:d6:
7b:b9:75:d5:46:73:68:34:6f:cf:1d:b2:d6:b1:c2:8b:4b:d4:
c7:0e:bd:f8:7c:a3:49:b2:04:ad:53:82:cb:39:cc:28:7d:00:
27:5e:ce:72:be:05:58:09:5d:e0:1a:8e:2c:72:af:61:b4:f3:
a7:c9:58:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:20 2026 by rpki-client