Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/aVYPw3w_haLDbn2L0VxoRpLVBgE.roa
File: aVYPw3w_haLDbn2L0VxoRpLVBgE.roa (raw, json)
Hash identifier: EA7WyFcduaDlrxiqAgb7BYQqnFnhXAXXbBCDWLRubeU=
Subject key identifier: 69:56:0F:C3:7C:3F:85:A2:C3:6E:7D:8B:D1:5C:68:46:92:D5:06:01
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019F2919C9DC3634809991D6137024100048
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/aVYPw3w_haLDbn2L0VxoRpLVBgE.roa
Signing time: Fri 03 Jul 2026 17:49:43 +0000
ROA not before: Fri 03 Jul 2026 17:49:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201861
IP address blocks: 2a0d:d940:110::/44 maxlen: 44
2a0d:d940:150::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:19:c9:dc:36:34:80:99:91:d6:13:70:24:10:00:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jul 3 17:49:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69560fc37c3f85a2c36e7d8bd15c684692d50601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6b:e8:65:3b:6f:23:4c:64:ed:17:7e:c9:66:
44:3d:5b:2b:d0:15:b1:46:4a:fe:12:0d:eb:01:37:
b8:14:84:86:98:a7:53:51:7b:58:5f:ec:58:ec:ce:
3c:62:56:9b:2b:6e:59:53:1a:66:b9:09:d3:3e:ad:
41:66:f6:ea:63:84:35:32:81:cc:a9:45:90:ed:f2:
6f:20:01:6e:2b:a0:cb:af:61:cd:f5:ac:7c:47:ec:
e0:00:16:b2:0d:3f:6a:54:57:c0:82:33:61:88:21:
31:75:9f:94:52:d5:bb:f1:e3:c1:30:5b:cc:4d:c6:
7b:bd:dd:d2:04:22:be:23:b5:1d:a2:3e:22:08:9f:
09:a4:24:e0:36:ff:98:00:9a:62:0c:d2:43:d6:9d:
08:a2:30:5d:56:8e:7c:8a:53:22:ce:db:e4:51:ab:
a8:49:8d:de:7e:47:2e:4e:8e:c0:93:37:81:31:6b:
35:a0:c4:e5:63:75:bb:17:2f:e0:b5:06:00:99:06:
96:c3:66:1b:cd:08:b0:37:35:b0:f2:03:62:8e:50:
08:6e:d4:4e:f0:67:fe:79:0a:c6:fc:96:4c:44:c1:
b5:af:f5:be:6c:95:68:5c:45:49:5c:41:66:da:6c:
34:43:a9:59:5b:e8:85:f9:a0:5c:a5:5b:9d:42:cb:
8a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:56:0F:C3:7C:3F:85:A2:C3:6E:7D:8B:D1:5C:68:46:92:D5:06:01
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/aVYPw3w_haLDbn2L0VxoRpLVBgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:110::/44
2a0d:d940:150::/44
Signature Algorithm: sha256WithRSAEncryption
d9:9a:83:4f:11:8f:53:35:76:b7:dd:2a:13:6a:b9:02:ac:f9:
5a:7b:74:79:d8:c7:47:71:6b:0a:08:35:7f:9c:6e:15:2c:73:
b0:9e:dc:ac:65:fa:ea:64:a4:42:e5:65:aa:1e:36:5a:77:f2:
d2:c8:d7:c5:33:d0:20:df:19:ef:bd:78:18:97:32:6a:1f:2b:
11:be:3e:06:ad:c9:5e:6e:77:f4:32:17:95:e3:01:76:67:e0:
0b:86:e8:1e:1e:14:45:7f:84:a0:a7:b9:f7:12:ba:bb:39:3a:
4a:d0:06:e4:44:21:07:2d:e6:7d:1a:41:1c:47:3a:c6:94:f1:
82:e9:61:b8:7f:ec:3c:33:b4:40:c2:2e:30:d0:26:18:89:a2:
2c:c7:17:3c:ea:be:25:f2:b5:98:8f:86:0a:33:43:7f:a0:c8:
e8:fd:54:a6:4d:74:be:1b:81:10:06:b6:43:43:3c:41:4c:a9:
ce:db:ec:66:04:17:0e:fd:e4:a2:f0:d3:ff:f1:fd:c6:40:21:
97:94:b1:65:7e:6a:2d:70:08:83:15:53:4d:c3:dd:92:32:8a:
24:27:01:5a:cc:be:97:1f:cc:00:71:1c:4f:f1:82:f0:fa:58:
53:0d:f4:af:eb:b1:5c:4a:4b:d0:4e:95:7c:c1:b3:78:d5:0d:
b6:82:8a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 15:24:51 2026 by rpki-client