Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/f2WIxHyieC-WDvm2YMWBAzMy0VQ.roa
File: f2WIxHyieC-WDvm2YMWBAzMy0VQ.roa (raw, json)
Hash identifier: eEdlF03+KQSxf2xdCUsV69cYsUwb0W0kD/xuMuJtIeo=
Subject key identifier: 7F:65:88:C4:7C:A2:78:2F:96:0E:F9:B6:60:C5:81:03:33:32:D1:54
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019D458EC5654E446614EC4C6C474B5D30F8
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/f2WIxHyieC-WDvm2YMWBAzMy0VQ.roa
Signing time: Tue 31 Mar 2026 20:21:17 +0000
ROA not before: Tue 31 Mar 2026 20:21:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200386
IP address blocks: 2a0d:d940:2010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:45:8e:c5:65:4e:44:66:14:ec:4c:6c:47:4b:5d:30:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Mar 31 20:21:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f6588c47ca2782f960ef9b660c581033332d154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:77:a7:e4:c4:31:1a:a7:a0:2a:81:c7:36:e0:
cd:36:f7:84:61:dc:da:ac:f3:18:98:33:3f:b4:d7:
75:9e:30:68:8b:7c:3b:5d:92:9d:84:70:52:b5:1f:
e6:bc:0b:6d:c0:16:1f:ae:1b:d0:69:65:9c:4a:a3:
e9:2c:08:73:68:69:7b:b1:8f:e6:d9:89:fd:4c:97:
ff:98:97:79:0e:5e:c9:8a:8b:26:1b:77:7c:af:d4:
11:48:af:42:a7:86:99:c4:f3:d5:d4:b2:b3:0b:5e:
d6:6b:9b:29:ba:d7:39:a4:b9:c0:c6:fb:96:a1:6e:
f6:18:17:79:8d:46:fc:e5:5d:71:21:41:4d:1e:d0:
a7:a1:81:bf:86:72:ce:7b:f8:74:11:3d:e5:dd:2d:
1c:7a:9d:8b:c0:32:85:81:88:dd:ba:8f:8d:ce:6d:
7f:fb:1e:de:bf:86:52:73:fa:55:6f:c7:8c:5d:7d:
36:51:f2:e2:ee:47:e9:91:1a:5f:c2:14:ab:ca:00:
ea:26:52:a6:a6:0a:73:0c:54:f4:4e:bb:9c:b5:69:
58:d1:05:ce:30:86:68:b6:4c:32:3a:1d:6d:02:75:
2d:d5:bc:1e:ec:26:6c:48:84:17:2c:b5:46:9e:6b:
3c:f8:0f:3e:3b:32:32:d3:ac:e6:d9:32:83:b5:62:
8d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:65:88:C4:7C:A2:78:2F:96:0E:F9:B6:60:C5:81:03:33:32:D1:54
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/f2WIxHyieC-WDvm2YMWBAzMy0VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:2010::/48
Signature Algorithm: sha256WithRSAEncryption
04:6b:77:16:c6:6d:d3:e3:51:05:7c:a6:cd:14:13:a2:26:8d:
22:26:3f:28:5c:d9:b8:f4:40:11:b5:0d:ee:46:38:94:05:0f:
fb:36:d1:c2:4a:f0:40:48:5e:02:bc:23:19:2b:c7:e2:23:28:
d4:f1:9d:34:df:79:fa:39:b9:5c:db:b6:54:13:a2:3a:7d:bf:
dd:a2:97:c3:2b:b0:07:22:ea:ad:68:56:25:be:84:00:81:33:
f6:0b:1c:df:90:eb:26:80:39:6f:b6:90:d3:a4:0e:ab:fc:4e:
54:29:83:f0:4b:dd:a7:6e:29:52:27:61:ae:e3:5d:a8:7f:a0:
07:de:80:f1:c0:af:88:eb:d3:f3:1b:c7:88:5a:cc:75:1e:61:
87:84:cb:a5:e7:37:4c:62:52:07:06:65:9f:93:29:3e:0f:35:
47:45:f3:ec:d8:ec:91:06:78:10:b7:29:71:56:1c:26:2c:a3:
bf:34:9d:54:00:b4:3b:08:e0:6a:33:df:b6:08:67:16:be:7a:
5b:9a:09:af:93:e6:ae:61:fb:72:1f:01:54:a0:b0:18:98:18:
05:28:21:8e:e8:b4:57:92:75:21:d4:4f:cb:ff:10:ae:74:cc:
5b:44:af:03:e9:16:da:b6:c4:fe:3f:90:10:76:51:5f:86:af:
fb:e1:4f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:56 2026 by rpki-client