Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/9zx-jGX3RbLlRInzB3WpUMej34c.roa
File: 9zx-jGX3RbLlRInzB3WpUMej34c.roa (raw, json)
Hash identifier: 8a+25rbKXY3XSXyYkMEL2laj6pvmya/GUv2Ei14rA+I=
Subject key identifier: F7:3C:7E:8C:65:F7:45:B2:E5:44:89:F3:07:75:A9:50:C7:A3:DF:87
Certificate issuer: /CN=7cf97782d6f202a70183671aa630c73aba33307e
Certificate serial: 019F912C19BCCE12CB0870AB328AB6BEB0DC
Authority key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/9zx-jGX3RbLlRInzB3WpUMej34c.roa
Signing time: Thu 23 Jul 2026 22:50:14 +0000
ROA not before: Thu 23 Jul 2026 22:50:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51815
IP address blocks: 2a0a:6e40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:2c:19:bc:ce:12:cb:08:70:ab:32:8a:b6:be:b0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cf97782d6f202a70183671aa630c73aba33307e
Validity
Not Before: Jul 23 22:50:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f73c7e8c65f745b2e54489f30775a950c7a3df87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:32:91:9b:36:63:09:18:a6:97:30:b5:02:
37:7f:d7:ca:02:89:13:f2:57:d9:c0:d9:31:fa:2c:
96:52:46:f9:e8:9b:05:15:71:ba:1f:ca:2d:cb:83:
8f:4a:11:c7:04:e9:63:b3:19:50:c2:ab:d7:cd:df:
3f:55:e2:56:32:88:09:8a:f5:cb:63:78:61:6c:95:
99:b7:41:71:39:56:68:45:81:db:f0:97:4c:02:f8:
fa:4b:4b:9a:2b:d2:a1:4c:38:15:32:40:e6:cb:83:
8b:f2:88:43:46:9c:97:13:c3:4e:86:28:51:98:04:
50:cf:79:f6:d9:25:e2:f7:50:dc:f5:c9:a5:c6:f1:
d8:f1:4f:bc:8e:ba:4a:11:a8:4a:14:03:79:8d:df:
9c:43:43:be:91:d5:ef:22:f5:bc:79:13:e4:32:f2:
26:85:1f:f8:f2:06:38:cd:59:0c:56:14:04:36:47:
a2:3d:84:7a:1f:88:f4:66:ac:3b:1f:4a:f4:d8:22:
f1:ad:a4:aa:8e:ed:fe:f4:97:d7:7e:1c:83:66:00:
51:66:06:f8:af:d9:8c:e9:28:45:73:ba:68:6e:ec:
15:db:0f:ef:70:c4:26:4e:de:8a:01:6a:5f:18:5a:
1b:bc:b3:e5:eb:c3:57:60:b2:80:16:9c:b0:7e:30:
4d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3C:7E:8C:65:F7:45:B2:E5:44:89:F3:07:75:A9:50:C7:A3:DF:87
X509v3 Authority Key Identifier:
keyid:7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/9zx-jGX3RbLlRInzB3WpUMej34c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6e40::/29
Signature Algorithm: sha256WithRSAEncryption
2c:fb:31:ae:36:b5:ae:5b:bd:08:3f:92:7e:52:d6:88:da:ee:
0c:ba:72:46:34:ea:72:60:19:24:c0:5b:25:7d:67:de:3b:29:
a8:2f:b1:28:0a:4b:25:3a:af:c0:95:43:31:fa:7f:6b:69:72:
55:a1:dc:35:df:b3:bb:5c:08:39:ff:b5:58:8e:53:9e:d3:7e:
39:23:66:5d:d7:f1:8b:00:5b:40:ae:e6:c8:34:ab:6d:6d:59:
e7:84:33:77:73:30:1e:41:96:51:6d:6b:1c:3c:61:a8:30:e4:
49:93:bc:5b:fd:1c:6c:24:69:fc:1e:24:e3:1d:67:05:d9:d2:
d6:ea:cc:b7:49:0b:a6:1f:2c:c5:dc:63:3d:f0:27:e8:8d:35:
fe:a0:56:5a:0e:75:32:51:46:45:0e:9f:48:3d:38:74:07:67:
36:6f:07:2b:21:17:76:ae:01:12:85:e1:8f:12:31:bd:89:06:
c7:fe:58:a0:27:cf:82:54:2e:cb:46:8b:1f:68:2a:54:f1:81:
fb:44:03:6d:87:39:f8:bd:02:41:76:07:c8:4c:5c:ea:3f:3c:
ea:f7:a7:19:ff:d1:d4:9d:ad:2f:65:a0:86:92:e2:eb:31:71:
6b:50:84:dd:7e:41:13:fc:35:66:a7:c6:a1:71:47:39:34:d9:
b5:93:3f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:18 2026 by rpki-client