Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/io9rqLLnBlojHDEnMQ6xVvr_Ako.roa
File: io9rqLLnBlojHDEnMQ6xVvr_Ako.roa (raw, json)
Hash identifier: cU6BfjlaRPBqoyOhM1BYNszyJQy/R3jUUoajXYnbmFg=
Subject key identifier: 8A:8F:6B:A8:B2:E7:06:5A:23:1C:31:27:31:0E:B1:56:FA:FF:02:4A
Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Certificate serial: 019FA909D468F14BB4FCF7F7D8D102EDC9F1
Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/io9rqLLnBlojHDEnMQ6xVvr_Ako.roa
Signing time: Tue 28 Jul 2026 14:03:41 +0000
ROA not before: Tue 28 Jul 2026 14:03:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42241
IP address blocks: 2a0b:dc40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:09:d4:68:f1:4b:b4:fc:f7:f7:d8:d1:02:ed:c9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Validity
Not Before: Jul 28 14:03:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a8f6ba8b2e7065a231c3127310eb156faff024a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:44:56:94:21:a7:d0:77:36:e8:7a:05:ef:15:
71:73:15:5f:11:69:62:16:94:fe:1f:ad:2d:a3:0b:
b6:74:dc:1b:6b:cc:26:2a:ed:67:07:4f:bf:fa:db:
18:cb:8d:a5:6d:19:87:a0:ba:ec:17:e1:6e:cb:cf:
99:e2:5e:5e:44:84:ac:4f:43:2b:95:51:c6:61:69:
c1:89:64:73:e9:17:cc:4a:56:77:f7:35:31:66:c1:
92:79:ac:29:72:cb:c9:4d:2d:dd:c2:75:6b:4c:44:
65:87:34:ce:5a:7d:4c:22:d9:20:1a:12:c8:4f:8b:
09:ab:95:8e:ef:08:50:12:6a:2e:6c:7a:08:5a:87:
2c:5a:f1:db:4a:c6:94:01:b3:ed:8e:10:a2:85:f1:
12:90:8f:04:e3:c2:18:ac:e6:34:84:e2:5e:5f:15:
22:ab:2f:23:80:f1:e2:33:0b:d4:c0:2d:fd:7b:1f:
16:20:da:92:fa:a7:73:b9:32:bf:ee:20:13:78:81:
60:0e:cc:c9:e4:cd:d2:0d:c2:d0:f4:f0:82:6a:38:
4f:f9:ab:15:45:05:c0:8c:8a:43:c7:b8:91:8c:12:
d4:fa:2c:f6:5f:73:eb:22:5c:6c:8c:65:70:c4:27:
0e:90:3c:a7:a7:2f:08:03:96:a2:48:31:13:96:8d:
65:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8F:6B:A8:B2:E7:06:5A:23:1C:31:27:31:0E:B1:56:FA:FF:02:4A
X509v3 Authority Key Identifier:
keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/io9rqLLnBlojHDEnMQ6xVvr_Ako.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:dc40::/32
Signature Algorithm: sha256WithRSAEncryption
02:7b:c7:7b:04:c1:ee:f3:64:1d:72:6a:4e:ef:37:4a:ec:36:
eb:4d:29:65:a0:03:4f:a5:34:08:b4:08:9d:4a:5b:f3:d6:a7:
d6:87:fe:20:1e:f7:dc:ec:bf:ff:4a:37:10:ed:e0:3b:e7:82:
2f:92:f3:9b:ba:29:a0:57:e4:2c:32:12:23:86:dc:5b:f9:61:
d5:a3:8d:5e:c3:7c:43:ce:67:f5:ec:a2:72:6e:8a:ae:f3:09:
ec:dd:27:49:7b:05:29:10:4c:55:e4:77:b4:7a:8e:e0:46:74:
34:9d:cb:96:9d:91:54:a0:bb:dd:63:fb:4d:29:17:c5:06:77:
b2:c8:c8:24:85:6c:a0:43:bf:2a:bd:63:16:1c:65:18:69:6f:
1c:9f:ac:36:9f:93:d4:d4:55:b2:f2:af:fb:35:c0:5c:d5:d9:
42:f1:7a:23:35:19:ee:3e:ac:e0:4f:21:92:e5:50:c2:17:38:
f6:d6:fa:23:57:98:9e:b1:5f:02:c8:f2:95:1e:e7:76:fe:74:
c5:a3:52:e7:b6:9e:7f:ea:47:2a:c7:6f:51:e8:ae:09:de:71:
29:b0:e7:07:8f:e8:21:64:cf:68:7c:ab:d6:5b:19:a5:e7:75:
56:72:3d:e8:43:7a:55:11:29:7e:ac:61:90:9e:0c:98:8c:0e:
16:99:71:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:41:03 2026 by rpki-client