Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/1-un7aIZPiVQxwfImYtQvepCTIFg.roa
File: 1-un7aIZPiVQxwfImYtQvepCTIFg.roa (raw, json)
Hash identifier: 3q65idVYDT3wcXv8zcKMK2JXkCRnt8H/jRRErWjCr5Y=
Subject key identifier: FA:E9:FB:68:86:4F:89:54:31:C1:F2:26:62:D4:2F:7A:90:93:20:58
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 01A0C82783C1C07A01EB787F3E7D4ED9F2BE
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/1-un7aIZPiVQxwfImYtQvepCTIFg.roa
Signing time: Tue 22 Sep 2026 08:07:07 +0000
ROA not before: Tue 22 Sep 2026 08:07:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402642
IP address blocks: 2a11:99c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:27:83:c1:c0:7a:01:eb:78:7f:3e:7d:4e:d9:f2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Sep 22 08:07:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fae9fb68864f895431c1f22662d42f7a90932058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:c0:58:d9:27:09:88:eb:a8:90:97:82:79:
82:bb:cc:a8:0c:da:be:5e:0d:7a:52:24:d1:8e:e1:
dd:c1:b5:b6:1d:e3:fe:b1:49:75:52:0a:76:29:65:
c5:07:71:70:fa:fc:08:67:10:1f:ab:e3:60:6c:48:
77:f6:72:07:27:4c:58:43:6d:7b:a5:ba:1d:e2:84:
85:96:84:52:c2:2d:c7:16:4e:c9:18:0b:d2:0e:fb:
96:ef:49:e7:30:88:87:ef:79:29:13:96:66:e8:8b:
30:c5:ec:9a:1c:14:db:2e:11:83:01:fb:3c:71:e6:
50:30:19:6f:08:31:89:f4:c3:7a:7f:08:24:eb:ae:
a6:bd:51:55:2a:ce:5f:36:f0:d9:6d:ab:ed:52:26:
36:3e:39:b8:36:a3:8a:4c:d0:3a:5f:e2:88:b8:ca:
39:35:e1:eb:da:07:4e:0b:1f:82:4b:3b:db:4c:b2:
b7:68:88:49:5e:3d:c1:4b:33:3b:8e:60:c0:de:dd:
77:2b:f2:63:ac:7c:6b:2d:31:21:e2:20:5f:e2:ac:
90:59:c3:fe:e2:7f:72:9d:35:23:47:5a:29:c8:16:
cd:8f:6b:17:e5:79:04:f1:05:80:20:c8:ab:68:5f:
80:55:48:dc:b5:7a:11:15:f1:b9:8a:5a:c8:03:5a:
08:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E9:FB:68:86:4F:89:54:31:C1:F2:26:62:D4:2F:7A:90:93:20:58
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/1-un7aIZPiVQxwfImYtQvepCTIFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:99c0::/29
Signature Algorithm: sha256WithRSAEncryption
10:7d:42:32:bc:f9:b9:59:74:b3:36:65:0a:c3:f5:73:8c:58:
fb:be:bb:2a:76:01:f1:f3:b5:ee:3f:7a:50:28:87:61:9a:27:
2a:81:5c:70:07:c2:64:67:d9:b1:01:18:db:70:88:55:ba:1d:
33:1c:66:bb:74:9c:be:3e:ea:6e:cb:e4:e9:9b:dc:f6:04:dd:
11:14:f4:e9:a9:1b:60:42:fc:78:37:da:2f:92:2f:8e:03:7a:
09:fe:01:a3:28:78:cd:1e:ad:a8:28:be:cb:fb:66:64:5c:21:
1c:9f:d9:f0:43:41:01:86:ad:29:68:ae:5c:6a:2b:2e:46:ac:
9b:e7:4b:ad:ae:17:d4:ec:c2:22:95:aa:d0:36:b8:f6:f0:c6:
f5:25:9e:0b:06:30:09:38:9e:13:56:60:9c:0e:e0:37:b5:3f:
59:18:31:5b:e5:d9:d9:d7:21:2f:1c:41:74:ca:62:5d:1b:86:
1c:55:27:3e:87:69:bd:3f:86:b3:8a:b1:98:bf:10:20:04:f9:
47:55:9d:83:8b:c1:bf:c0:aa:a2:a5:35:4d:0e:33:8a:b0:b6:
f1:91:bd:0f:da:5d:2c:ec:c7:64:75:ea:e6:e1:07:df:e5:05:
04:34:2a:90:01:b3:00:f9:b4:58:e6:72:b7:8c:3d:f7:56:79:
7f:b0:8d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:10:30 2026 by rpki-client