Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/C0gLDzEON7GbUuqeqStfjnIBp_k.roa
File: C0gLDzEON7GbUuqeqStfjnIBp_k.roa (raw, json)
Hash identifier: kW2ilQ40sXgngeB19vuaQAEZ0a+UVe7vAL02vYsHhxI=
Subject key identifier: 0B:48:0B:0F:31:0E:37:B1:9B:52:EA:9E:A9:2B:5F:8E:72:01:A7:F9
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 019D71F7D374F5980547AEFB07CC9DF4033F
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/C0gLDzEON7GbUuqeqStfjnIBp_k.roa
Signing time: Thu 09 Apr 2026 11:19:20 +0000
ROA not before: Thu 09 Apr 2026 11:19:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 2a09:f000::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:f7:d3:74:f5:98:05:47:ae:fb:07:cc:9d:f4:03:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Apr 9 11:19:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b480b0f310e37b19b52ea9ea92b5f8e7201a7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:61:10:b0:b5:7b:af:5d:71:fe:e1:66:86:4d:
a6:09:e8:97:e4:58:3b:15:0d:04:de:c8:e2:12:0e:
fd:86:ff:25:b5:1d:b6:c0:67:d2:ad:55:69:56:25:
19:e5:cb:c4:eb:da:c2:e8:df:46:61:71:b0:fa:77:
8c:03:4f:e4:ab:9c:a7:65:b5:b5:4a:ee:f3:45:34:
f4:4b:a6:b9:42:9e:b1:6e:c5:b4:4d:da:3d:db:1a:
85:cf:38:51:77:de:28:e8:90:99:04:e2:96:cf:08:
01:67:ab:ea:cb:10:3f:2e:46:e2:57:b2:3b:8e:51:
86:a0:ee:09:7a:90:aa:02:0e:3f:f5:74:06:70:4e:
d6:45:8b:4c:1c:7a:d1:73:59:88:a7:97:ea:45:44:
6a:2a:c4:97:d1:18:21:39:06:b0:6b:4e:a4:42:ff:
e7:fa:88:11:58:5d:d7:c8:b0:eb:69:5f:0e:95:56:
b9:6c:e7:f2:f5:c7:11:5a:91:6c:00:4e:d5:de:09:
57:38:97:cd:65:4c:12:71:97:89:e0:cf:c2:3e:52:
fe:b9:ca:62:c2:15:07:22:be:bf:44:50:2f:a6:df:
fa:f5:ed:ca:2b:e2:d4:58:db:35:37:5e:3d:a9:5a:
0e:b6:ea:02:86:5e:38:25:4f:c1:df:f5:c3:65:b8:
82:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:48:0B:0F:31:0E:37:B1:9B:52:EA:9E:A9:2B:5F:8E:72:01:A7:F9
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/C0gLDzEON7GbUuqeqStfjnIBp_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:f000::/29
Signature Algorithm: sha256WithRSAEncryption
3c:d7:d5:26:21:3f:2d:7f:b6:41:7f:1b:21:7d:06:ad:12:b5:
23:1a:3d:71:54:7f:54:b4:96:42:27:dc:e7:ec:59:d6:c6:67:
d0:14:f2:4e:01:9f:2a:49:69:3f:80:e9:e0:8e:48:37:cc:e1:
ec:6f:ad:52:78:2f:42:17:e8:f1:e9:71:87:1c:44:7e:83:af:
2b:66:69:1c:87:a3:8d:17:d1:a6:3f:8f:88:18:a1:1a:b9:83:
4f:0d:76:05:4c:54:3c:ab:26:37:42:36:a2:8c:03:f8:da:56:
64:de:3b:07:fb:bf:8d:bc:aa:24:35:a2:e6:dd:9b:f0:82:09:
90:39:8a:8c:4b:16:a4:39:30:23:ee:52:17:15:85:9f:bd:ae:
24:0a:e1:30:82:76:3c:f0:b9:9c:8e:a1:3a:f3:18:2a:b0:f3:
ac:47:d8:1b:17:f8:2a:04:c3:d3:b7:8c:99:7b:cd:f8:36:e4:
51:b4:4b:04:ed:73:97:e0:4d:16:38:98:4c:fb:34:fc:e5:7b:
a3:34:66:3e:9e:f7:da:40:b1:cc:82:94:1b:7a:b2:70:e0:11:
a3:4a:3f:52:00:c5:a1:02:09:fd:70:bb:68:24:a3:83:e6:d0:
9b:a7:2e:94:f5:01:7c:50:63:dc:ff:62:74:d5:9a:3a:66:7f:
50:76:59:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:01:46 2026 by rpki-client