Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ewDh-Of3DTsKrizymZCG9qxo_a4.roa
File: ewDh-Of3DTsKrizymZCG9qxo_a4.roa (raw, json)
Hash identifier: wd/aFSh3or0J34PT5Apt0JYGpHBLqOUvdDS4Ikn/5+M=
Subject key identifier: 7B:00:E1:F8:E7:F7:0D:3B:0A:AE:2C:F2:99:90:86:F6:AC:68:FD:AE
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019F9486DE2D0A544ED7F67F6E60850CE786
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ewDh-Of3DTsKrizymZCG9qxo_a4.roa
Signing time: Fri 24 Jul 2026 14:28:14 +0000
ROA not before: Fri 24 Jul 2026 14:28:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 2a09:3940::/29 maxlen: 29
2a11:4500::/29 maxlen: 29
2a11:7940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:28:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:86:de:2d:0a:54:4e:d7:f6:7f:6e:60:85:0c:e7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jul 24 14:28:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b00e1f8e7f70d3b0aae2cf2999086f6ac68fdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:85:7d:3c:cb:ae:99:75:23:ae:5f:7d:e9:71:
6e:bf:9c:5d:d8:f9:65:84:0c:57:f8:ec:ff:18:61:
98:c3:dc:25:12:a2:5c:7b:17:0c:a6:ce:c0:38:d3:
94:b5:ed:ee:e5:e7:df:b3:a3:c7:bc:2c:fb:b9:4d:
c4:a2:ba:02:19:2b:a7:98:38:b1:99:b9:1c:33:8e:
01:14:f5:dd:ee:a6:06:8f:e1:de:00:f1:9f:59:8c:
f0:7f:bc:88:e0:65:fd:aa:f7:ff:5e:30:e1:da:fb:
0c:a3:10:a5:0d:16:9b:3a:72:9f:84:b8:7d:62:a7:
5f:76:8c:6c:94:9e:35:12:85:ee:24:3f:e1:b2:82:
cd:c7:d4:35:2f:38:69:b9:a6:6a:87:1c:73:31:4b:
e6:2d:af:32:e8:0b:f5:6c:c0:1d:59:7e:66:24:df:
75:76:e6:e7:b1:ce:4d:19:4a:69:1b:74:3f:1f:7c:
e1:a6:2f:3c:b9:08:78:df:52:4d:b8:b6:5f:4d:46:
12:80:67:25:8e:41:63:71:76:c3:28:60:e0:51:23:
00:24:00:b0:5a:21:e8:86:aa:50:ca:a5:6f:39:38:
3c:73:1e:0a:41:94:e7:ba:7d:e5:bb:95:13:ae:32:
c0:61:71:ba:9d:23:cb:bb:ac:75:d3:db:eb:51:f0:
4d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:00:E1:F8:E7:F7:0D:3B:0A:AE:2C:F2:99:90:86:F6:AC:68:FD:AE
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ewDh-Of3DTsKrizymZCG9qxo_a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3940::/29
2a11:4500::/29
2a11:7940::/29
Signature Algorithm: sha256WithRSAEncryption
6b:80:7b:70:c7:a7:4e:4a:01:57:13:09:d0:1a:6a:73:23:ee:
8b:af:f7:e5:70:6c:88:ce:ef:1c:fa:d5:9f:30:4e:4b:0f:d5:
cc:be:b6:21:da:91:b8:9b:f4:59:a3:b8:71:57:c1:44:1e:99:
ac:2e:c7:9a:a6:59:6d:8a:f7:a1:85:7f:82:66:40:7c:86:4a:
88:45:9d:84:80:0e:7e:ac:1a:7b:08:6d:8c:d9:bd:f3:1e:89:
ca:f8:8e:e2:18:35:db:4b:18:e9:de:39:20:0c:34:f1:0c:7b:
bd:8d:f0:1d:94:2b:ae:d7:cb:90:4d:11:e0:1d:7c:30:80:18:
3a:0b:fa:6d:99:13:9f:68:be:81:26:50:94:3b:85:4b:6d:26:
82:70:ef:4f:9f:8b:25:65:a0:8a:78:b0:33:fe:80:5b:0c:64:
09:4c:b1:fa:d5:41:21:8c:3b:ab:bc:05:78:fb:aa:6b:2e:11:
7e:c0:92:ae:b9:f2:40:8f:66:35:eb:4c:32:c2:f6:f0:70:36:
6a:33:6e:fc:1e:7a:8b:15:56:43:89:94:5c:82:83:db:17:58:
f3:7d:d5:ab:ae:0a:48:a2:2a:6f:c7:50:bb:f8:f1:75:09:a5:
0f:ff:27:27:41:fd:9a:c2:9b:2d:37:cf:d1:6d:22:31:60:43:
ce:94:32:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:11 2026 by rpki-client