Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/0n3k1plZ7gspLcfGB77auONj9NQ.roa
File: 0n3k1plZ7gspLcfGB77auONj9NQ.roa (raw, json)
Hash identifier: GZay3LMOHeft1uDyAbnIiPZLbpCesTcRpivEg0C5JRc=
Subject key identifier: D2:7D:E4:D6:99:59:EE:0B:29:2D:C7:C6:07:BE:DA:B8:E3:63:F4:D4
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019FA94143F004C568C5075CAFDB521D25E8
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/0n3k1plZ7gspLcfGB77auONj9NQ.roa
Signing time: Tue 28 Jul 2026 15:04:14 +0000
ROA not before: Tue 28 Jul 2026 15:04:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219443
IP address blocks: 2a0d:d940:180::/44 maxlen: 48
2a0d:d940:90b2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:41:43:f0:04:c5:68:c5:07:5c:af:db:52:1d:25:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jul 28 15:04:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d27de4d69959ee0b292dc7c607bedab8e363f4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:05:d7:2d:e8:c6:2f:75:67:58:fc:cb:48:89:
14:b2:ef:ca:c2:32:b7:c9:8a:43:89:51:25:54:28:
e4:29:30:02:97:80:4e:58:99:a8:c1:9b:dc:1a:4c:
98:45:b5:d7:a8:59:3c:05:72:d9:37:af:d5:18:76:
1d:8f:d1:62:f3:de:d8:c3:43:62:35:d2:cb:68:90:
5e:a0:b4:00:62:f2:26:c8:a4:e2:94:3f:3b:b8:07:
59:1f:0e:aa:e9:3c:dc:d7:cd:b9:9a:b8:16:3e:73:
59:6e:eb:79:9e:68:4a:5c:44:3a:38:bb:e9:60:07:
ac:75:cd:d8:95:88:eb:99:9f:a3:d3:59:dc:8d:ca:
99:ce:97:bd:b9:5d:e0:17:a0:6f:61:47:c2:c2:7f:
87:a6:86:62:51:0c:de:69:f0:95:03:c5:23:9a:97:
cd:4e:55:04:ed:f5:83:62:64:37:f1:9b:6a:25:d2:
17:00:88:42:32:46:c1:3c:a1:f0:67:28:4b:6e:5b:
cf:82:60:9f:11:5a:dc:01:97:31:c3:7b:6a:f1:1a:
16:ca:f5:10:cd:66:60:99:58:7d:d8:2e:fc:14:c4:
85:99:c3:aa:f5:19:ac:2b:27:51:8e:f5:cb:bb:9c:
70:e9:31:0f:82:50:df:a2:b4:5f:dc:5d:be:1a:a7:
94:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7D:E4:D6:99:59:EE:0B:29:2D:C7:C6:07:BE:DA:B8:E3:63:F4:D4
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/0n3k1plZ7gspLcfGB77auONj9NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:180::/44
2a0d:d940:90b2::/48
Signature Algorithm: sha256WithRSAEncryption
c9:d9:c1:15:0e:f5:64:60:b6:bf:65:b8:6d:65:57:e6:c7:90:
f4:62:a8:3d:c7:15:7a:5e:69:41:64:72:2f:68:9f:c4:e4:49:
dc:e9:35:f3:fc:8a:18:90:81:0a:e3:69:17:d8:7d:f6:ff:02:
1a:3f:c4:0c:0f:55:6c:d6:b2:25:9e:ae:73:32:93:be:5f:18:
e9:7c:6b:1a:55:87:48:98:3b:99:c7:51:d3:26:0a:50:52:45:
94:c0:ed:f9:72:ee:ec:6f:e2:67:0d:65:b4:19:59:ce:a9:bd:
1b:23:02:ea:80:ba:5d:d7:15:1c:a8:76:e8:ad:bf:b0:41:96:
24:38:08:7d:f0:cb:9f:b5:fe:00:66:71:92:e9:15:ed:78:08:
dd:8d:31:47:0d:66:9c:28:92:e2:49:a4:2f:dd:88:50:ae:aa:
8f:c8:81:b6:e7:7e:5b:42:3c:46:ef:ce:ca:76:35:a5:d8:b2:
f0:4c:e3:1f:39:cf:e0:c3:8b:ae:50:75:f4:c5:dd:ea:8c:02:
b0:bc:4d:28:8a:8a:44:87:82:8b:b4:a2:fd:c3:9f:db:ae:01:
64:b8:15:a9:bd:86:fa:b3:6b:0d:47:d5:24:b0:7e:68:6a:ab:
1d:88:02:49:ed:40:96:81:a1:48:a2:c8:f1:17:7a:85:5c:44:
0e:71:81:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:06:43 2026 by rpki-client