Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/cx7xuwanEVaKEDWzhoWIsBQxxwU.roa
File: cx7xuwanEVaKEDWzhoWIsBQxxwU.roa (raw, json)
Hash identifier: zlI8twjBJ9De3p2qMmvW+L1HBzTJzGoIXwIIW7P/b0g=
Subject key identifier: 73:1E:F1:BB:06:A7:11:56:8A:10:35:B3:86:85:88:B0:14:31:C7:05
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01A0C96532FB70A6D61C66CD0D2D50BC8478
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/cx7xuwanEVaKEDWzhoWIsBQxxwU.roa
Signing time: Tue 22 Sep 2026 13:54:07 +0000
ROA not before: Tue 22 Sep 2026 13:54:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 2a0a:4c00::/29 maxlen: 29
2a11:2840::/29 maxlen: 29
2a11:3a40::/29 maxlen: 29
2a11:51c0::/29 maxlen: 29
2a11:6dc0::/29 maxlen: 29
2a11:9dc0::/29 maxlen: 29
2a11:c740::/29 maxlen: 29
2a11:eec0::/29 maxlen: 29
2a12:a80::/29 maxlen: 29
2a12:b00::/29 maxlen: 29
2a12:7400::/29 maxlen: 29
2a12:b900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:65:32:fb:70:a6:d6:1c:66:cd:0d:2d:50:bc:84:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 22 13:54:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=731ef1bb06a711568a1035b3868588b01431c705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:88:79:f1:cb:c5:b6:4d:90:62:cf:34:77:
7c:04:de:30:01:9d:c7:d8:08:fb:21:54:01:f0:03:
24:6c:ec:e6:8a:0f:0b:73:1f:1a:01:91:c5:04:2f:
5c:d7:88:ae:f1:49:68:b3:54:99:02:c9:63:0a:c4:
77:c6:04:ed:57:32:b9:b1:06:77:65:db:c0:a9:d9:
5a:c3:06:02:01:5b:9a:b2:6a:fc:78:f5:82:2f:5d:
9c:b4:f3:8f:0d:63:8f:ae:8c:af:5a:cb:51:1f:be:
69:ae:b7:7c:48:e2:81:09:0a:07:ec:2d:78:b9:d9:
32:a7:eb:a3:6f:06:3a:5e:ad:05:e5:86:b9:f3:8e:
18:b0:f4:fa:65:c3:19:2c:d9:2e:a6:39:65:f2:68:
5c:b2:26:49:f5:e8:10:d9:61:06:97:d6:da:b4:b2:
f9:8b:9b:79:c1:fc:c0:5e:18:10:d2:09:88:30:2b:
8f:44:74:d3:42:f4:60:f1:01:01:54:46:94:1a:e8:
ff:8a:67:a4:2e:a7:4a:5e:41:73:e5:98:fe:38:06:
e2:36:a8:2f:21:77:a3:aa:63:68:58:6c:b0:d4:22:
79:3f:32:29:47:9b:3d:a7:36:57:5e:59:4e:c8:97:
37:5c:18:d0:c3:03:49:c6:e8:b2:b8:1a:72:5b:8a:
49:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1E:F1:BB:06:A7:11:56:8A:10:35:B3:86:85:88:B0:14:31:C7:05
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/cx7xuwanEVaKEDWzhoWIsBQxxwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:4c00::/29
2a11:2840::/29
2a11:3a40::/29
2a11:51c0::/29
2a11:6dc0::/29
2a11:9dc0::/29
2a11:c740::/29
2a11:eec0::/29
