Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/0ANiTuB0k0Ho0d6_jXOh0AGutws.roa
File: 0ANiTuB0k0Ho0d6_jXOh0AGutws.roa (raw, json)
Hash identifier: aUUKiueXJMnT9TuBh6iRiPtmINqBBYqMaiOX3KQ/9XI=
Subject key identifier: D0:03:62:4E:E0:74:93:41:E8:D1:DE:BF:8D:73:A1:D0:01:AE:B7:0B
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01A01894EB841AD5ADBB474DBFF7F9CED45A
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/0ANiTuB0k0Ho0d6_jXOh0AGutws.roa
Signing time: Wed 19 Aug 2026 05:53:27 +0000
ROA not before: Wed 19 Aug 2026 05:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219283
IP address blocks: 2a0d:d941::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:94:eb:84:1a:d5:ad:bb:47:4d:bf:f7:f9:ce:d4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Aug 19 05:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d003624ee0749341e8d1debf8d73a1d001aeb70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:21:45:3a:c2:60:d5:d4:63:93:63:e2:ea:bc:
b1:8b:56:76:09:36:3a:3e:93:16:06:fe:41:55:1d:
4a:47:fd:b5:e3:cd:b7:36:10:97:ed:5b:1c:16:16:
77:09:9e:4b:20:5d:b5:09:0e:8e:71:64:fd:ac:cf:
b7:65:76:3e:3b:08:a8:cd:03:05:c2:d4:83:b1:35:
df:03:1b:12:0a:6d:d4:12:5c:73:43:5c:3f:cf:27:
c6:90:26:99:64:cc:8b:a4:ee:13:aa:a9:ba:91:cc:
46:e2:58:e7:19:72:f7:b9:4f:75:16:40:f1:7e:42:
30:c4:5c:99:c0:bb:16:48:b1:f8:e6:b3:38:bd:88:
69:08:19:30:5c:09:28:0c:7d:49:0d:1d:7e:73:36:
0a:46:d9:9c:a2:f9:2c:05:9f:a9:fd:a8:8c:0d:4c:
67:58:bf:0b:35:60:a2:54:1a:c7:f9:ab:61:48:0a:
40:09:f9:f6:01:0a:92:65:f5:6c:20:53:8b:e1:5e:
79:57:4b:86:61:8b:b1:a5:69:a2:9d:1e:bb:09:14:
85:77:37:f6:b1:6e:0e:b9:24:3e:a0:55:ea:10:fc:
86:45:29:73:b5:72:3a:43:19:41:fd:fb:1e:e3:82:
31:65:69:5b:46:2a:fd:20:1d:19:d4:9a:c8:21:09:
8d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:03:62:4E:E0:74:93:41:E8:D1:DE:BF:8D:73:A1:D0:01:AE:B7:0B
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/0ANiTuB0k0Ho0d6_jXOh0AGutws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d941::/36
Signature Algorithm: sha256WithRSAEncryption
60:a7:af:4f:8b:74:71:58:8d:ec:f6:5d:c7:eb:e0:57:e5:0c:
aa:ae:cd:a0:83:24:09:6a:05:50:78:49:6d:f5:d4:01:3d:09:
8a:a9:ef:65:2d:f2:1b:7f:be:39:ab:25:0e:26:9f:34:56:b7:
64:24:45:a0:99:b8:0a:ff:b8:b1:1c:d1:d7:b5:c6:73:a1:6c:
ff:06:9e:4f:02:c4:f9:4c:b8:a5:d3:9d:4e:41:38:61:ee:f2:
04:e8:7f:89:22:af:f0:8b:d3:89:89:39:4c:dd:de:78:8a:d8:
9d:c9:4e:0b:f9:82:0e:a8:21:7e:d9:1a:d8:77:d1:d0:5e:e5:
c9:07:e6:33:0f:46:c4:b8:30:39:3b:23:4b:2e:67:9c:ff:f0:
fc:cc:91:6a:31:c6:ab:c9:75:23:b2:71:ba:c4:78:3e:5e:18:
e1:ef:70:0c:89:26:83:56:1b:3d:85:86:e9:d7:4b:6e:72:3b:
5f:00:6a:e7:2b:d5:c4:80:4e:f1:42:b4:e1:87:d2:f8:11:98:
49:ec:ce:42:b1:75:d3:5e:fc:e2:93:ca:23:04:71:01:f2:50:
a9:df:a4:5a:fc:0e:b5:3c:5f:4d:0f:0a:f5:47:55:95:6e:ab:
8d:96:86:ad:18:56:ba:3d:96:93:0b:db:e8:f2:1b:09:e4:14:
e6:6c:ef:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:52 2026 by rpki-client