Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/WUEnbdUUqrLfYi2oKn0rFmvvVSs.roa
File: WUEnbdUUqrLfYi2oKn0rFmvvVSs.roa (raw, json)
Hash identifier: 5sNj4jrMjIeivWLuNKloS867aHhxwwkfpzUsslqii8k=
Subject key identifier: 59:41:27:6D:D5:14:AA:B2:DF:62:2D:A8:2A:7D:2B:16:6B:EF:55:2B
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019F9486DE815F2C9CD16BFB60861EDCE493
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/WUEnbdUUqrLfYi2oKn0rFmvvVSs.roa
Signing time: Fri 24 Jul 2026 14:28:14 +0000
ROA not before: Fri 24 Jul 2026 14:28:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 2a11:d3c0::/29 maxlen: 29
2a11:f3c0::/29 maxlen: 29
2a12:9b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:28:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:86:de:81:5f:2c:9c:d1:6b:fb:60:86:1e:dc:e4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jul 24 14:28:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5941276dd514aab2df622da82a7d2b166bef552b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8e:75:3d:e7:ad:88:3d:aa:2f:f5:9f:49:22:
4c:19:10:de:59:50:ac:ba:36:8d:0d:ec:06:63:a8:
61:f1:9b:0e:53:69:c6:70:ce:b4:81:35:f9:16:63:
20:2a:ab:eb:e5:b9:69:59:c6:10:76:5f:8b:74:0b:
35:6d:63:c7:94:c0:09:d4:9a:09:44:ee:89:8d:cf:
34:09:11:e1:b0:33:4c:62:04:81:a2:4f:5e:f0:31:
18:68:38:f2:95:32:52:cb:74:e9:ff:69:cf:fa:2c:
09:0e:de:a4:56:d9:d1:82:33:75:91:42:af:7f:42:
d5:f5:52:80:59:db:8a:40:2c:af:9d:51:44:17:42:
fd:ef:b3:45:c1:b3:3d:b8:2a:dd:99:5f:62:40:db:
96:32:07:4a:90:d5:d5:63:34:9d:ef:86:f8:7d:e5:
77:f8:20:62:96:ac:23:85:1c:98:2b:82:45:5d:8b:
f8:ad:62:33:4a:c4:16:1f:ec:03:7d:67:67:1f:f0:
c2:be:b2:7b:82:01:49:93:15:b2:47:87:37:47:c1:
27:c8:18:65:b8:56:d6:22:55:b9:dd:cb:0c:a7:9b:
88:c8:2b:8a:ef:cb:0b:e1:af:34:5f:2f:5c:61:c9:
cf:61:65:b4:5e:10:a6:0d:2d:02:f9:2f:0c:25:0c:
2d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:41:27:6D:D5:14:AA:B2:DF:62:2D:A8:2A:7D:2B:16:6B:EF:55:2B
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/WUEnbdUUqrLfYi2oKn0rFmvvVSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:d3c0::/29
2a11:f3c0::/29
2a12:9b80::/29
Signature Algorithm: sha256WithRSAEncryption
5c:57:d6:c5:7a:d9:38:e8:c8:30:a9:0b:7c:47:68:49:ac:bd:
cd:ed:9e:a3:42:81:28:c3:78:af:13:5b:58:cd:ac:a3:8c:29:
bd:8e:c9:db:d7:25:a9:60:b4:a7:a3:af:7b:ee:06:e0:54:1e:
d5:67:cf:d7:4d:ba:78:d3:f5:35:88:32:15:b9:0d:5d:bd:b2:
1e:85:b4:0d:01:d2:3d:59:05:de:a1:4c:f5:dd:4a:49:76:af:
e3:b9:b7:47:a3:47:03:24:da:ca:e3:1b:a2:83:45:da:3d:58:
ec:db:a7:bc:ca:7e:cf:38:f2:8e:93:12:c7:8c:38:9f:89:ed:
32:e5:5b:c6:7f:25:45:4c:20:e4:ee:5d:85:56:b8:20:14:24:
83:44:72:75:46:0e:20:c3:b3:d5:45:7e:d0:e4:85:91:9d:66:
f0:2d:46:55:cb:90:35:8a:fc:6c:43:b8:cd:34:cc:12:c7:6e:
84:11:d6:28:96:b0:5b:b1:fb:18:e3:eb:38:4d:70:47:19:a8:
8a:a5:b8:39:cb:0c:e5:33:b9:ed:b2:6f:eb:1d:39:6e:2a:57:
40:fe:75:2c:30:fd:6f:d6:3e:df:6a:83:7c:af:d3:1e:85:c9:
7f:bf:eb:e6:d7:13:d6:57:50:e8:51:d7:32:07:af:fa:b4:19:
d8:a1:7f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:10 2026 by rpki-client