Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/oiFGNGuEBoRxwV4tr_6ltQZUOyM.roa
File: oiFGNGuEBoRxwV4tr_6ltQZUOyM.roa (raw, json)
Hash identifier: hE47UOJjAbNPBn6kqwspGJbsZURO2T/edGWHIkT04NQ=
Subject key identifier: A2:21:46:34:6B:84:06:84:71:C1:5E:2D:AF:FE:A5:B5:06:54:3B:23
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019ED0127F773AE47DAF14F00276C24DA752
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/oiFGNGuEBoRxwV4tr_6ltQZUOyM.roa
Signing time: Tue 16 Jun 2026 10:55:33 +0000
ROA not before: Tue 16 Jun 2026 10:55:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198556
IP address blocks: 2a09:3f00:1002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:12:7f:77:3a:e4:7d:af:14:f0:02:76:c2:4d:a7:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jun 16 10:55:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a22146346b84068471c15e2daffea5b506543b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:ed:31:20:53:a9:1b:60:2e:2e:bb:68:60:
75:f1:57:da:e8:de:f8:6b:07:6d:0a:3f:86:5e:25:
92:f1:1f:5c:e2:9e:bb:58:c3:f5:0b:fa:34:92:5e:
7f:c1:0b:b6:00:7a:a8:26:28:5a:3b:2c:59:c7:75:
52:bd:a8:a4:8a:11:2f:86:bd:9d:5c:40:ce:8d:6c:
15:91:ab:cc:bf:79:97:25:e1:21:73:4b:d4:4a:6f:
72:4a:68:9c:ed:c5:b0:f6:72:08:30:2e:5f:8c:8a:
fd:57:6f:bc:30:c6:a4:c2:7b:67:0a:4a:21:48:4e:
b6:b6:a1:ac:d0:38:c3:8a:2d:86:2b:f1:8b:11:2d:
15:ad:37:1c:3e:36:27:be:58:01:0f:5a:0e:ea:b0:
9a:72:97:3c:f9:11:b7:4c:36:54:b6:16:46:56:e0:
43:fb:41:8a:2f:65:e6:99:f1:32:53:72:87:49:f4:
f6:67:02:d2:da:6b:c5:b2:92:61:f5:12:31:52:f0:
b5:7c:da:96:33:4f:bb:4f:d9:7d:e7:52:6f:d7:de:
69:81:00:ff:88:72:b9:eb:ec:c8:6a:6d:1c:4f:87:
51:75:00:7f:d9:7c:93:58:82:f0:4d:a9:4e:32:8a:
39:e6:6e:aa:a3:6f:b2:51:8e:2a:b1:61:ea:dd:b3:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:21:46:34:6B:84:06:84:71:C1:5E:2D:AF:FE:A5:B5:06:54:3B:23
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/oiFGNGuEBoRxwV4tr_6ltQZUOyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:1002::/48
Signature Algorithm: sha256WithRSAEncryption
09:c6:a4:f4:a4:6f:11:c8:b5:a9:80:23:d2:a0:fe:dc:2e:fb:
aa:4e:a1:27:00:1f:79:4c:c1:83:a1:12:e5:eb:16:65:61:a8:
cd:de:54:98:e7:b9:a3:12:d0:71:6e:14:3b:b6:ae:8b:62:ac:
50:14:dd:16:82:f8:5d:75:2f:45:9a:0c:20:57:fd:36:fb:cd:
ab:ba:73:4a:1e:98:5f:72:22:94:9a:53:e7:95:08:85:62:06:
64:83:be:d8:5f:f2:ce:23:52:9b:ae:e7:12:e8:6c:43:2a:36:
76:e2:81:27:33:96:8d:1a:85:5f:79:43:01:3c:7b:86:49:40:
dd:7a:4d:f7:d3:9c:4e:e1:c1:c7:f8:6b:af:bf:bc:ad:8a:3a:
ce:46:42:53:8d:0d:e2:1f:89:fe:75:72:21:b9:3e:a7:ed:83:
ab:6a:96:ba:3a:3a:6b:d0:68:e8:10:a1:97:87:4c:1a:0d:72:
6d:3d:46:bd:1d:6e:05:18:da:13:97:ba:c8:fe:3d:dc:d1:31:
16:5d:79:80:d9:f2:94:68:2d:f1:84:88:9d:96:4d:83:73:da:
bc:5c:5f:04:7a:b2:ed:27:3a:66:cc:3d:6d:f3:89:04:b2:d2:
d2:2c:ab:e2:95:33:d2:1d:23:2d:b3:a2:7d:5d:13:a3:42:9c:
a2:0e:83:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:26 2026 by rpki-client