Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/dc76ae-08e3-49eb-a0de-aad2f266f264/1/0QXjT1TfCI5agtvwoWQrL2VyiaM.roa
File: 0QXjT1TfCI5agtvwoWQrL2VyiaM.roa (raw, json)
Hash identifier: 9o93k9/sy+/e8QewFSMbzztfuRslP+yGx7Wdub1CVK0=
Subject key identifier: D1:05:E3:4F:54:DF:08:8E:5A:82:DB:F0:A1:64:2B:2F:65:72:89:A3
Certificate issuer: /CN=630157b277842f85eec09a7e8b5f03bf48167504
Certificate serial: 01A019DCAD81AABAF5536AAD9FA7D91E24DF
Authority key identifier: 63:01:57:B2:77:84:2F:85:EE:C0:9A:7E:8B:5F:03:BF:48:16:75:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwFXsneEL4XuwJp-i18Dv0gWdQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dc76ae-08e3-49eb-a0de-aad2f266f264/1/0QXjT1TfCI5agtvwoWQrL2VyiaM.roa
Signing time: Wed 19 Aug 2026 11:51:27 +0000
ROA not before: Wed 19 Aug 2026 11:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207207
IP address blocks: 2001:678:384::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/dc76ae-08e3-49eb-a0de-aad2f266f264/1/YwFXsneEL4XuwJp-i18Dv0gWdQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/dc76ae-08e3-49eb-a0de-aad2f266f264/1/YwFXsneEL4XuwJp-i18Dv0gWdQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwFXsneEL4XuwJp-i18Dv0gWdQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:dc:ad:81:aa:ba:f5:53:6a:ad:9f:a7:d9:1e:24:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=630157b277842f85eec09a7e8b5f03bf48167504
Validity
Not Before: Aug 19 11:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d105e34f54df088e5a82dbf0a1642b2f657289a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:22:90:d5:a6:42:55:4b:d6:c1:ba:7a:5f:3e:
58:24:a4:88:a5:a1:8a:27:ca:79:60:9e:8a:73:7c:
ed:be:1a:05:bb:21:fd:a1:d8:98:ed:40:84:4a:fa:
ec:07:fa:c8:8c:e4:65:ca:bf:99:b0:19:58:c9:2f:
6a:5f:6f:d6:f6:31:1c:7b:ec:e4:c4:1f:24:6a:bc:
7e:c6:8f:bb:e8:48:2c:73:33:7f:cf:ce:aa:40:ed:
45:b5:b4:66:08:6c:28:ad:49:e9:a6:aa:58:6b:80:
69:d6:fc:94:30:74:81:9a:7c:06:9e:f9:5d:84:19:
67:61:ab:35:6f:e9:2d:0b:f8:6e:b0:be:ae:83:80:
ad:2f:32:dc:3e:76:54:57:24:bc:93:56:92:00:bd:
d2:16:3d:c7:c6:23:4f:23:cd:ce:68:cb:15:32:10:
47:6b:dd:f3:cb:21:60:2e:fd:6e:36:c0:86:ae:6f:
37:0a:b9:fd:bc:8f:7d:bb:69:cf:da:a4:94:52:2f:
47:ce:ab:20:1c:8f:6d:af:ab:7b:10:69:ef:97:06:
b9:a9:87:0f:ef:ea:d7:6c:a7:a7:b2:7d:a3:be:52:
16:76:b9:06:93:a7:01:92:c3:b8:01:b3:2b:be:ec:
05:52:69:99:bb:89:de:e9:6d:6d:eb:b8:c8:e9:4d:
9f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:05:E3:4F:54:DF:08:8E:5A:82:DB:F0:A1:64:2B:2F:65:72:89:A3
X509v3 Authority Key Identifier:
keyid:63:01:57:B2:77:84:2F:85:EE:C0:9A:7E:8B:5F:03:BF:48:16:75:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwFXsneEL4XuwJp-i18Dv0gWdQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dc76ae-08e3-49eb-a0de-aad2f266f264/1/0QXjT1TfCI5agtvwoWQrL2VyiaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dc76ae-08e3-49eb-a0de-aad2f266f264/1/YwFXsneEL4XuwJp-i18Dv0gWdQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:384::/48
Signature Algorithm: sha256WithRSAEncryption
4e:70:ce:86:f7:b8:8e:77:48:a0:f4:04:1e:00:04:bf:76:09:
54:89:d2:b0:0b:dd:04:d9:0b:05:f4:b5:a4:14:68:cd:cf:ba:
26:d5:a5:24:59:c2:e3:6f:52:30:1c:7d:b7:02:4e:2a:4a:54:
e5:ca:dd:78:6f:0c:18:95:f5:b2:6c:0a:4f:5b:02:09:ab:a3:
bd:0d:31:6a:b0:90:e4:56:b6:9f:0f:a5:64:03:18:a6:fb:f8:
3e:4a:a0:1b:db:b4:47:3d:83:4f:10:d8:f8:43:a6:66:3a:61:
f5:e8:67:3c:82:2f:ea:c7:8d:5e:79:22:f7:55:ce:d2:b4:20:
2f:7a:49:a3:63:22:16:f9:79:b1:5c:2c:bc:de:55:f1:6f:5f:
cd:4d:92:4b:5f:0d:df:f5:97:6f:b5:14:91:32:c9:80:67:f8:
f0:41:fb:95:96:07:25:23:bd:78:b8:c1:7c:db:fb:2c:30:cd:
85:5b:36:62:fb:74:52:c5:6c:2d:83:44:1a:75:d6:3e:42:c4:
70:64:1f:6c:d2:3c:94:a3:1f:e8:7d:6a:21:ee:86:97:6d:e1:
61:e8:9b:0b:a2:b6:ac:41:ae:40:0a:08:d8:7d:12:c1:2c:05:
79:3d:25:5a:76:39:30:64:61:14:fd:4a:10:77:5a:75:00:aa:
1d:c7:b9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:49:12 2026 by rpki-client