2a12:a80::/29
2a12:b00::/29
2a12:7400::/29
2a12:b900::/29
Signature Algorithm: sha256WithRSAEncryption
11:a8:87:2c:3e:a1:7b:a5:ad:31:31:c1:19:e2:1c:32:f4:9d:
7d:34:44:2e:2b:36:90:72:31:37:d0:9c:be:d2:fc:97:36:26:
82:26:90:dc:53:22:ea:e6:cb:f5:f2:98:1e:2e:0b:30:8e:21:
25:77:1c:b2:e2:a7:38:99:2b:54:34:58:2e:a3:7f:e6:e4:b3:
d9:4c:01:74:56:63:06:a4:28:3d:e2:e4:01:82:e1:7d:02:f7:
f0:88:bb:cd:8a:07:73:56:a6:92:35:99:ee:0c:38:5e:43:e9:
e9:6b:1f:fc:c5:c6:34:c2:bf:1f:1f:6a:52:f6:46:f6:20:12:
fd:37:2f:d7:4b:fd:3a:de:09:d2:7d:d2:ba:e5:6c:da:94:02:
3f:3c:0d:ac:18:f2:2f:8e:ea:95:62:90:5d:a4:43:49:8b:91:
87:b6:f9:73:9e:3e:9c:83:00:3a:4c:28:34:24:ae:56:0b:76:
3e:82:98:88:24:60:f9:f7:a4:1e:23:7e:4c:49:14:29:80:0f:
b6:f4:97:d5:df:7a:4a:65:d1:61:79:59:55:14:79:48:91:e7:
1e:3c:e2:1d:c7:6a:0c:4d:d1:27:25:ed:31:dd:e1:8f:d1:84:
64:68:7c:65:66:20:c8:40:61:e2:4f:98:44:d9:d3:b2:13:3a:
f8:8d:30:c7
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAaDJZTL7cKbWHGbNDS1QvIR4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjYwOTIyMTM1NDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzFlZjFiYjA2YTcxMTU2OGExMDM1YjM4Njg1ODhiMDE0MzFjNzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYyIefHLxbZNkGLPNHd8BN4wAZ3H
2Aj7IVQB8AMkbOzmig8Lcx8aAZHFBC9c14iu8Ulos1SZAsljCsR3xgTtVzK5sQZ3
ZdvAqdlawwYCAVuasmr8ePWCL12ctPOPDWOProyvWstRH75prrd8SOKBCQoH7C14
udkyp+ujbwY6Xq0F5Ya5844YsPT6ZcMZLNkupjll8mhcsiZJ9egQ2WEGl9batLL5
i5t5wfzAXhgQ0gmIMCuPRHTTQvRg8QEBVEaUGuj/imekLqdKXkFz5Zj+OAbiNqgv
IXejqmNoWGyw1CJ5PzIpR5s9pzZXXllOyJc3XBjQwwNJxuiyuBpyW4pJcwIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFHMe8bsGpxFWihA1s4aFiLAUMccFMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvY3g3eHV3YW5FVmFLRURXemhvV0lzQlF4eHdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAAjBUAwUDKgpMAAMF
AyoRKEADBQMqETpAAwUDKhFRwAMFAyoRbcADBQMqEZ3AAwUDKhHHQAMFAyoR7sAD
BQMqEgqAAwUDKhILAAMFAyoSdAADBQMqErkAMA0GCSqGSIb3DQEBCwUAA4IBAQAR
qIcsPqF7pa0xMcEZ4hwy9J19NEQuKzaQcjE30Jy+0vyXNiaCJpDcUyLq5sv18pge
LgswjiEldxyy4qc4mStUNFguo3/m5LPZTAF0VmMGpCg94uQBguF9AvfwiLvNigdz
VqaSNZnuDDheQ+npax/8xcY0wr8fH2pS9kb2IBL9Ny/XS/063gnSfdK65WzalAI/
PA2sGPIvjuqVYpBdpENJi5GHtvlznj6cgwA6TCg0JK5WC3Y+gpiIJGD596QeI35M
SRQpgA+29JfV33pKZdFheVlVFHlIkecePOIdx2oMTdEnJe0x3eGP0YRkaHxlZiDI
QGHiT5hE2dOyEzr4jTDH
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:31:19 2026 by rpki-client