Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/O13GHKegyPEwg2xbw_kqSJfD_Zg.roa
File: O13GHKegyPEwg2xbw_kqSJfD_Zg.roa (raw, json)
Hash identifier: YCuqipv9O/HgLqdcdB59B+FLSM8FY1tRSA6iE7lEghI=
Subject key identifier: 3B:5D:C6:1C:A7:A0:C8:F1:30:83:6C:5B:C3:F9:2A:48:97:C3:FD:98
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A0AB300CD3AA82567200D0961C51503BCD
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/O13GHKegyPEwg2xbw_kqSJfD_Zg.roa
Signing time: Wed 16 Sep 2026 17:07:27 +0000
ROA not before: Wed 16 Sep 2026 17:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34567
IP address blocks: 2a0d:8cc0::/29 maxlen: 29
2a0d:b840::/29 maxlen: 29
2a0e:af40::/29 maxlen: 29
2a0e:e9c0::/29 maxlen: 29
2a0f:e180::/29 maxlen: 29
2a11:17c0::/29 maxlen: 29
2a11:1c80::/29 maxlen: 29
2a11:2d00::/29 maxlen: 29
2a11:4540::/29 maxlen: 29
2a11:4f00::/29 maxlen: 29
2a11:64c0::/29 maxlen: 29
2a11:6b80::/29 maxlen: 29
2a11:81c0::/29 maxlen: 29
2a11:86c0::/29 maxlen: 29
2a11:8740::/29 maxlen: 29
2a11:8980::/29 maxlen: 29
2a11:9580::/29 maxlen: 29
2a11:9f00::/29 maxlen: 29
2a11:a040::/29 maxlen: 29
2a11:a140::/29 maxlen: 29
2a11:b0c0::/29 maxlen: 29
2a11:b700::/29 maxlen: 29
2a11:bb00::/29 maxlen: 29
2a11:bbc0::/29 maxlen: 29
2a11:be40::/29 maxlen: 29
2a11:bf80::/29 maxlen: 29
2a11:c240::/29 maxlen: 29
2a11:c580::/29 maxlen: 29
2a11:c680::/29 maxlen: 29
2a11:cec0::/29 maxlen: 29
2a11:d340::/29 maxlen: 29
2a11:d880::/29 maxlen: 29
2a11:dac0::/29 maxlen: 29
2a11:df00::/29 maxlen: 29
2a11:e640::/29 maxlen: 29
2a11:e6c0::/29 maxlen: 29
2a11:e8c0::/29 maxlen: 29
2a11:fa40::/29 maxlen: 29
2a11:fc40::/29 maxlen: 29
2a11:ff40::/29 maxlen: 29
2a12:580::/29 maxlen: 29
2a12:900::/29 maxlen: 29
2a12:dc0::/29 maxlen: 29
2a12:e40::/29 maxlen: 29
2a12:11c0::/29 maxlen: 29
2a12:12c0::/29 maxlen: 29
2a12:1a80::/29 maxlen: 29
2a12:2b80::/29 maxlen: 29
2a12:2e80::/29 maxlen: 29
2a12:3c00::/29 maxlen: 29
2a12:8380::/29 maxlen: 29
2a12:8480::/29 maxlen: 29
2a12:8a00::/29 maxlen: 29
2a12:9200::/29 maxlen: 29
2a12:aa00::/29 maxlen: 29
2a12:af00::/29 maxlen: 29
2a12:b400::/29 maxlen: 29
2a12:b700::/29 maxlen: 29
2a12:bb00::/29 maxlen: 29
2a12:c980::/29 maxlen: 29
2a12:d080::/29 maxlen: 29
2a12:d200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:30:0c:d3:aa:82:56:72:00:d0:96:1c:51:50:3b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Sep 16 17:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b5dc61ca7a0c8f130836c5bc3f92a4897c3fd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:33:db:10:49:30:b5:a0:45:e2:9b:06:b6:
d7:cc:1c:1d:11:8c:3c:31:d9:50:45:47:8d:9a:59:
47:99:1a:45:69:7c:1f:ad:d2:47:ca:28:d6:74:aa:
94:b1:33:69:ae:20:87:83:f9:b2:44:e9:f1:8c:ee:
b7:e2:24:76:8f:7a:7f:fc:58:70:34:b9:3f:9b:0a:
75:ab:7c:10:57:73:ce:ca:73:00:6c:02:28:6a:ac:
48:81:cd:84:23:06:c1:3b:e3:a8:df:5d:0d:da:26:
b4:fd:7b:76:43:1d:7b:dc:fc:30:39:61:bb:ab:1b:
16:f4:b1:cd:94:46:bd:72:c3:ff:95:04:6b:09:ae:
b0:0e:34:e7:92:a4:22:0a:06:c8:8c:66:9b:e1:c7:
ef:10:79:04:f7:e2:f3:b3:8a:0d:6e:87:e0:5b:d2:
33:9e:9a:13:ad:d4:87:f0:70:9d:33:c5:6b:80:63:
de:9b:3a:e7:fe:14:1a:ee:bc:e6:9d:95:a5:b4:8e:
44:cd:f1:40:c5:d8:fd:fc:6d:78:fa:a4:92:cc:f0:
22:6f:6b:1f:a9:7b:e0:94:3b:6d:af:72:2d:26:b6:
91:61:cd:7a:5e:d5:da:c3:a6:aa:3d:ac:b2:42:bf:
c0:8f:32:1a:f9:6e:47:f8:c9:cd:71:c2:a3:28:1b:
fa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5D:C6:1C:A7:A0:C8:F1:30:83:6C:5B:C3:F9:2A:48:97:C3:FD:98
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/O13GHKegyPEwg2xbw_kqSJfD_Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:8cc0::/29
2a0d:b840::/29
2a0e:af40::/29
2a0e:e9c0::/29
2a0f:e180::/29
2a11:17c0::/29
2a11:1c80::/29
2a11:2d00::/29
2a11:4540::/29
2a11:4f00::/29
2a11:64c0::/29
2a11:6b80::/29
2a11:81c0::/29
2a11:86c0::/29
2a11:8740::/29
2a11:8980::/29
2a11:9580::/29
2a11:9f00::/29
2a11:a040::/29
2a11:a140::/29
2a11:b0c0::/29
2a11:b700::/29
2a11:bb00::/29
2a11:bbc0::/29
2a11:be40::/29
2a11:bf80::/29
2a11:c240::/29
2a11:c580::/29
2a11:c680::/29
2a11:cec0::/29
2a11:d340::/29
2a11:d880::/29
2a11:dac0::/29
2a11:df00::/29
2a11:e640::/29
2a11:e6c0::/29
2a11:e8c0::/29
2a11:fa40::/29
2a11:fc40::/29
2a11:ff40::/29
2a12:580::/29
2a12:900::/29
2a12:dc0::/29
2a12:e40::/29
2a12:11c0::/29
2a12:12c0::/29
2a12:1a80::/29
2a12:2b80::/29
2a12:2e80::/29
2a12:3c00::/29
2a12:8380::/29
2a12:8480::/29
2a12:8a00::/29
2a12:9200::/29
2a12:aa00::/29
2a12:af00::/29
2a12:b400::/29
2a12:b700::/29
2a12:bb00::/29
2a12:c980::/29
2a12:d080::/29
2a12:d200::/29
Signature Algorithm: sha256WithRSAEncryption
5e:f1:0b:c6:cc:17:ad:28:81:7f:65:c8:03:28:48:04:d7:06:
8c:0c:6a:f3:c7:ba:ce:7f:1c:b1:26:4e:da:cc:7f:70:1e:3c:
65:1a:76:a6:b8:3c:10:62:9e:e2:82:4c:d6:5e:60:a4:18:97:
4e:a2:e2:04:d8:04:65:8d:f0:b3:ee:3a:c0:87:9b:a2:c3:0f:
55:45:b2:68:f8:f4:6b:2f:c6:a3:28:c5:19:37:1d:ad:6b:3c:
97:f8:22:99:fb:e1:f5:c7:e7:e7:20:ec:7d:1f:8d:92:6c:c9:
b1:c0:c5:e5:98:94:81:0c:c5:ea:f2:21:a9:38:37:f4:32:0f:
85:4e:d6:e5:e4:bf:02:65:d1:7a:b9:6e:0b:50:16:e2:dd:a2:
00:59:d2:4a:80:04:40:d2:89:0e:a1:f6:55:15:c9:da:c3:2b:
ce:c5:f8:cd:40:d9:97:56:0a:cb:b1:9f:ce:bd:d7:d6:74:d7:
39:e1:41:de:13:4e:16:da:e5:1d:fb:50:67:6e:07:58:48:c2:
51:54:b7:5c:ae:7b:58:50:28:c4:62:93:70:aa:00:c1:71:d9:
7c:01:fb:b7:00:86:db:f6:01:62:86:60:71:3d:cd:e3:54:47:
a1:44:0a:5e:52:94:a8:d9:82:57:6c:7b:d6:8f:e6:a9:d3:b1:
45:b6:19:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:59:24 2026 by rpki-client