Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/kewzQejI2PuQQ48DTjYy3Hxxw-4.roa
File: kewzQejI2PuQQ48DTjYy3Hxxw-4.roa (raw, json)
Hash identifier: 5ctDYIqcaSNU30YyHM4psQNfmg2U37/qusOKuo2Pyl8=
Subject key identifier: 91:EC:33:41:E8:C8:D8:FB:90:43:8F:03:4E:36:32:DC:7C:71:C3:EE
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01A10C5F53D4FA9547479C8EDEB3D366D156
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/kewzQejI2PuQQ48DTjYy3Hxxw-4.roa
Signing time: Mon 05 Oct 2026 14:02:16 +0000
ROA not before: Mon 05 Oct 2026 14:02:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218522
IP address blocks: 2a0d:d940:201e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:5f:53:d4:fa:95:47:47:9c:8e:de:b3:d3:66:d1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Oct 5 14:02:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91ec3341e8c8d8fb90438f034e3632dc7c71c3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:1a:54:50:45:af:51:b6:28:28:8c:95:bd:
bf:67:53:68:ea:4a:3f:3d:55:94:a0:a5:82:5c:e9:
73:29:9b:04:f1:32:7a:db:7e:d9:19:1a:35:12:70:
b6:34:77:25:0a:a3:42:fd:32:9e:07:2b:62:22:94:
01:50:2d:73:ea:0c:23:0d:3c:c1:f2:c2:4e:85:18:
85:bc:47:75:b5:bb:48:54:1e:87:de:ba:d3:34:ab:
2e:24:c3:10:80:99:51:ff:25:ef:d9:a0:b3:56:cd:
05:26:9a:d8:ba:ee:bf:c7:d3:d3:80:12:8d:18:50:
88:59:03:83:35:35:75:c9:e8:ff:22:31:1d:66:c9:
16:2f:41:52:15:55:3d:d0:b8:ff:32:f6:48:6b:99:
25:6d:e8:8e:d7:64:fa:2c:d1:bb:e6:43:ae:d1:86:
b5:2e:ae:ac:59:e8:4b:a2:e0:60:50:7b:d3:fa:06:
7b:bb:d0:f2:76:ab:17:4f:ec:c3:0e:eb:96:5c:9b:
a5:b2:95:ac:04:9e:cb:0b:8f:59:d2:2e:d4:1a:17:
53:e4:7a:aa:81:80:24:33:98:b6:cc:da:ba:cc:49:
94:36:8f:9b:70:52:5f:4a:77:e9:f3:88:9c:cc:03:
45:d9:ea:51:a0:13:5f:b4:8b:14:23:e9:fc:6d:fe:
31:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EC:33:41:E8:C8:D8:FB:90:43:8F:03:4E:36:32:DC:7C:71:C3:EE
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/kewzQejI2PuQQ48DTjYy3Hxxw-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:201e::/48
Signature Algorithm: sha256WithRSAEncryption
06:7e:82:50:96:23:62:57:58:37:9d:57:63:fa:00:9b:53:37:
4a:a7:67:60:71:0a:95:bf:fc:36:c4:f0:4f:5d:ba:ae:63:95:
2f:17:58:4b:c3:e3:dc:4d:5f:f8:2e:14:c4:4c:70:7d:77:7c:
d3:78:cf:ac:cb:48:13:9d:63:34:ad:f5:8d:52:ad:32:19:0c:
e3:58:b4:d0:39:2a:97:35:b6:f5:31:a4:7a:83:fb:46:b9:fd:
d8:1b:2e:9e:59:e5:2f:be:96:a0:d0:30:f3:28:0b:ba:60:c1:
62:f2:cd:fc:48:b5:42:36:f5:8b:7a:9f:59:e6:91:73:f7:10:
a8:25:04:cd:30:7b:c3:2c:4d:2e:ae:31:88:da:31:1f:ab:51:
1f:32:21:58:cb:f5:6b:b0:91:8d:34:13:35:e9:f1:9d:ef:31:
3a:88:44:62:95:b9:3f:53:cc:5f:75:d3:ce:fd:4c:66:0f:da:
93:dd:14:2f:bb:0a:89:84:dd:fd:dd:74:19:ce:65:b3:af:89:
37:75:60:d7:b2:a8:3e:0d:ea:81:17:ec:63:72:29:b2:96:92:
ac:d2:16:93:ba:08:21:01:25:84:49:c3:c9:12:d6:a8:cf:76:
a5:32:1a:8d:8f:ac:22:82:09:03:d2:ed:13:d1:49:cd:06:ca:
2d:a2:f3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:42:56 2026 by rpki-client