Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/1-lrmwrPwRE6tQz1yYRV3ilGz3YI.roa
File: 1-lrmwrPwRE6tQz1yYRV3ilGz3YI.roa (raw, json)
Hash identifier: M+Pkm6+tYT7fplXRGzFnZV4KOURbi0onEdoE/weioGw=
Subject key identifier: FA:5A:E6:C2:B3:F0:44:4E:AD:43:3D:72:61:15:77:8A:51:B3:DD:82
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 01A0C82782D270EC249268EFF92BA030194B
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/1-lrmwrPwRE6tQz1yYRV3ilGz3YI.roa
Signing time: Tue 22 Sep 2026 08:07:07 +0000
ROA not before: Tue 22 Sep 2026 08:07:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 2a09:3940::/29 maxlen: 29
2a11:4500::/29 maxlen: 29
2a11:7940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:27:82:d2:70:ec:24:92:68:ef:f9:2b:a0:30:19:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Sep 22 08:07:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa5ae6c2b3f0444ead433d726115778a51b3dd82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:9d:bf:ae:dd:df:99:22:04:b4:9a:c3:e6:
d6:e3:d3:30:b2:9e:ab:1d:ab:4d:5f:f5:54:50:9a:
4c:d5:79:62:69:ff:05:62:8c:85:e5:43:66:98:10:
10:56:6f:f7:1a:bb:48:ce:8f:50:58:a4:f3:c3:d1:
34:74:9e:96:da:53:6b:76:5b:6a:31:9a:b1:e4:33:
d1:66:10:e2:cb:3b:8b:2b:a5:59:b7:4c:4b:cd:38:
9f:59:dd:78:fb:7c:48:0e:50:a2:d6:85:60:59:3f:
64:59:c1:1a:2e:ab:97:fe:d7:9c:29:a2:82:77:f1:
e2:fc:9b:5d:35:d2:97:04:77:fa:d4:5c:28:39:5c:
2e:5b:99:b3:aa:dc:14:fd:f1:87:aa:e0:7b:ae:17:
c5:a1:03:e9:7c:c5:45:b8:8a:3e:a6:d8:57:9a:47:
39:4c:aa:c9:16:7c:ca:cf:19:56:7c:0b:5e:e2:f3:
15:99:a1:53:d6:15:2d:f2:7f:4f:f5:da:2b:d6:20:
c4:ae:09:65:62:e9:53:44:b8:3d:35:98:cc:2e:31:
a2:bc:d0:2a:78:d3:8c:27:f9:c6:f1:96:43:35:22:
2c:f5:79:9e:94:89:03:90:0f:57:15:f0:62:f3:88:
75:29:c3:fe:5b:53:43:2a:c8:bc:07:63:35:dd:b3:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5A:E6:C2:B3:F0:44:4E:AD:43:3D:72:61:15:77:8A:51:B3:DD:82
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/1-lrmwrPwRE6tQz1yYRV3ilGz3YI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3940::/29
2a11:4500::/29
2a11:7940::/29
Signature Algorithm: sha256WithRSAEncryption
8a:75:4f:76:f1:39:12:37:33:24:6c:30:bd:79:19:57:91:67:
db:75:49:cd:8d:1d:60:16:68:89:ba:df:5f:c4:59:2c:31:c1:
5a:e3:54:01:18:93:37:b1:a5:d4:15:93:f2:c9:5f:72:8b:f5:
c2:68:9a:e1:5f:66:02:e5:8a:d5:17:83:e6:26:ca:70:3b:83:
4e:30:6d:12:e2:93:c6:42:f7:ef:3c:52:d7:85:c4:7d:a4:24:
9f:aa:13:71:d2:d1:c7:9d:90:a7:db:a6:b7:5f:65:4b:8c:5d:
72:bb:12:a0:85:e3:1c:5c:32:01:7e:77:21:6d:57:27:bf:3c:
09:79:9c:06:18:4e:f7:3d:e1:f0:96:90:a6:1c:95:98:af:18:
50:38:b4:b5:2a:bf:c9:e7:05:de:0c:b8:a9:10:99:41:0d:10:
ee:41:f9:a9:d8:61:34:fb:d4:6b:23:f3:13:f8:9b:c7:72:bd:
c3:a8:5a:38:ca:5a:15:ff:96:39:d4:29:cd:d0:81:33:70:a3:
97:b5:62:59:6a:27:d0:ab:05:ce:f5:12:1e:92:57:2c:2d:5b:
3f:bc:f0:b2:67:98:89:68:16:f6:ee:04:4a:69:ff:e9:76:c6:
c6:d9:24:b4:36:da:4f:59:ef:b8:b4:c5:8c:6e:4f:24:e2:5b:
41:b2:69:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:05:07 2026 by rpki-client