Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/RvuwBuE5RLjqU9ItKhg6fPHE9TM.roa
File: RvuwBuE5RLjqU9ItKhg6fPHE9TM.roa (raw, json)
Hash identifier: ds+euKfxTfF7hND8wtNeMyTwF3e0No2ssJQRbr3zP5Y=
Subject key identifier: 46:FB:B0:06:E1:39:44:B8:EA:53:D2:2D:2A:18:3A:7C:F1:C4:F5:33
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 01A017DB1127159233EB9F240E1731B05099
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/RvuwBuE5RLjqU9ItKhg6fPHE9TM.roa
Signing time: Wed 19 Aug 2026 02:30:27 +0000
ROA not before: Wed 19 Aug 2026 02:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200950
IP address blocks: 2a09:3f00:201a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 10:58:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:17:db:11:27:15:92:33:eb:9f:24:0e:17:31:b0:50:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Aug 19 02:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46fbb006e13944b8ea53d22d2a183a7cf1c4f533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:7f:32:2a:df:96:d3:43:b2:32:a5:38:c4:
8e:e5:00:d3:ee:75:f5:d3:59:2e:9c:4e:fa:51:a4:
20:69:d0:11:dc:70:8d:1b:7c:73:ff:64:7a:e8:ca:
7d:38:68:fa:83:1a:5a:65:34:81:e8:62:03:2a:4b:
df:7f:f3:d3:01:49:b7:d0:35:7e:c2:bd:58:54:61:
28:e5:cf:c0:8c:9f:c3:60:3b:57:4a:b9:f8:13:62:
fe:f7:6a:1a:0f:ae:8b:5a:22:e4:ea:01:22:a5:9a:
9a:46:d5:e0:75:b7:c2:4a:e9:41:5e:10:07:05:8e:
e4:eb:91:30:56:a6:8b:6f:92:16:3d:62:26:5a:08:
c8:1b:93:d1:29:da:08:cc:c2:2f:87:68:e2:b7:78:
15:23:9c:f6:e5:48:06:fa:80:28:a3:6b:c1:2e:d6:
14:8e:61:81:b4:90:c8:1e:c7:d7:34:7f:9c:35:e4:
72:dd:dc:f2:46:f3:38:3e:ec:ba:64:c0:6d:70:77:
28:8b:1c:a4:19:e6:ab:eb:c2:19:c9:ac:a0:f1:72:
21:c6:9f:48:92:e7:a9:24:da:97:1b:52:8f:c9:0f:
b6:a9:65:5c:63:1d:48:85:91:ad:df:66:f4:d3:19:
3c:d8:ab:34:5f:e2:15:cf:90:aa:3f:92:de:cc:c3:
e5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FB:B0:06:E1:39:44:B8:EA:53:D2:2D:2A:18:3A:7C:F1:C4:F5:33
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/RvuwBuE5RLjqU9ItKhg6fPHE9TM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:201a::/48
Signature Algorithm: sha256WithRSAEncryption
01:61:89:c5:df:b5:21:e2:62:82:74:90:91:65:cc:16:12:d7:
5a:37:69:dc:96:25:15:3e:9e:d2:7c:bb:40:52:a8:fa:5e:64:
ff:67:13:30:16:53:c0:44:23:86:ed:71:f5:70:cb:f4:99:b2:
85:8b:8e:00:a3:bd:72:0d:3d:bb:7d:56:fe:2b:8b:3a:ed:8d:
d2:02:08:9c:f8:79:09:08:22:fc:24:99:7f:ed:71:26:7e:0a:
5c:69:32:34:d5:19:eb:8f:46:d0:ed:ba:9e:ee:d2:ac:27:02:
f4:9c:0c:2e:c2:89:cb:19:e4:0b:ec:44:3d:28:fe:86:c8:78:
71:ef:09:e3:25:f0:9b:e6:b2:0e:20:ff:2c:c5:81:dc:f3:87:
e0:b0:f2:14:22:50:d7:c9:73:df:4a:50:f2:bb:4f:0a:33:10:
92:85:a8:bd:ae:4f:40:de:62:ac:9d:40:e0:7b:ec:ad:92:50:
e7:37:61:b4:1c:bd:99:57:5c:15:ed:3c:26:66:32:dd:ac:04:
c7:95:be:af:2a:a5:30:e5:71:02:d7:6f:a0:db:ea:96:07:7b:
42:01:3e:64:9c:64:d1:da:2a:69:a2:f9:54:5f:a6:37:83:ec:
ab:59:84:05:b4:fa:81:f3:22:27:1e:35:fa:89:4c:84:ed:59:
a6:56:61:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:07:36 2026 by rpki-client