Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/Ud21UgAkszMTN1VkhwH7y54HQls.roa
File: Ud21UgAkszMTN1VkhwH7y54HQls.roa (raw, json)
Hash identifier: TDiL5RYpZd5bkb4q9qfKhjcV0EPJz6ihmUZhWMEEhwA=
Subject key identifier: 51:DD:B5:52:00:24:B3:33:13:37:55:64:87:01:FB:CB:9E:07:42:5B
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019EF51ACF0A942A2E6E57D0E75A9FE82C84
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/Ud21UgAkszMTN1VkhwH7y54HQls.roa
Signing time: Tue 23 Jun 2026 15:30:35 +0000
ROA not before: Tue 23 Jun 2026 15:30:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198997
IP address blocks: 2a09:3f00:1005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f5:1a:cf:0a:94:2a:2e:6e:57:d0:e7:5a:9f:e8:2c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jun 23 15:30:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51ddb5520024b333133755648701fbcb9e07425b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:74:e4:15:6b:d1:32:4d:a9:fa:2d:8c:8d:
0b:77:a7:f2:47:7f:37:9b:67:b2:33:b1:a8:f6:19:
85:08:2d:ce:9d:47:8e:58:04:d8:b8:2a:36:dd:7c:
52:72:95:ed:7a:91:9a:4f:5a:ab:33:23:24:7b:f8:
92:88:33:3a:63:e5:3f:83:25:c3:87:c5:d6:c2:89:
9a:af:e9:32:9d:78:2a:9e:aa:40:5c:7f:55:9e:db:
3b:2c:44:aa:5f:2d:e1:d5:b9:82:a7:e8:58:55:f6:
c4:29:90:04:7b:47:91:ac:17:ff:2a:56:bc:0d:91:
a6:4e:2c:da:11:7d:ed:c8:fb:80:50:19:b7:47:eb:
aa:87:4d:5a:23:02:df:3b:4b:f0:07:ba:5c:04:6f:
7e:19:8c:db:f8:1b:a5:c2:8c:b0:41:ed:dd:e0:29:
17:15:92:df:23:45:57:70:42:17:fd:7f:03:55:13:
06:ad:cb:f4:16:01:c1:12:33:c3:fa:a9:4a:32:e5:
08:84:d8:b8:82:04:80:16:5d:c2:c6:ae:3f:23:4d:
22:6f:d9:d6:c5:8b:0b:42:55:17:73:50:34:d1:d3:
9e:46:88:1d:a5:ed:d5:3b:b1:4a:21:fd:7d:45:d0:
ff:55:c3:f6:d9:9c:6c:ca:81:1b:39:63:a8:32:c3:
32:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DD:B5:52:00:24:B3:33:13:37:55:64:87:01:FB:CB:9E:07:42:5B
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/Ud21UgAkszMTN1VkhwH7y54HQls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:1005::/48
Signature Algorithm: sha256WithRSAEncryption
87:70:b5:d6:d9:38:59:6b:a2:21:59:63:b1:74:e2:81:aa:19:
05:c3:94:e8:9c:69:a3:b1:d2:68:33:ee:1b:f5:9e:d7:53:bb:
ca:c9:af:ce:b9:3d:cb:55:a3:cd:9d:1d:3e:c3:68:49:1c:e4:
6e:32:f6:fb:83:d2:ee:45:31:70:9e:00:3c:dd:99:9e:90:b0:
dd:bc:89:17:1b:4c:d8:e8:61:fb:b9:a0:87:6c:5d:6f:7c:aa:
55:64:48:9c:71:98:04:0d:6f:ce:58:1d:3e:58:dc:4c:0a:51:
95:45:c6:9f:45:1f:7f:37:eb:dc:19:ad:19:00:68:76:3c:db:
a7:aa:58:e1:cf:78:6e:a6:a5:61:30:33:f0:13:f8:d2:7f:91:
ef:00:7c:82:28:b5:bd:34:12:2a:6e:19:2b:af:a8:b5:03:f9:
8a:b3:9a:c6:09:ed:49:c3:52:22:e3:32:d5:9c:26:cd:f0:47:
33:b6:48:2e:a5:03:c2:03:f6:e1:ae:ed:40:97:94:30:6b:32:
e8:c8:3b:27:ab:99:a5:29:f8:ae:36:bd:36:9e:61:be:93:84:
a7:ee:ea:d5:e5:e7:96:a9:cb:aa:d7:f2:d7:f2:5d:24:a9:04:
14:4b:c2:33:87:20:2f:1f:37:96:fd:51:b1:00:0f:ba:b8:ad:
4d:70:51:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 01:59:49 2026 by rpki-client