Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/lIp9VFw8magMvdTSBXsek9U0Wj0.roa
File: lIp9VFw8magMvdTSBXsek9U0Wj0.roa (raw, json)
Hash identifier: BZCpVIDBnhEHLMQLu9FEzU69f6OpaKUhboUcOtv52yY=
Subject key identifier: 94:8A:7D:54:5C:3C:99:A8:0C:BD:D4:D2:05:7B:1E:93:D5:34:5A:3D
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01A0C9790BC2C7F9BD04B462EB328AECEA57
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/lIp9VFw8magMvdTSBXsek9U0Wj0.roa
Signing time: Tue 22 Sep 2026 14:15:48 +0000
ROA not before: Tue 22 Sep 2026 14:15:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396190
IP address blocks: 2a09:7f80::/29 maxlen: 29
2a0d:83c0::/29 maxlen: 29
2a0d:9400::/29 maxlen: 29
2a10:fdc0::/29 maxlen: 29
2a11:1700::/29 maxlen: 29
2a11:6000::/29 maxlen: 29
2a11:7900::/29 maxlen: 29
2a11:8400::/29 maxlen: 29
2a11:9200::/29 maxlen: 29
2a11:cb00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:79:0b:c2:c7:f9:bd:04:b4:62:eb:32:8a:ec:ea:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 22 14:15:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=948a7d545c3c99a80cbdd4d2057b1e93d5345a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5e:20:a3:79:de:e6:6a:41:3b:f0:06:12:23:
4f:c3:b1:c5:a0:2b:f6:55:23:ae:ff:93:12:55:05:
2b:f0:09:fd:f2:a4:ba:42:46:df:dd:89:a6:12:40:
d6:b5:1b:f3:66:92:6b:c2:8d:8d:c6:ad:c7:7f:01:
14:de:99:59:de:57:65:a7:f5:56:94:1a:9c:d4:4a:
60:51:97:88:53:1c:6c:fc:45:7c:6d:a2:a6:e5:1a:
d7:0b:4a:ac:74:2a:68:41:78:f5:31:5d:71:66:b2:
ee:25:6c:74:7c:94:9a:f7:cb:2d:23:95:2e:38:c9:
ad:24:e6:63:82:e4:67:17:c8:4d:25:bd:0e:e1:0a:
ec:96:23:99:6c:c9:dc:bb:92:31:c7:be:f6:a5:69:
a8:39:eb:bf:0a:db:2d:74:58:52:04:80:2c:7b:05:
75:0e:d3:86:37:3e:4e:cf:59:36:d2:ab:52:4c:d2:
b6:41:2f:ab:a1:bd:98:ba:8c:61:c1:32:cd:a7:0a:
cf:d1:41:da:d1:7f:c8:88:75:08:c6:24:82:1f:ed:
08:bb:94:f0:c6:fe:50:a4:7f:d6:23:15:91:6d:fa:
45:72:ed:5b:9c:c9:d7:60:2c:e2:b9:a1:38:f9:da:
d2:cc:b9:5b:f9:a2:64:43:09:4b:61:e5:bf:ee:db:
8a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8A:7D:54:5C:3C:99:A8:0C:BD:D4:D2:05:7B:1E:93:D5:34:5A:3D
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/lIp9VFw8magMvdTSBXsek9U0Wj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7f80::/29
2a0d:83c0::/29
2a0d:9400::/29
2a10:fdc0::/29
2a11:1700::/29
2a11:6000::/29
2a11:7900::/29
2a11:8400::/29
2a11:9200::/29
2a11:cb00::/29
Signature Algorithm: sha256WithRSAEncryption
69:a1:98:6d:07:7f:ed:a2:5e:0e:e1:d1:96:f2:37:74:a8:d1:
ee:b2:1c:89:b4:13:fe:0f:d8:26:b3:7d:fa:04:1f:1f:0d:27:
69:f6:99:d5:4e:4e:6e:b1:5e:71:9c:97:77:c5:2b:be:bb:1e:
6f:6d:03:c5:af:71:62:3c:80:48:ae:08:c7:81:81:dc:30:f7:
f6:a5:1e:24:fc:78:2a:bc:a2:cc:eb:2c:15:bb:b3:91:89:67:
1f:c5:fa:2f:6a:bb:dc:2f:43:bf:fb:da:79:e8:e0:1f:38:74:
d4:5d:47:bc:15:0a:42:5b:fb:cb:9c:ea:bd:f9:12:67:23:96:
30:b3:16:8d:7b:ff:09:ef:46:a8:7d:f7:10:0b:23:3c:e8:90:
01:76:75:d9:21:b5:cc:54:57:e6:51:7c:00:2e:98:99:8d:1f:
41:1f:f1:bd:57:ec:fc:c0:dc:e3:f6:38:2d:ab:96:4e:5d:5a:
43:48:dd:d9:ed:2d:de:d5:61:11:40:08:8a:ed:14:6a:39:68:
ad:9b:f2:38:ef:bd:d6:ec:34:35:1a:ae:b9:57:bf:d5:03:34:
e9:ff:2e:fc:13:27:c4:34:cb:7e:2f:98:bb:b8:a6:4c:b5:ec:
ee:36:54:b2:ec:25:90:51:2e:00:2d:89:e5:ad:7f:8c:e1:f9:
78:b8:86:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:58:16 2026 by rpki-client