Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/v42bp1PwiBUF3UxHULZetgeyJPo.roa
File: v42bp1PwiBUF3UxHULZetgeyJPo.roa (raw, json)
Hash identifier: InHAKyH9kcomFnsfbcPfrsc8+UUyChs4aXFWsykvCkY=
Subject key identifier: BF:8D:9B:A7:53:F0:88:15:05:DD:4C:47:50:B6:5E:B6:07:B2:24:FA
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01A09F7B85BB7B63D8182DBF6D6305977629
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/v42bp1PwiBUF3UxHULZetgeyJPo.roa
Signing time: Mon 14 Sep 2026 10:34:27 +0000
ROA not before: Mon 14 Sep 2026 10:34:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200954
IP address blocks: 2a0d:d940:500::/40 maxlen: 48
2a0d:d940:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:7b:85:bb:7b:63:d8:18:2d:bf:6d:63:05:97:76:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Sep 14 10:34:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf8d9ba753f0881505dd4c4750b65eb607b224fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:6c:9a:d9:b9:00:a4:c3:a7:69:03:b9:8d:
5e:cf:eb:fb:85:73:0b:a7:a6:ba:98:aa:0e:08:16:
37:15:9e:f2:53:54:c3:fc:77:82:58:8a:13:28:d5:
ed:81:d0:63:c8:ab:cc:4b:a4:3f:4d:2a:59:64:2b:
10:ae:93:9c:67:08:b5:69:c2:bb:2d:76:59:3b:48:
72:b4:66:87:32:85:71:31:71:da:66:e9:f4:56:0e:
f1:e9:a4:f6:c3:3d:d2:ea:b2:a5:27:be:39:4f:e7:
31:31:36:a0:95:d5:98:b5:0b:d3:be:bd:f5:10:bb:
98:33:b0:8a:ef:08:9d:fc:7f:30:fa:fb:67:22:ef:
31:9b:68:23:2d:64:d3:66:d8:6b:88:5e:17:aa:4d:
bd:b6:d5:94:97:34:e6:a6:d9:b4:6e:5e:b6:86:5b:
d3:f4:6a:38:0c:89:bd:6b:56:eb:be:8a:d8:5c:25:
0a:51:91:32:67:dd:b9:dd:4a:07:0b:58:bb:85:47:
05:0d:d1:52:43:3e:83:fb:d0:81:8a:51:09:14:2b:
0f:5b:f9:97:2b:ff:e3:50:67:c0:48:83:49:da:e6:
f3:83:b0:ad:c1:51:a3:44:f9:f9:58:34:50:ed:49:
b2:46:bf:f4:3d:bf:3c:95:c7:f5:41:ec:c9:8e:32:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8D:9B:A7:53:F0:88:15:05:DD:4C:47:50:B6:5E:B6:07:B2:24:FA
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/v42bp1PwiBUF3UxHULZetgeyJPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:500::/40
2a0d:d940:b000::/40
Signature Algorithm: sha256WithRSAEncryption
e7:29:eb:c2:42:70:98:7f:df:0f:78:d3:bb:a6:03:fb:0c:95:
d0:69:94:45:2b:95:23:76:51:5f:81:ec:5f:1e:ec:bb:48:cf:
7d:b1:00:4f:40:03:29:ee:cb:d0:e3:9c:94:a8:0e:38:79:8f:
56:67:6e:7b:3f:90:dc:cf:c7:86:df:4a:fe:c0:38:2c:5a:af:
7d:db:23:9b:c7:6e:a4:11:74:ae:e6:db:f7:6a:b4:5f:6e:ca:
82:ea:3a:d1:98:3f:e5:ec:66:b6:6a:93:da:f1:19:c8:ab:bb:
d6:cf:28:ad:f5:0a:0e:82:5a:6d:e5:f6:c4:9f:81:61:fb:98:
c9:46:d5:a2:8a:5c:c1:4b:eb:b8:a4:90:64:65:fe:e6:74:d3:
43:af:34:b6:68:eb:54:32:e7:01:c6:e5:9a:0e:6f:56:15:c1:
31:6d:80:45:d7:aa:aa:6b:af:b0:b1:ba:d9:29:ac:dd:a7:4f:
de:03:1e:71:3d:f6:6f:8c:6c:ea:11:2f:50:0f:d9:71:a7:a5:
1b:cb:23:4c:ef:b1:8d:17:e0:ce:bd:24:a0:a0:f0:e4:f3:cd:
e1:8b:75:ad:de:5b:6a:36:a7:8f:81:e3:fe:3d:5d:64:70:e7:
3a:e1:42:60:8a:5e:33:13:39:48:3c:c1:a3:e4:f6:15:30:1d:
54:7e:14:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:37:08 2026 by rpki-client