Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/BwduuVx9l2nXmwgZ7Z0rdGaB0vk.roa
File: BwduuVx9l2nXmwgZ7Z0rdGaB0vk.roa (raw, json)
Hash identifier: tKwGTm1sUwUZQb6LPE6PThWaMP+7FrY2iOoxRlqeasA=
Subject key identifier: 07:07:6E:B9:5C:7D:97:69:D7:9B:08:19:ED:9D:2B:74:66:81:D2:F9
Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial: 019EDA0960B5D7BC2D824DD9ABF3641E7E4C
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/BwduuVx9l2nXmwgZ7Z0rdGaB0vk.roa
Signing time: Thu 18 Jun 2026 09:21:48 +0000
ROA not before: Thu 18 Jun 2026 09:21:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137922
IP address blocks: 2a00:86c0:440::/43 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:09:60:b5:d7:bc:2d:82:4d:d9:ab:f3:64:1e:7e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Validity
Not Before: Jun 18 09:21:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07076eb95c7d9769d79b0819ed9d2b746681d2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8c:58:48:c9:71:2a:3f:15:7a:2f:4f:01:fc:
8f:46:b2:2b:53:1a:74:a2:20:d3:4f:8d:bf:80:bc:
c5:ef:88:86:2a:e9:75:9a:9b:aa:5a:f1:64:ab:af:
38:37:3f:59:46:68:22:34:36:00:d4:4e:dd:2b:e6:
f9:42:24:88:3b:ca:43:07:e3:9a:2b:35:a4:6b:1b:
33:77:68:8d:7b:9b:76:f4:64:89:e7:1f:9c:ab:b8:
40:a2:fc:97:7a:fc:14:30:53:f0:72:93:c5:33:46:
fb:55:59:1f:04:07:ad:fd:18:d3:da:10:cd:8c:46:
ec:ab:89:92:9b:9c:30:d3:f0:33:51:88:da:59:59:
29:54:c0:3e:2c:ae:2b:a5:85:24:4f:13:bb:7f:73:
0b:77:b5:e3:4c:00:9a:cd:ef:60:1f:77:11:e4:cb:
aa:60:13:a8:cc:73:c9:c2:66:d8:b4:88:84:46:f8:
f0:5e:96:6f:08:97:cc:88:36:9c:e8:14:c6:f2:11:
9a:e5:2a:87:f2:a9:a2:5a:6c:90:67:59:e4:87:f3:
c2:9a:31:d5:65:6a:b9:84:af:21:11:8b:96:46:3b:
02:10:ba:7f:b6:bb:ee:33:15:68:38:e1:06:5f:60:
94:a5:2a:68:4c:09:c8:d8:a5:4b:57:3d:57:d2:96:
38:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:07:6E:B9:5C:7D:97:69:D7:9B:08:19:ED:9D:2B:74:66:81:D2:F9
X509v3 Authority Key Identifier:
keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/BwduuVx9l2nXmwgZ7Z0rdGaB0vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:86c0:440::/43
Signature Algorithm: sha256WithRSAEncryption
8e:15:96:39:e0:60:3e:53:eb:e6:89:c5:2b:65:26:08:5e:c5:
a4:18:a8:12:2b:cf:2f:a6:14:91:9f:38:20:06:91:ad:2a:f0:
b9:cb:dc:0e:4e:59:99:10:45:7b:c2:d9:54:4f:34:35:83:b9:
e5:01:f6:2c:f7:8b:c9:45:52:b5:f0:fc:44:cf:3a:df:22:ff:
a6:87:07:19:bc:98:54:cf:0d:00:d7:10:6c:2c:60:4b:6b:bc:
6d:19:4d:03:5b:07:08:a0:ad:8c:4e:6a:56:79:7d:b8:9f:4c:
f6:c6:a7:51:78:27:d3:1b:c7:70:d8:c1:46:29:a3:8d:58:a1:
47:eb:f0:53:71:f1:91:db:99:8e:75:08:49:67:64:08:21:ae:
12:58:09:ac:de:a3:7b:bc:fa:06:c8:7d:b1:a5:cf:f3:31:e6:
3c:0a:30:72:e8:05:6a:64:cb:59:a5:da:35:14:95:1c:39:42:
6c:7f:b5:74:0a:cd:f8:ea:bf:fe:54:25:e1:53:c6:02:b0:e7:
41:43:0d:7a:d9:9a:7b:86:d0:0b:ba:3e:9c:a6:e4:3f:41:2f:
bc:9f:21:a8:8c:04:8d:0f:3a:1b:ae:f1:24:b1:4f:b0:4f:09:
7e:a1:c9:7b:a3:0d:7c:80:d5:81:a6:3a:c1:07:12:24:b6:76:
07:d8:4c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:25:51 2026 by rpki-client