Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/g9UJbML95L_TyHitniLbb9E7L0g.roa
File: g9UJbML95L_TyHitniLbb9E7L0g.roa (raw, json)
Hash identifier: xAbi3dR1ksPLZFCaHva+G7hmMyWiUrNdlBOJzZB47WI=
Subject key identifier: 83:D5:09:6C:C2:FD:E4:BF:D3:C8:78:AD:9E:22:DB:6F:D1:3B:2F:48
Certificate issuer: /CN=0ba068483acbc96a31e28bcda54bbeafe3482d19
Certificate serial: 019B7A5B4F27E048DCC89D88568BD1422E15
Authority key identifier: 0B:A0:68:48:3A:CB:C9:6A:31:E2:8B:CD:A5:4B:BE:AF:E3:48:2D:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/g9UJbML95L_TyHitniLbb9E7L0g.roa
Signing time: Thu 01 Jan 2026 16:19:22 +0000
ROA not before: Thu 01 Jan 2026 16:19:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204345
IP address blocks: 2001:678:634::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:4f:27:e0:48:dc:c8:9d:88:56:8b:d1:42:2e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba068483acbc96a31e28bcda54bbeafe3482d19
Validity
Not Before: Jan 1 16:19:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83d5096cc2fde4bfd3c878ad9e22db6fd13b2f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:49:cc:27:0e:6f:ec:c9:b1:15:4e:cb:23:e6:
4c:47:88:59:2e:3d:cd:d8:7b:66:ca:0b:09:69:cd:
18:b5:6c:b9:e4:12:0e:bb:d0:6e:78:a7:d6:b8:45:
b4:6f:c4:67:bf:e6:5e:9b:52:61:12:8e:f5:bd:29:
47:b4:b7:5b:7b:6e:53:0f:c9:c1:c6:bf:0d:2f:86:
9d:fc:99:53:9c:c5:01:79:58:3b:63:b5:44:45:2f:
80:15:a4:01:12:fd:10:0b:d8:0d:b6:1e:f9:ea:c1:
3f:57:88:45:0a:67:bd:6d:f2:51:45:e8:ad:dc:e3:
25:e8:ea:63:63:32:05:c3:f4:38:e0:12:7c:c4:a4:
77:0f:51:79:9a:da:9d:87:aa:fd:db:e5:de:ed:92:
61:da:a4:e1:84:ef:59:fe:6c:7d:cf:c8:7f:97:1a:
14:f2:0b:be:e7:e4:fb:c5:4d:7d:3e:42:98:24:9f:
2a:53:69:0c:c3:c2:80:02:60:71:02:8f:93:54:b0:
e6:91:fc:cc:b2:52:f8:35:78:d1:fc:0d:77:91:c1:
39:2e:c5:ec:43:6a:99:e1:0a:6a:57:f6:d3:20:27:
11:2f:27:c5:c3:73:2a:51:e2:4c:65:82:9a:7c:42:
6d:be:6e:17:69:6f:c8:be:5f:0f:88:0e:29:e2:a0:
91:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D5:09:6C:C2:FD:E4:BF:D3:C8:78:AD:9E:22:DB:6F:D1:3B:2F:48
X509v3 Authority Key Identifier:
keyid:0B:A0:68:48:3A:CB:C9:6A:31:E2:8B:CD:A5:4B:BE:AF:E3:48:2D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/g9UJbML95L_TyHitniLbb9E7L0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:634::/48
Signature Algorithm: sha256WithRSAEncryption
7e:44:19:22:37:a7:bd:7d:f7:2a:2d:a2:5f:7c:e9:9a:f5:24:
10:5f:4d:b8:ab:40:b6:9e:e9:87:92:2d:af:b5:c4:89:c7:82:
f8:14:0d:91:36:76:ec:84:34:41:6f:68:c4:4b:56:57:bd:75:
9e:7f:59:15:0f:90:76:de:96:f3:c6:ec:5d:ac:d4:a0:35:01:
a4:8b:41:d0:31:1d:eb:ed:cb:1b:88:cc:37:a3:5c:e3:83:30:
6d:8e:d7:9f:a1:04:5c:cb:8e:0f:27:08:cf:cc:22:7a:89:b8:
dd:2c:d7:cb:83:7a:03:7f:21:89:e9:2f:0b:c6:fb:c8:5d:0e:
9d:01:2d:4a:e0:ed:87:9d:66:cd:38:c6:8f:be:bf:63:4a:84:
09:40:be:aa:36:77:85:8a:61:1e:72:6e:3a:f9:d0:53:24:08:
fe:be:e9:10:bc:1e:76:68:de:5d:de:3d:ac:97:d2:d9:65:ee:
80:44:5e:cc:3a:26:71:c1:c0:4c:c1:ae:1f:69:50:d7:03:26:
d3:b2:75:37:60:e2:71:e6:56:d1:0f:e1:14:fe:19:c2:2e:8b:
29:a2:cd:7a:9a:44:10:36:99:1d:72:42:c3:5f:e3:bf:ce:cf:
d8:86:e4:75:11:60:5c:fc:78:74:40:53:ed:27:14:03:28:72:
d2:ed:68:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:52:27 2026 by rpki-client