Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/1-WMupdXluOQ7x-K_avahDFozE_A.roa
File: 1-WMupdXluOQ7x-K_avahDFozE_A.roa (raw, json)
Hash identifier: Tk/f/OIyoGHt94/pLNY5O4OoQcxa7v//+2RvavWlFyI=
Subject key identifier: F9:63:2E:A5:D5:E5:B8:E4:3B:C7:E2:BF:6A:F6:A1:0C:5A:33:13:F0
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019F60611833FEEAFDA9C9DA783C8903EE15
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/1-WMupdXluOQ7x-K_avahDFozE_A.roa
Signing time: Tue 14 Jul 2026 11:26:43 +0000
ROA not before: Tue 14 Jul 2026 11:26:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401293
IP address blocks: 2a10:3c00::/29 maxlen: 29
2a11:22c0::/29 maxlen: 29
2a11:9a80::/29 maxlen: 29
2a11:f600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:61:18:33:fe:ea:fd:a9:c9:da:78:3c:89:03:ee:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jul 14 11:26:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9632ea5d5e5b8e43bc7e2bf6af6a10c5a3313f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:67:27:c8:00:38:48:3b:04:d7:0b:7f:27:20:
29:dc:59:1e:1f:e6:38:62:19:01:0b:10:e6:8e:82:
b8:83:25:87:6b:1d:dd:12:19:cb:f0:d7:2d:82:24:
62:d9:5d:2d:7e:33:f9:ff:3c:c0:b2:08:5f:14:ef:
e5:f1:fc:21:8b:3c:e4:a4:db:8e:d6:2c:a6:a7:39:
2b:f0:c9:2e:d4:6d:de:7f:ca:35:7e:a6:ec:e8:59:
30:6e:4b:bc:46:79:a7:e2:f0:ae:72:02:8a:4f:94:
f6:6f:a6:c1:f7:02:2f:80:f3:75:59:af:0f:7d:5c:
6e:46:95:62:16:dd:da:88:16:14:e5:08:e5:50:7c:
68:92:fb:bd:31:94:02:75:f4:40:82:d0:33:5c:49:
e5:1d:b4:84:a5:06:da:f3:07:cb:8f:95:f2:3b:46:
9a:e8:2c:7c:e0:28:37:4c:84:c1:98:9b:7f:c3:91:
e1:3e:81:d6:ff:a9:c9:0c:e7:24:a3:02:02:fd:c6:
77:23:b5:a3:1b:57:7e:0b:57:0b:38:e7:ae:f5:91:
15:6a:65:bb:f8:f5:70:dd:f9:3c:b0:63:23:b5:08:
e1:4f:c4:c8:e0:85:9f:bd:b9:28:dd:ce:96:fe:ef:
3a:eb:b2:6a:56:d8:23:91:ff:12:90:25:75:a7:6f:
38:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:63:2E:A5:D5:E5:B8:E4:3B:C7:E2:BF:6A:F6:A1:0C:5A:33:13:F0
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/1-WMupdXluOQ7x-K_avahDFozE_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3c00::/29
2a11:22c0::/29
2a11:9a80::/29
2a11:f600::/29
Signature Algorithm: sha256WithRSAEncryption
58:b4:dc:d7:87:37:73:de:f3:d2:15:98:57:75:b4:81:7e:fa:
47:0c:7e:dc:93:d6:15:96:e0:d6:81:b3:77:9a:68:46:96:ca:
36:2b:e1:74:ce:b1:e4:6b:3b:cf:54:68:c7:81:ed:f4:d4:88:
27:75:fc:14:3e:66:4e:a6:7a:82:4a:ce:5e:a0:47:e0:9c:18:
7a:43:93:de:f3:8c:fa:aa:5c:8d:82:c0:92:7f:42:0f:02:09:
41:81:6a:fc:ea:8a:4f:7f:26:a6:49:d4:4c:db:27:52:50:0e:
39:c6:20:3c:cf:3f:9a:56:93:92:93:50:cb:e5:de:83:51:09:
4b:86:b0:16:06:27:6b:84:56:76:bf:9e:99:94:b3:73:6e:e7:
cb:5a:c7:ef:50:68:3a:59:c8:a1:59:79:72:54:fc:9f:93:0f:
0a:bb:0a:0c:7e:93:d3:5c:32:f6:9d:92:a0:90:0c:d3:50:4d:
28:03:ca:41:56:53:6f:85:c0:f7:10:a7:e9:a9:65:46:12:ec:
1e:6c:42:42:87:b0:c5:ea:43:b2:7f:23:7b:0b:9a:2c:32:2e:
08:b9:33:7a:c1:1b:ed:9c:1c:6a:8d:e3:59:91:c7:ff:ff:ad:
cd:67:3a:9e:60:39:5a:fa:58:af:11:b6:a0:9a:b4:e7:50:7f:
fb:ab:0e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:27:54 2026 by rpki-client