Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/f0KDsuoqn_bTs9m8G_ebPdTnOQs.roa
File: f0KDsuoqn_bTs9m8G_ebPdTnOQs.roa (raw, json)
Hash identifier: GQ2JwkHdmw6DgKF/BJsDmhJ6iujcz5HwNZWFdOoo0P4=
Subject key identifier: 7F:42:83:B2:EA:2A:9F:F6:D3:B3:D9:BC:1B:F7:9B:3D:D4:E7:39:0B
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01A0C97909CE6FF6FD5EF3B96FDC44ABCC7C
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/f0KDsuoqn_bTs9m8G_ebPdTnOQs.roa
Signing time: Tue 22 Sep 2026 14:15:47 +0000
ROA not before: Tue 22 Sep 2026 14:15:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19148
IP address blocks: 2a11:2340::/29 maxlen: 29
2a11:3940::/29 maxlen: 29
2a11:50c0::/29 maxlen: 29
2a11:7540::/29 maxlen: 29
2a11:9440::/29 maxlen: 29
2a11:a440::/29 maxlen: 29
2a11:c140::/29 maxlen: 29
2a11:dc40::/29 maxlen: 29
2a12:6400::/29 maxlen: 29
2a12:b600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:79:09:ce:6f:f6:fd:5e:f3:b9:6f:dc:44:ab:cc:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 22 14:15:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f4283b2ea2a9ff6d3b3d9bc1bf79b3dd4e7390b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:96:94:6c:bd:38:9c:4b:06:57:24:51:f6:
1f:6f:3e:29:93:66:ce:3c:e8:3a:14:f6:9c:39:82:
54:aa:c5:87:8b:d6:d9:80:31:9e:43:e3:43:3f:2e:
3d:cc:8c:d0:b2:aa:79:bd:c7:77:05:1b:07:67:2e:
37:f8:9b:24:f2:1d:0a:23:11:29:cf:09:90:a6:f2:
6e:68:b8:0f:c9:ff:df:8e:2d:10:76:99:b5:7f:c5:
f6:fa:0f:bb:84:5a:75:86:7d:c1:c5:d6:15:e2:7d:
d2:d5:6a:1f:23:53:41:f6:19:85:a4:0f:a5:15:ec:
dc:7b:57:b9:a2:b6:96:c0:63:b0:50:8f:16:eb:d8:
d6:6f:17:ad:1d:ba:a9:a6:9a:b6:c6:58:64:1f:38:
a3:44:97:df:60:16:1a:87:df:5c:ea:ec:ed:88:d8:
aa:ea:ce:25:5b:2c:7c:1c:d9:e5:68:8f:b4:75:4b:
9a:26:a2:a8:09:02:33:f3:6d:fa:8a:50:79:9d:1e:
b4:37:03:46:92:0c:bc:7f:3b:f9:3a:6c:23:4d:e6:
a6:20:43:d3:22:27:78:64:2a:d0:76:4f:7c:98:4b:
13:42:da:49:e4:ae:cc:70:f1:7b:25:41:75:61:c8:
20:16:0d:d9:26:d6:2e:a7:95:39:c1:40:1d:25:7a:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:42:83:B2:EA:2A:9F:F6:D3:B3:D9:BC:1B:F7:9B:3D:D4:E7:39:0B
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/f0KDsuoqn_bTs9m8G_ebPdTnOQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:2340::/29
2a11:3940::/29
2a11:50c0::/29
2a11:7540::/29
2a11:9440::/29
2a11:a440::/29
2a11:c140::/29
2a11:dc40::/29
2a12:6400::/29
2a12:b600::/29
Signature Algorithm: sha256WithRSAEncryption
8a:56:9f:22:52:3e:53:04:de:ab:7e:d0:46:79:87:e2:cf:44:
db:91:43:57:14:67:9e:30:82:d9:2d:e2:25:79:a2:e4:58:a1:
2e:78:db:81:a6:d3:a5:00:2a:8f:8f:34:3f:2e:a5:26:b8:7d:
57:cc:e3:d5:de:57:f7:68:6f:39:9b:3b:54:02:ef:b7:cb:29:
4c:44:cf:e6:0f:e5:9e:9d:ef:97:76:b9:95:8f:4f:42:64:86:
88:27:f3:2a:7e:f2:4e:eb:3e:04:75:ec:6c:d8:c7:9a:45:21:
49:3e:66:e7:6a:0a:4f:b3:83:c5:ab:82:27:3e:64:71:51:98:
3f:34:3a:e5:30:d6:32:9a:4b:78:9e:57:6b:a0:36:74:1a:95:
df:c1:a4:76:93:6e:66:fd:54:2c:63:d6:ed:2a:7a:6c:77:f8:
44:59:91:0b:d8:a8:1f:ad:ee:7c:2d:36:ff:bd:75:1d:fa:e7:
bc:c5:9f:27:47:cf:a8:e1:8b:2a:e3:a1:77:3b:72:c4:6f:82:
03:a5:a8:00:24:c0:d8:83:60:7f:be:37:3d:82:9a:1b:31:6b:
3f:f8:5f:20:33:12:35:f9:ee:0d:0c:64:d1:10:c6:5c:37:ac:
4b:a3:ca:c9:73:b6:8e:6b:f9:61:f2:49:d1:9c:76:16:91:87:
8c:d7:49:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:57:04 2026 by rpki-client