Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/eI9NerJ1c6tinDx9yJcsboAQaCc.roa
File: eI9NerJ1c6tinDx9yJcsboAQaCc.roa (raw, json)
Hash identifier: /4R9eBzzDT2s1cbNz4Ys3Jws6eQW6QelhjomMlmRAmI=
Subject key identifier: 78:8F:4D:7A:B2:75:73:AB:62:9C:3C:7D:C8:97:2C:6E:80:10:68:27
Certificate issuer: /CN=f9d867cc24d0be89f05fc87258e0877a601580b9
Certificate serial: 01A0CD62EB5CA8C0C721BBC35A6DE6980AE7
Authority key identifier: F9:D8:67:CC:24:D0:BE:89:F0:5F:C8:72:58:E0:87:7A:60:15:80:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-dhnzCTQvonwX8hyWOCHemAVgLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/eI9NerJ1c6tinDx9yJcsboAQaCc.roa
Signing time: Wed 23 Sep 2026 08:30:07 +0000
ROA not before: Wed 23 Sep 2026 08:30:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200105
IP address blocks: 2a0c:3480:100::/48 maxlen: 48
2a0c:3480:101::/48 maxlen: 48
2a0c:3480:102::/48 maxlen: 48
2a0c:3480:103::/48 maxlen: 48
2a0c:3480:104::/48 maxlen: 48
2a0c:3480:105::/48 maxlen: 48
2a0c:3480:106::/48 maxlen: 48
2a0c:3480:107::/48 maxlen: 48
2a0c:3480:108::/48 maxlen: 48
2a0c:3480:109::/48 maxlen: 48
2a0c:3480:110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-dhnzCTQvonwX8hyWOCHemAVgLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:62:eb:5c:a8:c0:c7:21:bb:c3:5a:6d:e6:98:0a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d867cc24d0be89f05fc87258e0877a601580b9
Validity
Not Before: Sep 23 08:30:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=788f4d7ab27573ab629c3c7dc8972c6e80106827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:5f:31:4d:9e:dd:8e:47:29:c3:87:ef:07:
ae:62:a8:81:1a:f6:d8:f7:9f:b8:dc:20:ac:84:98:
67:0c:03:9a:d3:21:06:be:b0:fd:48:3a:e6:ae:74:
5a:08:9b:3a:e1:1d:69:65:3e:98:13:0f:37:58:32:
f7:98:57:ec:b8:59:15:68:ca:94:94:5d:ac:71:7c:
18:b1:d3:d4:ad:f2:f7:fc:53:d1:1e:d3:c7:da:62:
5f:37:ba:22:61:7e:16:d4:d7:30:da:4b:27:a2:35:
aa:e1:62:31:dc:af:28:42:0e:ef:d3:b7:ab:64:6d:
6c:6f:e5:e9:69:1e:5a:71:3b:14:8c:a0:1e:4d:d8:
58:81:95:8b:a9:4d:b3:60:0a:85:5f:d2:fa:e1:22:
e4:a5:f3:b3:37:7b:ed:90:cc:9a:c9:79:09:0e:bb:
ee:b3:9e:37:3b:5f:96:47:ab:aa:76:f9:c6:f8:21:
61:41:39:f8:2c:c7:f4:16:9b:75:7b:a0:2b:ba:eb:
65:7a:71:34:8b:77:48:7c:ef:ba:36:26:d3:b6:95:
a3:77:8c:a4:c4:f8:e6:09:7d:bd:74:16:9d:2e:cd:
57:b6:8b:22:2f:28:3f:fc:26:01:1a:2a:cb:cc:fc:
19:81:76:b8:54:4e:a0:bc:24:57:5b:e9:88:03:2e:
25:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8F:4D:7A:B2:75:73:AB:62:9C:3C:7D:C8:97:2C:6E:80:10:68:27
X509v3 Authority Key Identifier:
keyid:F9:D8:67:CC:24:D0:BE:89:F0:5F:C8:72:58:E0:87:7A:60:15:80:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-dhnzCTQvonwX8hyWOCHemAVgLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/eI9NerJ1c6tinDx9yJcsboAQaCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:3480:100::-2a0c:3480:109:ffff:ffff:ffff:ffff:ffff
