Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/RXV0FkyrSSURuYKBNp97mfkTveU.roa
File: RXV0FkyrSSURuYKBNp97mfkTveU.roa (raw, json)
Hash identifier: 4XLzFBeAf1dzQtEYF/WORTvsT5QBqOnVV9gSjQgj5oQ=
Subject key identifier: 45:75:74:16:4C:AB:49:25:11:B9:82:81:36:9F:7B:99:F9:13:BD:E5
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019F135D19A6501966062E9E232FEE66460D
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/RXV0FkyrSSURuYKBNp97mfkTveU.roa
Signing time: Mon 29 Jun 2026 12:31:36 +0000
ROA not before: Mon 29 Jun 2026 12:31:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199746
IP address blocks: 2a09:3f06:6767::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:5d:19:a6:50:19:66:06:2e:9e:23:2f:ee:66:46:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jun 29 12:31:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=457574164cab492511b98281369f7b99f913bde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:47:77:a7:a1:58:ce:85:cc:13:8d:f9:38:dc:
10:b5:8c:56:31:92:a9:29:60:3d:96:d9:e1:c4:89:
a6:f6:d3:6b:a2:f2:98:2e:b1:fe:6b:98:3d:36:72:
29:ff:ac:17:52:80:80:cc:ce:e4:ec:f4:fb:18:fa:
34:11:20:18:8a:f2:1e:92:3e:27:b3:8a:e1:23:a1:
4d:e3:30:87:5e:99:7d:f4:74:9a:69:1e:d8:b8:30:
85:26:3f:85:8e:c2:d6:cd:eb:79:58:5a:8f:5b:ed:
68:d3:9d:71:da:b5:e6:82:c8:a0:8b:fe:ac:65:5a:
b6:81:4c:76:b6:45:a3:86:53:0b:f0:42:4d:9f:5f:
da:86:b7:d2:be:b7:16:b5:19:35:22:44:68:19:bf:
c0:83:11:29:e3:93:ad:38:23:fb:6f:71:47:f8:a7:
98:5d:39:28:c1:6b:40:f7:10:8b:08:39:d3:fb:e9:
a8:6f:c7:3d:ff:29:e5:7c:63:bd:68:25:69:f6:ae:
93:a1:b9:b1:06:96:dd:f5:78:46:83:28:a7:8b:e4:
06:ac:ff:5e:10:ed:2a:41:d4:85:2a:fb:ef:73:31:
96:fc:df:90:6d:bc:bd:01:11:c9:9c:c8:59:bc:f4:
ee:dd:71:37:cf:45:bd:84:c6:c2:a9:78:53:d8:43:
b2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:75:74:16:4C:AB:49:25:11:B9:82:81:36:9F:7B:99:F9:13:BD:E5
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/RXV0FkyrSSURuYKBNp97mfkTveU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f06:6767::/48
Signature Algorithm: sha256WithRSAEncryption
5e:bd:21:23:62:6e:55:64:4f:13:79:6f:75:15:da:4d:e9:d6:
b7:1a:30:aa:c7:ef:70:0e:d5:2d:71:7d:c5:6f:7a:b4:d6:e0:
cf:f9:24:a7:1d:eb:cd:05:b2:e3:48:97:94:08:8d:e0:03:df:
f1:34:c6:0a:ae:2f:92:1e:0a:dd:96:11:e0:7d:e8:7a:81:c9:
d5:17:2f:b2:aa:80:b9:10:3f:99:b5:9b:f5:37:bd:45:1e:77:
69:da:67:6d:9e:41:01:51:9d:1f:7c:b4:66:8c:c0:62:8b:b5:
e5:a8:48:37:ed:50:bd:ee:e1:06:7a:95:b2:06:20:61:c1:14:
ed:3a:b0:2f:ff:05:bf:60:7d:69:76:29:df:4d:7a:03:21:ba:
fd:f2:d8:49:c0:b1:ad:3a:fd:d9:ca:0f:51:58:b6:98:b0:a8:
c0:6c:de:c7:0c:35:c7:d6:d2:80:da:84:c7:de:ff:cd:6f:ad:
9b:48:98:3a:97:72:43:01:b1:31:32:3a:a0:06:e9:fa:de:b7:
bc:02:1b:9a:b6:e8:fa:0b:65:22:21:94:b0:65:ef:53:5c:83:
90:76:ea:16:5d:f9:95:14:4c:84:f7:b1:53:ec:02:ce:d2:e7:
b0:c8:0f:28:3c:3b:4c:d4:20:99:86:57:0b:e4:e3:62:c6:e3:
70:48:07:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:16:54 2026 by rpki-client