Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/RGb-rCoDknImAicpKoX_vtBq9Fs.roa
File: RGb-rCoDknImAicpKoX_vtBq9Fs.roa (raw, json)
Hash identifier: UkIIBaoP+gfi07Ufjwc/M1TNIrnyxcH9oHFTQ2095Lc=
Subject key identifier: 44:66:FE:AC:2A:03:92:72:26:02:27:29:2A:85:FF:BE:D0:6A:F4:5B
Certificate issuer: /CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1
Certificate serial: 019C8AD391CCE9C4FC5035EEAEDE19F8B218
Authority key identifier: 9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/RGb-rCoDknImAicpKoX_vtBq9Fs.roa
Signing time: Mon 23 Feb 2026 14:07:27 +0000
ROA not before: Mon 23 Feb 2026 14:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139791
IP address blocks: 2a0a:d681::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8a:d3:91:cc:e9:c4:fc:50:35:ee:ae:de:19:f8:b2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1
Validity
Not Before: Feb 23 14:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4466feac2a039272260227292a85ffbed06af45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:71:9a:86:ea:1a:88:85:74:92:21:f5:da:
13:fe:95:9c:f0:ed:55:94:4b:62:fa:7a:c1:59:15:
79:fb:e2:19:a8:e6:41:1a:11:ca:9e:f6:33:51:2e:
e0:ab:c6:58:99:0a:73:bf:9b:a2:90:f8:3e:97:3b:
9c:25:4b:c4:cc:7d:ba:8a:57:35:e6:c1:7b:d6:3f:
07:9e:5c:87:4c:eb:2b:00:57:c0:62:fe:7f:e2:de:
9d:61:51:38:74:a5:90:a9:fd:a4:68:ec:99:92:8d:
c6:96:3d:6f:0a:12:ac:9e:89:e2:4d:b2:0f:a6:7d:
00:e4:09:2d:63:eb:05:73:44:e4:bd:91:17:f6:44:
4e:61:35:c6:ef:82:9b:5b:8a:b4:63:9c:ae:4c:64:
3b:97:76:bf:93:54:48:da:f0:2c:90:da:7f:82:42:
5d:e6:f3:cb:18:b5:d8:50:b3:99:5a:f2:0a:33:f4:
eb:9d:6f:df:a9:cc:4b:76:58:80:5f:31:e9:e6:63:
e5:4c:60:41:7f:56:24:5a:86:d1:ed:05:ca:ab:da:
3e:1b:58:b4:ee:c2:75:17:02:00:fa:38:38:3f:1e:
f8:c0:d7:ee:d1:84:4d:4a:ea:df:40:15:5a:3e:f4:
c3:d0:5b:76:df:26:47:b4:1b:4a:04:02:38:43:c1:
66:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:66:FE:AC:2A:03:92:72:26:02:27:29:2A:85:FF:BE:D0:6A:F4:5B
X509v3 Authority Key Identifier:
keyid:9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/RGb-rCoDknImAicpKoX_vtBq9Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d681::/32
Signature Algorithm: sha256WithRSAEncryption
42:d0:06:bc:a6:29:f3:b9:86:35:cf:37:ed:8f:b3:63:f1:06:
b8:c7:ab:61:bb:31:12:b6:de:ae:5d:6e:2b:fe:79:e4:e5:87:
cd:8b:22:61:d7:3e:35:62:00:b8:49:56:72:1b:25:35:03:2f:
cf:ee:5f:54:7c:65:0a:da:db:ef:03:55:a4:96:a5:3a:bb:cd:
38:02:ad:58:ab:1f:44:74:1a:12:73:b7:5c:b8:3f:64:1b:8a:
49:52:a9:53:7e:40:c3:ce:5d:f3:dd:e3:0e:a3:c0:48:57:c1:
30:fb:83:9e:bb:a9:55:95:32:63:6b:e8:02:66:27:93:fa:fd:
28:11:d3:92:e6:d3:31:3c:4c:4d:4d:f7:37:38:ea:69:08:25:
8c:cd:cb:e2:55:79:4f:80:6f:de:cd:9a:4f:3e:25:94:0e:5a:
b6:7e:54:38:14:be:e7:8e:61:90:04:f5:3c:94:fc:9b:83:a0:
06:60:99:77:a5:4f:84:78:c7:41:12:df:9a:df:ed:30:8b:50:
b4:c3:ff:33:6c:74:96:5f:a6:71:be:bf:65:1b:da:d3:ba:79:
1f:69:d5:b6:09:1e:a7:65:5e:61:ac:e7:30:db:59:cb:ad:f3:
ff:3a:18:91:da:df:c2:67:4a:fd:9e:18:7d:cc:33:6a:c4:7b:
4d:94:1b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:18 2026 by rpki-client