Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/0WDxpvd7L6wt7MC6nIzI1pbLxnw.roa
File: 0WDxpvd7L6wt7MC6nIzI1pbLxnw.roa (raw, json)
Hash identifier: Qj0rLUwIGzXPRYM32sEPLv0WM78LN5ADM0vdNX23xQg=
Subject key identifier: D1:60:F1:A6:F7:7B:2F:AC:2D:EC:C0:BA:9C:8C:C8:D6:96:CB:C6:7C
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 01A0C85985E0167A6D0B75D16FE4A8006375
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/0WDxpvd7L6wt7MC6nIzI1pbLxnw.roa
Signing time: Tue 22 Sep 2026 09:01:45 +0000
ROA not before: Tue 22 Sep 2026 09:01:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 2a12:5f80::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:85:e0:16:7a:6d:0b:75:d1:6f:e4:a8:00:63:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Sep 22 09:01:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d160f1a6f77b2fac2decc0ba9c8cc8d696cbc67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:25:05:9b:79:46:ce:23:a5:30:81:bc:b8:de:
ca:07:da:13:38:5f:5f:5c:3c:83:fc:9b:03:07:c2:
8a:47:f3:72:ab:ae:e0:ac:15:34:37:ab:ca:c8:71:
d2:10:87:29:6c:19:50:6a:88:32:f1:35:28:e7:ce:
04:1e:33:76:65:1a:74:4a:68:ff:c4:a6:ae:05:2e:
e5:1e:12:33:84:c9:ad:ac:c8:7e:b7:dc:7f:39:61:
be:d1:34:02:f3:63:1f:1c:c0:95:26:ab:f1:6a:e0:
f9:ff:5b:7a:f6:47:d3:1c:7e:bd:2a:15:99:c8:94:
cd:df:0c:c4:9a:c1:b7:0b:0b:37:32:4e:6a:2a:ab:
0b:46:8f:e4:64:b2:63:33:35:af:09:11:0c:d2:48:
e5:1c:c2:41:5b:63:58:57:e5:04:61:33:cf:07:14:
6b:51:7f:ff:c0:81:cb:dd:6a:d3:01:56:e1:c1:c7:
df:8b:39:71:a8:24:ec:2b:a6:a7:e7:7d:e1:ff:74:
5f:d5:0f:ce:25:34:d5:1c:1a:06:6c:bd:35:3b:d5:
c2:d5:6a:64:8e:e9:7d:43:8a:92:1b:fb:b6:bc:dd:
d7:d3:ef:7b:e3:2b:26:bc:2d:00:dd:d6:b9:27:b9:
d4:87:45:53:0b:8e:12:bd:e1:9c:b0:34:ff:83:e5:
47:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:60:F1:A6:F7:7B:2F:AC:2D:EC:C0:BA:9C:8C:C8:D6:96:CB:C6:7C
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/0WDxpvd7L6wt7MC6nIzI1pbLxnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5f80::/29
Signature Algorithm: sha256WithRSAEncryption
53:f8:dc:22:7f:3a:b1:d2:c6:31:38:21:5c:01:25:f2:9e:6b:
33:00:af:d6:10:a5:03:16:5d:41:0d:5b:d3:b9:de:dd:66:7c:
4f:68:70:30:9f:78:58:6e:31:f1:e5:33:49:49:f4:20:73:4c:
7e:c5:c1:c3:8c:f4:d6:82:4a:64:3b:f2:26:f8:70:1b:f2:44:
d1:73:9e:7e:ed:fb:9b:bf:53:e2:d4:df:35:36:21:25:4c:a5:
ae:de:ef:b7:93:3f:3c:95:17:0a:70:65:f7:02:68:b0:97:60:
75:05:90:27:c5:f0:9b:30:db:db:47:fd:f5:00:cd:04:fb:09:
47:54:8a:70:ec:22:e4:ca:c1:fa:6f:1e:da:ed:5e:86:f1:a3:
89:64:b2:f5:33:30:41:b7:1c:a2:75:3b:67:90:9e:ca:60:37:
b6:3f:5b:a0:23:fa:88:42:5e:c0:12:a8:8a:84:94:b9:d1:45:
1b:93:66:99:9a:14:6b:ba:5f:07:68:6c:eb:48:f1:fa:da:a7:
99:70:40:de:bd:59:dd:cf:9f:1a:1a:1f:ae:a1:61:d1:47:61:
a3:b7:92:b8:45:7b:91:7a:b2:6d:b3:68:3c:b2:04:14:28:7a:
07:09:e1:fd:79:e9:f6:d1:27:45:2f:d7:bf:7f:c6:9a:34:36:
71:1f:d3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:44:32 2026 by rpki-client