Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/0OCOakcDI9m6fmr8VzZ-9Hd4VgU.roa
File: 0OCOakcDI9m6fmr8VzZ-9Hd4VgU.roa (raw, json)
Hash identifier: cTnCK/Fe0k+kOxPdh3z5AeFWC42FsqaaV1sppIVkCH8=
Subject key identifier: D0:E0:8E:6A:47:03:23:D9:BA:7E:6A:FC:57:36:7E:F4:77:78:56:05
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019EFF268B82F80E00336831B464E09363F2
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/0OCOakcDI9m6fmr8VzZ-9Hd4VgU.roa
Signing time: Thu 25 Jun 2026 14:19:36 +0000
ROA not before: Thu 25 Jun 2026 14:19:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a0e:4005:ff20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:26:8b:82:f8:0e:00:33:68:31:b4:64:e0:93:63:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jun 25 14:19:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0e08e6a470323d9ba7e6afc57367ef477785605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:02:01:c8:0f:20:93:12:1d:74:82:1c:32:
72:73:0c:50:62:a6:20:82:b4:8b:62:dc:10:d5:dc:
f5:54:c9:e5:89:5f:ec:ff:a0:be:c7:64:bf:b7:74:
9f:14:38:12:1e:d7:ee:92:46:70:5e:86:79:d0:21:
2d:1f:4e:0f:b3:1b:14:2a:1b:52:db:8f:56:fb:52:
2c:1f:6b:88:16:85:dc:24:9d:c5:a6:81:be:82:4b:
0d:4a:66:81:97:4f:49:bd:f7:47:4c:0d:b5:25:06:
66:25:d4:df:dd:19:c6:47:e3:02:86:e2:19:63:b1:
ff:06:48:32:72:27:aa:80:88:16:48:72:f1:58:73:
cc:aa:1c:f3:63:c4:c3:15:2a:a7:a6:f2:e6:b3:4b:
32:a7:2d:74:f7:6e:65:34:dc:cf:38:38:85:56:59:
ec:94:a5:12:20:5a:c9:4f:45:96:27:3b:81:59:f1:
30:68:55:24:02:44:36:27:67:3d:3a:97:46:75:57:
c6:ec:f9:b2:6e:ab:a7:bb:63:f5:ba:78:3a:7e:ee:
cf:bb:87:47:43:90:42:7d:af:49:ee:92:cb:66:d4:
55:f2:91:80:74:f9:e0:7d:7b:6c:63:1b:c1:79:42:
34:a1:ef:c4:bf:1e:d2:ae:3a:72:29:76:78:5d:04:
cd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E0:8E:6A:47:03:23:D9:BA:7E:6A:FC:57:36:7E:F4:77:78:56:05
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/0OCOakcDI9m6fmr8VzZ-9Hd4VgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4005:ff20::/48
Signature Algorithm: sha256WithRSAEncryption
d3:b4:fa:ff:6c:bd:5f:25:f3:df:ba:71:ae:44:33:01:d1:f0:
ef:44:58:c3:20:79:10:3a:1a:40:3f:c2:ca:27:84:1b:f1:41:
29:00:fc:38:e3:5a:c0:08:71:71:41:1f:00:41:8f:66:db:a5:
24:77:27:4a:42:e6:bc:bf:b1:6f:98:3c:aa:d6:f9:de:21:23:
d8:4d:38:2d:14:db:f1:55:da:1b:b1:fd:34:cc:c8:84:e1:49:
78:8a:37:c6:e8:1e:95:40:89:f6:31:01:70:7f:84:9a:e9:90:
98:39:05:7d:07:b7:db:c1:d1:62:e7:1e:83:f4:da:04:31:1b:
b5:19:1a:67:3d:76:71:b4:05:74:99:8c:d8:ba:09:7e:fa:69:
cd:87:96:79:76:26:b5:26:73:34:32:5b:7b:50:7e:fd:46:cf:
06:55:54:7b:f5:b9:97:51:6f:43:1f:af:62:c3:47:8c:e1:e4:
82:f4:aa:87:16:c0:97:f5:72:01:dd:62:ed:a1:c4:8d:d7:ed:
1f:86:8d:df:e8:6c:ab:ae:7a:32:9b:6c:1a:cd:6f:df:a8:50:
0f:e9:c2:6b:c0:0a:9f:cd:51:c1:ab:a2:5b:36:fb:5f:39:c4:
81:8e:94:ab:94:44:d8:d9:8a:b2:f0:79:ca:b7:9d:b2:57:7c:
6f:27:6d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:25:51 2026 by rpki-client