Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/vE4T42jxBwechSkNUDTx4xLmF40.roa
File: vE4T42jxBwechSkNUDTx4xLmF40.roa (raw, json)
Hash identifier: VE9Sy1DUDJVvTDYTHPoZIz2Wwsir9Oz1cubyyrGnvlM=
Subject key identifier: BC:4E:13:E3:68:F1:07:07:9C:85:29:0D:50:34:F1:E3:12:E6:17:8D
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 01A0C8278124DA6BFA1EE70A849E801C9DEF
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/vE4T42jxBwechSkNUDTx4xLmF40.roa
Signing time: Tue 22 Sep 2026 08:07:07 +0000
ROA not before: Tue 22 Sep 2026 08:07:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7289
IP address blocks: 2a11:240::/29 maxlen: 29
2a11:2000::/29 maxlen: 29
2a11:4fc0::/29 maxlen: 29
2a11:a400::/29 maxlen: 29
2a11:a700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:27:81:24:da:6b:fa:1e:e7:0a:84:9e:80:1c:9d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Sep 22 08:07:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc4e13e368f107079c85290d5034f1e312e6178d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1f:27:50:a0:ed:2a:ec:3a:e1:18:3e:39:80:
64:b4:02:71:08:6c:62:50:6f:54:f8:82:3b:bd:30:
18:db:16:f5:24:9a:da:d1:50:f3:03:60:8d:32:4e:
3f:c8:d5:55:3f:62:71:e4:df:3a:c8:d0:1f:76:94:
16:fd:17:6b:65:32:e0:07:9b:28:25:a8:2f:4e:93:
a8:c2:c9:8e:88:18:57:09:80:4d:59:69:22:25:af:
47:ed:4d:33:6a:42:55:50:5a:4d:25:cc:42:69:38:
25:14:f8:27:31:77:44:fa:49:6e:4b:53:96:32:75:
6d:3f:59:fa:5c:ae:8e:1f:6d:92:61:23:39:da:17:
78:b0:df:f4:a3:77:1d:3b:3c:10:69:0b:fe:f4:12:
58:2e:42:fb:25:04:82:d6:41:56:79:a9:a3:ca:55:
03:60:9e:f3:d0:5a:54:7f:32:f0:62:dd:57:4b:ba:
71:91:ec:22:e7:78:4f:3e:80:a4:10:c1:93:bc:43:
3d:19:02:59:a6:87:91:ad:7e:29:91:ed:99:69:d8:
7c:85:68:82:1a:68:39:ae:24:cf:56:22:5b:01:16:
8d:86:ef:e7:6c:cd:1a:cc:ee:0f:4a:9d:34:2c:5b:
75:52:43:b0:73:7b:f3:01:ba:4e:d4:0e:ea:42:78:
04:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4E:13:E3:68:F1:07:07:9C:85:29:0D:50:34:F1:E3:12:E6:17:8D
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/vE4T42jxBwechSkNUDTx4xLmF40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:240::/29
2a11:2000::/29
2a11:4fc0::/29
2a11:a400::/29
2a11:a700::/29
Signature Algorithm: sha256WithRSAEncryption
7c:55:31:5b:6b:06:d3:91:34:09:2f:7c:22:f7:d5:40:03:32:
d0:52:91:56:ad:2b:9b:94:bd:ff:96:83:a4:de:cb:e4:89:6c:
87:3c:a6:e4:88:49:d7:5c:68:ed:00:92:50:d3:3b:29:c7:51:
0d:5d:4d:ae:66:b1:0f:be:e8:91:50:da:88:37:30:09:9f:f8:
55:97:6a:c6:2e:09:ea:81:e2:d6:b3:8e:cb:fb:3c:af:71:88:
73:4c:b3:e7:8f:12:79:0f:b0:47:3d:8e:f2:ba:89:e8:00:1f:
e3:5b:79:b3:fb:88:55:c7:e7:fd:15:61:2f:23:f7:31:b1:c0:
13:87:18:4d:eb:f4:44:d4:7b:32:f7:6e:80:dd:18:87:4f:bc:
85:0a:72:5e:97:75:40:90:86:86:12:46:43:cd:fa:b6:40:a1:
92:28:46:f1:47:1f:3a:26:42:20:9c:9c:b3:f5:d3:6b:24:38:
77:7c:c6:bc:1c:7e:b4:65:ca:91:bb:40:75:13:78:1c:8f:ed:
b2:e8:cb:45:41:54:34:f0:33:e9:02:0e:12:a7:fe:91:6f:17:
ca:1f:3b:83:da:e9:03:1d:b5:8e:55:5f:93:bd:5b:3c:a3:fd:
83:c2:c7:9d:28:0f:87:b2:d6:6b:99:26:01:32:3d:bf:10:d9:
cc:5f:da:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:03:23 2026 by rpki-client