Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/xIM6Ul5OJM3vvLeemfqH5E2uQBw.roa
File: xIM6Ul5OJM3vvLeemfqH5E2uQBw.roa (raw, json)
Hash identifier: h95Aj53g6j0rjuQLBWEoc0TgSlS8Nlq+/6uHRGvu+PM=
Subject key identifier: C4:83:3A:52:5E:4E:24:CD:EF:BC:B7:9E:99:FA:87:E4:4D:AE:40:1C
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 01A0C85F5AE40EBDEF194E33846C1B790346
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/xIM6Ul5OJM3vvLeemfqH5E2uQBw.roa
Signing time: Tue 22 Sep 2026 09:08:07 +0000
ROA not before: Tue 22 Sep 2026 09:08:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402604
IP address blocks: 2a12:880::/29 maxlen: 29
2a12:ee00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:5f:5a:e4:0e:bd:ef:19:4e:33:84:6c:1b:79:03:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Sep 22 09:08:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4833a525e4e24cdefbcb79e99fa87e44dae401c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:46:c5:9f:d3:b9:86:54:df:c3:d8:3c:0e:de:
00:0f:c2:29:eb:17:3d:3a:38:e0:96:ba:c3:03:3c:
6a:2d:cc:db:0c:d9:7c:d2:40:02:1c:b3:8f:e3:b7:
ed:b2:c2:22:05:31:c9:aa:43:34:ef:f4:34:dd:65:
6a:4c:fc:e2:e7:cd:63:aa:80:ec:65:3c:27:ba:33:
53:8d:1b:39:81:ba:87:3e:e1:37:13:a7:72:54:aa:
9a:b2:d3:cb:35:43:9c:5c:86:c6:e2:96:41:33:c4:
50:03:2f:26:a3:0a:c8:c1:79:6d:e1:c4:3c:a2:05:
b4:a3:08:1c:52:27:18:10:7a:3e:c2:8e:fd:7e:9f:
38:73:4f:e1:9a:64:58:f8:5c:4c:ea:32:56:5f:61:
df:1d:60:74:5e:1c:0f:35:a9:39:95:84:71:cc:ed:
2a:a1:a9:3e:bf:19:4d:ef:ac:ab:f5:ab:c5:44:3f:
e9:81:71:d8:ef:0e:8e:d1:9c:1e:5c:e5:af:6b:94:
ea:b4:26:2a:84:a3:57:66:0e:a6:4a:89:31:c7:8f:
19:82:52:8c:93:c4:41:78:a0:9a:97:d2:52:44:a1:
7a:8f:80:f8:f5:e4:88:09:77:9e:21:5b:56:76:83:
dd:ba:3d:ba:ee:f5:e7:31:8f:9f:62:41:ba:d4:98:
a3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:83:3A:52:5E:4E:24:CD:EF:BC:B7:9E:99:FA:87:E4:4D:AE:40:1C
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/xIM6Ul5OJM3vvLeemfqH5E2uQBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:880::/29
2a12:ee00::/29
Signature Algorithm: sha256WithRSAEncryption
57:e9:5f:1b:a6:c8:75:49:82:25:a7:be:d2:0d:1a:07:1d:71:
91:c1:ca:82:26:22:cc:6a:30:25:81:40:1c:63:da:2d:1c:0c:
dc:18:a4:1c:e5:57:a6:f1:c0:d7:d4:60:54:ff:d7:d1:2b:a2:
fd:2e:b1:86:ff:04:d3:be:22:4a:cd:18:af:ac:cd:2e:ea:90:
e1:33:ab:94:db:3a:7e:b4:35:07:6c:4f:e9:ad:a2:38:fd:fc:
4a:5d:aa:1b:a7:6d:9e:f6:9c:c5:d7:7a:81:fd:90:01:4f:7b:
8f:c7:59:5c:cb:5b:7c:62:0e:bd:bc:78:a6:2e:1b:bb:28:55:
91:f5:65:2a:6c:c5:4d:1e:fc:2a:86:fc:27:28:cf:f1:4e:2a:
66:bc:c6:b9:e3:eb:f4:9c:b4:62:d3:de:d5:02:2b:f5:f1:aa:
5e:29:09:ce:6b:21:05:62:c6:41:eb:db:3e:4e:1f:90:93:04:
c1:d1:6e:68:03:4b:12:91:ff:7d:9f:8b:62:56:a7:d9:63:63:
51:08:4c:03:00:3c:08:69:8b:6c:b8:0f:7f:32:f5:ee:83:82:
78:ad:4f:89:f2:5c:c6:5c:68:59:3a:bb:a0:8d:86:67:b0:61:
0f:f1:46:e3:65:3b:9e:04:13:0d:aa:91:27:b7:0e:65:52:12:
95:ca:f6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:50:39 2026 by rpki-client