Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/09ONx1JAEFSVyl8QuOHfAL1GqRk.roa
File: 09ONx1JAEFSVyl8QuOHfAL1GqRk.roa (raw, json)
Hash identifier: 8SkI6zA2uZDVv/cqiA4d/HF6r6rJ9SLykiFeZRrTxro=
Subject key identifier: D3:D3:8D:C7:52:40:10:54:95:CA:5F:10:B8:E1:DF:00:BD:46:A9:19
Certificate issuer: /CN=000783a50811be92efae847cbb50170684474bcc
Certificate serial: 019F23693B7CD2FA4218D1C9A915EF912BC3
Authority key identifier: 00:07:83:A5:08:11:BE:92:EF:AE:84:7C:BB:50:17:06:84:47:4B:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/09ONx1JAEFSVyl8QuOHfAL1GqRk.roa
Signing time: Thu 02 Jul 2026 15:18:46 +0000
ROA not before: Thu 02 Jul 2026 15:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 2a0c:61c7:ace::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3b:7c:d2:fa:42:18:d1:c9:a9:15:ef:91:2b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000783a50811be92efae847cbb50170684474bcc
Validity
Not Before: Jul 2 15:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3d38dc75240105495ca5f10b8e1df00bd46a919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:00:74:64:7d:42:9b:d6:38:e5:15:7a:e5:cf:
50:e1:38:2f:44:0a:18:dc:43:7d:0b:10:0f:bf:e2:
f6:fb:38:38:2f:25:d0:d0:11:bb:b6:10:3a:23:d4:
a5:c2:fd:22:f8:3f:3d:98:ba:b3:52:22:8a:88:aa:
f0:de:41:73:ee:83:89:1d:90:08:f4:fe:45:6f:cf:
e6:05:2f:5a:7f:6a:4e:7f:a9:17:32:be:af:eb:79:
74:a6:f7:a9:ce:41:12:a2:0a:0a:b9:b6:5f:16:be:
72:79:14:5d:38:14:f7:5f:97:f3:e3:f9:aa:78:8f:
15:49:ee:ec:f1:27:45:65:96:0f:01:eb:3a:58:48:
56:09:a0:72:92:c7:c2:64:2a:d8:71:5c:cf:48:a4:
6a:49:2f:33:b6:1e:d7:e2:8c:60:63:2f:6d:90:1c:
e1:ca:56:a1:f8:2c:af:44:96:8f:10:0c:81:a8:67:
26:cd:e3:44:1a:98:81:60:6c:cd:19:7e:3f:af:49:
25:53:56:28:a7:be:26:94:dd:6b:8d:b4:0e:7d:73:
6a:b0:14:01:34:45:d1:35:5b:73:7d:f6:3c:9f:28:
d0:87:99:c8:84:f7:d4:2f:6d:97:f3:8f:59:4e:03:
c1:47:9a:38:a7:08:9a:7c:68:c5:01:c9:82:8a:6f:
93:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D3:8D:C7:52:40:10:54:95:CA:5F:10:B8:E1:DF:00:BD:46:A9:19
X509v3 Authority Key Identifier:
keyid:00:07:83:A5:08:11:BE:92:EF:AE:84:7C:BB:50:17:06:84:47:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/09ONx1JAEFSVyl8QuOHfAL1GqRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:61c7:ace::/48
Signature Algorithm: sha256WithRSAEncryption
62:7a:43:c0:f6:45:4e:18:cc:a2:cd:93:af:66:38:7b:17:c3:
6e:63:a5:ee:86:50:89:99:97:03:17:8d:40:a7:6b:7f:cc:db:
60:9f:1e:f6:9b:bf:9b:c3:74:bc:4a:24:86:c3:5e:5d:4a:49:
df:bf:c3:74:20:41:7e:9a:89:7d:91:96:7c:10:3b:de:44:10:
10:91:e5:15:df:ca:4c:26:d2:c6:7c:1b:56:0b:c0:a8:d3:be:
9c:84:86:b2:9c:cc:19:56:a4:71:2b:a8:4f:0f:c5:64:fa:33:
73:66:b5:5c:ac:f8:d6:b0:06:23:f0:c8:8a:e9:2d:1c:20:e2:
b9:c0:3b:08:c0:e9:38:1b:2f:9b:78:08:55:ef:9c:18:59:36:
29:cc:da:e4:a0:a8:58:80:3e:1a:7e:6d:47:1d:fd:9c:29:e8:
b6:5c:b3:50:41:7a:4e:52:20:ca:8a:74:a8:5a:ee:1a:ec:ea:
e2:ad:90:6d:86:af:dd:47:48:49:90:1c:5e:f0:53:49:8c:5b:
b9:3f:1a:fa:b7:39:1a:1b:73:b1:c5:b9:1f:21:7a:0a:f8:c5:
27:4d:3f:b4:29:04:90:f8:b9:75:10:61:ba:cf:48:67:bb:57:
fb:8f:7f:0a:a5:de:2b:79:31:03:ad:72:a3:c2:74:4b:88:6e:
8b:3a:80:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:53:13 2026 by rpki-client