Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/ow3C5kl0IE5FmZEL6wAizeHsfF0.roa
File: ow3C5kl0IE5FmZEL6wAizeHsfF0.roa (raw, json)
Hash identifier: 1LUERdwWct9ixO2+9tq0i32to/X7fxuaqayb1CcvapM=
Subject key identifier: A3:0D:C2:E6:49:74:20:4E:45:99:91:0B:EB:00:22:CD:E1:EC:7C:5D
Certificate issuer: /CN=1afbd4488916faecfde27af63cf98451b9672ff6
Certificate serial: 019E5138C9E724F9399F9B01082C8D37D021
Authority key identifier: 1A:FB:D4:48:89:16:FA:EC:FD:E2:7A:F6:3C:F9:84:51:B9:67:2F:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/ow3C5kl0IE5FmZEL6wAizeHsfF0.roa
Signing time: Fri 22 May 2026 19:45:36 +0000
ROA not before: Fri 22 May 2026 19:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132372
IP address blocks: 2a0d:9842::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:51:38:c9:e7:24:f9:39:9f:9b:01:08:2c:8d:37:d0:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afbd4488916faecfde27af63cf98451b9672ff6
Validity
Not Before: May 22 19:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a30dc2e64974204e4599910beb0022cde1ec7c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d3:35:14:9d:10:f0:9e:6f:3a:69:30:96:0d:
8b:59:4f:3a:81:c9:7f:8f:39:67:f0:42:e1:37:4d:
d6:b1:68:7b:88:1a:ce:e5:06:1f:73:61:76:11:5a:
a5:66:73:78:63:31:f8:36:31:1d:c5:42:4d:9f:4f:
38:75:6f:c3:e0:d8:6b:9e:b2:c3:7b:ec:c5:05:eb:
6a:79:b2:39:0e:c0:84:80:db:74:4b:87:47:de:a8:
41:97:62:c1:03:c0:51:36:27:cb:be:8b:d5:15:6d:
3c:bf:f7:34:cc:f8:3b:ce:25:6b:ec:6b:d8:35:d3:
53:12:e1:12:a3:56:0c:9c:27:28:cf:f7:fc:2b:75:
c6:86:08:08:a7:69:3d:b2:90:64:05:be:21:e1:97:
72:09:c9:4d:a6:56:84:0d:6f:8e:5c:83:21:25:bb:
93:02:68:3b:03:78:9d:05:53:a0:38:08:8b:28:9f:
27:67:1b:b7:b0:f6:e7:1a:f6:63:79:eb:e1:b0:9e:
aa:c2:0a:5e:4f:19:99:67:29:c2:39:da:dc:38:37:
c8:cb:6e:07:3e:68:c6:fb:47:99:68:30:ef:17:9e:
8a:5e:9f:b9:e4:67:ee:05:d1:99:02:5f:ee:c1:70:
77:4d:dc:5a:4a:a7:72:74:b7:9f:61:b6:ac:1f:c0:
5f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0D:C2:E6:49:74:20:4E:45:99:91:0B:EB:00:22:CD:E1:EC:7C:5D
X509v3 Authority Key Identifier:
keyid:1A:FB:D4:48:89:16:FA:EC:FD:E2:7A:F6:3C:F9:84:51:B9:67:2F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/ow3C5kl0IE5FmZEL6wAizeHsfF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:9842::/48
Signature Algorithm: sha256WithRSAEncryption
48:c1:09:20:5a:22:e8:bc:9f:f5:5d:f6:cd:d2:76:d1:eb:3f:
d9:fa:f4:04:c3:10:07:1a:a4:8f:c3:70:95:b1:42:ef:8c:de:
af:99:05:fe:00:93:18:22:f2:30:91:bc:01:ee:cd:a2:44:05:
b3:e1:68:c1:cf:1d:ca:39:35:bd:3c:aa:21:3b:81:f0:e6:d9:
3b:b1:93:26:ce:3d:bf:32:64:cc:aa:48:18:d0:e1:bb:81:0d:
d0:a7:89:37:88:d0:f7:46:41:9c:38:b7:4e:49:c9:f9:08:6b:
3b:0f:2f:84:c9:67:46:df:55:2e:83:65:e9:c5:27:75:ab:5c:
bd:ef:8d:7a:1b:e9:c3:34:35:68:41:10:72:35:72:24:41:99:
c0:c2:ca:59:ea:9a:c5:fa:2b:38:61:b2:d7:a3:b8:fd:f1:22:
50:3a:64:f9:7b:5d:2f:f0:b3:a9:3f:d6:0b:3c:f6:b2:cc:ab:
51:b4:a3:a4:7d:81:54:ad:cc:fa:40:1a:e3:ad:57:ab:d7:61:
5d:53:a1:15:b5:62:29:c6:23:d3:59:0a:60:ed:a1:84:2f:5c:
ba:b6:bb:95:a1:5f:02:f1:bd:cc:ba:ae:74:a9:c9:f5:d7:3f:
ad:65:13:fa:7c:f4:30:f4:c1:8d:82:e4:6b:dd:0b:46:48:85:
df:72:8c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:55:00 2026 by rpki-client