2a0c:3480:110::/48
Signature Algorithm: sha256WithRSAEncryption
20:14:18:5f:e2:85:38:c7:e4:02:f2:01:e1:e8:bc:31:fa:ec:
ca:91:21:75:75:ee:1a:62:e2:ac:88:61:ff:c3:bb:22:f0:a7:
b3:e9:44:1d:aa:e5:7d:3d:0a:a4:f9:26:9e:38:75:8d:9e:81:
a3:89:a9:8a:f2:b8:3d:69:c2:5e:33:34:ec:73:64:14:bd:02:
ea:1f:27:ae:c7:40:4a:7d:9c:12:5d:da:ac:d1:b4:74:4e:86:
bb:47:3d:e8:24:57:ea:2f:e4:cc:db:00:2f:ef:54:97:0d:5d:
04:56:5d:56:80:71:0d:d9:cb:54:a5:78:2a:87:f8:46:67:30:
84:27:11:ec:fd:15:57:1e:8d:a8:d2:60:23:57:aa:15:94:02:
27:87:ec:f6:73:57:52:ed:99:26:6a:df:10:c1:99:a9:13:fa:
39:d7:44:1c:b5:1f:d3:98:63:de:82:76:d9:59:84:db:c5:59:
5c:82:7d:53:f8:e1:e8:98:8d:98:db:66:54:d1:13:dd:c2:29:
18:dd:ef:87:90:96:2b:01:a0:4d:cb:26:12:e9:74:75:34:62:
98:75:62:95:71:4d:1d:d5:cf:bd:10:60:e1:5d:71:11:0d:03:
0a:0a:4e:0d:f2:c9:05:45:ac:9d:dd:b5:66:e8:8d:db:f3:e0:
b5:4b:e4:8e
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaDNYutcqMDHIbvDWm3mmArnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZDg2N2NjMjRkMGJlODlmMDVmYzg3MjU4ZTA4NzdhNjAx
NTgwYjkwHhcNMjYwOTIzMDgzMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODhmNGQ3YWIyNzU3M2FiNjI5YzNjN2RjODk3MmM2ZTgwMTA2ODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxntfMU2e3Y5HKcOH7weuYqiBGvbY
95+43CCshJhnDAOa0yEGvrD9SDrmrnRaCJs64R1pZT6YEw83WDL3mFfsuFkVaMqU
lF2scXwYsdPUrfL3/FPRHtPH2mJfN7oiYX4W1Ncw2ksnojWq4WIx3K8oQg7v07er
ZG1sb+XpaR5acTsUjKAeTdhYgZWLqU2zYAqFX9L64SLkpfOzN3vtkMyayXkJDrvu
s543O1+WR6uqdvnG+CFhQTn4LMf0Fpt1e6AruutlenE0i3dIfO+6NibTtpWjd4yk
xPjmCX29dBadLs1XtosiLyg//CYBGirLzPwZgXa4VE6gvCRXW+mIAy4lAQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHiPTXqydXOrYpw8fciXLG6AEGgnMB8GA1UdIwQY
MBaAFPnYZ8wk0L6J8F/Icljgh3pgFYC5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1kaG56Q1RRdm9ud1g4aHlXT0NIZW1BVmdMay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvODA1MzJkLTAyOTItNDI3Ny04ZGU2
LTBmNmU3ODYxYTg3NS8xL2VJOU5lckoxYzZ0aW5EeDl5SmNzYm9BUWFDYy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZDEvODA1MzJkLTAyOTItNDI3Ny04ZGU2LTBmNmU3ODYxYTg3
NS8xLzEtZGhuekNUUXZvbndYOGh5V09DSGVtQVZnTGsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNQYIKwYBBQUHAQcBAf8EJjAkMCIEAgACMBwwEQMGACoM
NIABAwcBKgw0gAEIAwcAKgw0gAEQMA0GCSqGSIb3DQEBCwUAA4IBAQAgFBhf4oU4
x+QC8gHh6Lwx+uzKkSF1de4aYuKsiGH/w7si8Kez6UQdquV9PQqk+SaeOHWNnoGj
iamK8rg9acJeMzTsc2QUvQLqHyeux0BKfZwSXdqs0bR0Toa7Rz3oJFfqL+TM2wAv
71SXDV0EVl1WgHEN2ctUpXgqh/hGZzCEJxHs/RVXHo2o0mAjV6oVlAInh+z2c1dS
7Zkmat8QwZmpE/o510QctR/TmGPegnbZWYTbxVlcgn1T+OHomI2Y22ZU0RPdwikY
3e+HkJYrAaBNyyYS6XR1NGKYdWKVcU0d1c+9EGDhXXERDQMKCk4N8skFRayd3bVm
6I3b8+C1S+SO
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:02:10 2026 by rpki-client