Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Ond-2EfuUDag_090_k1iRyqtAHQ.roa
File: Ond-2EfuUDag_090_k1iRyqtAHQ.roa (raw, json)
Hash identifier: QE68dQiDVA1YusidapSDvPNV28+YMFt9VyS22PD2fak=
Subject key identifier: 3A:77:7E:D8:47:EE:50:36:A0:FF:4F:74:FE:4D:62:47:2A:AD:00:74
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01A1299A395C18122B5E5B6BE48461444341
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Ond-2EfuUDag_090_k1iRyqtAHQ.roa
Signing time: Sun 11 Oct 2026 06:15:35 +0000
ROA not before: Sun 11 Oct 2026 06:15:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200954
IP address blocks: 2a0d:d940:500::/40 maxlen: 48
2a0d:d940:b000::/40 maxlen: 48
2a0d:d940:b100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:9a:39:5c:18:12:2b:5e:5b:6b:e4:84:61:44:43:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Oct 11 06:15:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a777ed847ee5036a0ff4f74fe4d62472aad0074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:ea:5a:c6:3e:0b:82:a4:8f:79:80:10:3b:
fb:f3:ab:2c:20:5b:07:5e:79:07:b9:80:73:df:53:
e5:c1:81:af:a8:c9:39:a8:29:7c:4e:af:24:f3:24:
f9:50:cd:0d:90:f3:f0:df:56:1d:0a:06:b3:48:84:
af:64:95:c7:70:ee:5d:75:29:14:b2:8e:1b:87:dd:
81:2e:fe:ae:8a:a8:89:73:30:93:38:7b:2c:9a:3b:
1e:97:a1:f7:32:1b:1f:3c:86:64:eb:4a:ec:aa:05:
9a:69:ff:f8:a9:37:d8:d7:20:e0:8f:18:61:cc:58:
0d:f9:69:78:11:0d:25:be:12:3a:ec:2b:b1:54:75:
95:4b:00:cc:28:b1:b1:7f:47:a5:f1:c5:45:87:72:
1f:67:da:37:0d:3a:60:67:aa:a5:04:6e:63:c8:ce:
12:b9:01:e4:4d:7c:17:08:98:15:dd:cb:eb:14:2d:
95:cd:d4:15:31:cc:3a:60:24:1b:33:83:37:7d:a0:
47:48:06:61:33:b9:d1:07:38:e1:90:06:4e:81:29:
eb:15:aa:3d:e6:9b:ae:ba:85:53:24:c8:78:51:85:
9f:29:cb:86:f2:a7:fc:54:31:fe:a4:72:f3:dc:76:
b1:a5:8d:a3:46:90:ab:9b:dd:9f:7d:bf:da:5e:83:
9e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:77:7E:D8:47:EE:50:36:A0:FF:4F:74:FE:4D:62:47:2A:AD:00:74
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Ond-2EfuUDag_090_k1iRyqtAHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:500::/40
2a0d:d940:b000::/39
Signature Algorithm: sha256WithRSAEncryption
24:55:67:02:4e:39:b8:7f:11:78:51:73:26:e0:3f:74:e9:00:
34:24:9e:15:7b:7a:09:ac:1d:34:d0:a2:59:29:e3:ed:91:4e:
95:17:c9:f3:8e:0f:f6:eb:13:61:18:3d:5b:a4:53:5a:50:ba:
5c:e3:73:aa:48:8a:2e:9c:08:06:d6:97:c5:3d:09:64:86:48:
1a:19:32:3c:f4:2e:54:1a:77:0d:86:2b:5c:4b:c3:8d:f8:39:
20:4b:75:42:25:19:4c:c4:55:22:d9:4f:55:e9:48:3e:a2:0f:
a5:8e:aa:50:dd:a4:92:3f:64:de:4c:d7:a8:ff:1a:47:a6:f3:
26:ec:d1:7d:36:7d:f0:a1:26:a4:b0:d5:b9:1f:ad:47:2f:c9:
5e:87:3d:85:61:e5:17:ff:a9:49:fb:31:ff:ee:30:9a:72:5c:
d7:0c:bd:3f:d8:50:a3:a9:68:04:a0:22:3e:6e:86:df:67:0d:
77:92:1a:0c:8d:5d:86:6c:be:e3:30:24:9f:2a:26:06:61:0b:
8e:a5:bd:1f:6e:d7:72:87:f7:2a:8c:3e:12:f3:50:3e:14:21:
81:1b:95:fa:19:0d:11:48:85:0f:9d:d8:ba:75:db:6e:92:f8:
a9:5c:46:7a:a1:61:df:ae:dc:37:5b:e8:f0:c0:81:4e:b0:6f:
00:b0:0a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:41:53 2026 by rpki-client