Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/hIhlsApAJdLLJuYqpM18UC8VDU8.roa
File: hIhlsApAJdLLJuYqpM18UC8VDU8.roa (raw, json)
Hash identifier: w0KEsHHYOpSFRUO7iJHRkDSVLL6XrIJc5yAOLwz3W4E=
Subject key identifier: 84:88:65:B0:0A:40:25:D2:CB:26:E6:2A:A4:CD:7C:50:2F:15:0D:4F
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019FA8651EA9E8FCE8B50C4D5E4495D689F9
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/hIhlsApAJdLLJuYqpM18UC8VDU8.roa
Signing time: Tue 28 Jul 2026 11:03:46 +0000
ROA not before: Tue 28 Jul 2026 11:03:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219123
IP address blocks: 2a0d:d940:2018::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:65:1e:a9:e8:fc:e8:b5:0c:4d:5e:44:95:d6:89:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jul 28 11:03:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=848865b00a4025d2cb26e62aa4cd7c502f150d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:f3:b2:93:4f:ac:58:78:57:3a:bd:4a:fd:
81:7e:b5:d0:ab:46:f4:9e:0a:c0:a9:10:fc:df:2f:
10:fc:e4:79:6f:27:25:ad:f1:26:9b:92:4b:c7:5f:
dc:7c:72:06:b2:0f:7b:81:2f:a0:7c:fd:dd:6b:d2:
06:a5:18:80:2f:da:56:c8:ba:f2:c7:1b:2a:80:5b:
26:5f:fd:90:46:a4:35:1c:84:e5:a7:ff:3f:2f:03:
2d:a6:7e:82:ef:04:ba:a8:55:ce:28:6d:aa:79:48:
43:fd:17:1b:f2:ba:9d:76:d1:6b:1a:cd:9f:2e:90:
0f:51:75:bf:92:1e:4a:5d:dc:5d:41:8f:e2:ae:e9:
a6:fa:c2:ee:6a:19:de:be:80:15:8c:66:f2:b8:f4:
8c:4d:12:b8:ef:fd:59:23:54:4d:fc:35:62:28:5a:
9a:25:95:ee:88:73:53:79:41:17:4e:f1:bc:69:bb:
25:4c:f7:b2:9d:19:62:ff:78:e2:8f:ce:65:3e:61:
d3:a9:30:32:cb:ea:88:26:82:27:6c:80:a5:2f:f8:
fe:17:31:70:63:85:a2:c8:59:17:36:68:84:84:cf:
42:c9:d7:2c:fd:84:63:11:2c:be:5a:f9:6b:7a:d0:
81:ca:a1:95:a8:0b:ff:7d:7c:bd:c5:b1:d0:70:7e:
85:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:88:65:B0:0A:40:25:D2:CB:26:E6:2A:A4:CD:7C:50:2F:15:0D:4F
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/hIhlsApAJdLLJuYqpM18UC8VDU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:2018::/48
Signature Algorithm: sha256WithRSAEncryption
c9:f6:6d:ff:4d:6f:56:0f:e3:7f:71:6f:c0:da:47:32:1a:5a:
8a:9c:e5:e1:8a:53:8a:ac:7d:30:a0:d4:f9:ee:5d:92:8e:5f:
90:b7:09:46:fe:3b:99:73:8c:7f:61:3d:1c:b9:5e:23:ea:43:
bb:4c:a9:dd:6b:35:5e:8b:1e:15:38:1d:30:79:b2:92:5e:4a:
c2:ee:3c:6f:c3:12:b7:43:bb:c0:fd:7c:ec:7a:70:c3:47:81:
6a:1a:94:ad:70:9b:4c:09:bf:44:bb:15:04:3a:26:12:a8:35:
82:46:1b:67:40:68:1f:fe:ce:8e:fc:63:89:87:7c:70:cd:1f:
ee:cb:13:cf:8d:ca:42:07:1b:f8:4d:b2:46:f1:8c:45:d3:06:
73:b9:76:f0:53:3c:b5:75:42:1b:48:d0:1f:2e:a4:e9:66:a4:
b7:78:6e:f2:59:b7:c0:81:e4:4e:9f:24:fb:72:f3:a1:93:aa:
17:c7:94:97:48:8a:d3:b6:79:57:7b:8b:b0:ca:da:1c:e6:72:
74:24:88:bc:01:81:a5:35:40:6f:71:92:df:43:24:b5:ff:4d:
4c:54:56:64:0b:0f:96:ad:eb:37:f8:99:11:0b:60:95:3c:9c:
83:21:9c:d9:32:f0:a9:93:23:28:27:d8:88:fe:de:31:7e:5b:
26:80:30:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:37:21 2026 by rpki-client