Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/0OpHBjMjVbA4mZB-uVin8-sMqm8.roa
File: 0OpHBjMjVbA4mZB-uVin8-sMqm8.roa (raw, json)
Hash identifier: dlPHcIvBlPs7pHaxzesxD3zEaITEFobfNEN1Krtg6o8=
Subject key identifier: D0:EA:47:06:33:23:55:B0:38:99:90:7E:B9:58:A7:F3:EB:0C:AA:6F
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019ED02C77FEF1BFF347073CBC6ED90E903B
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/0OpHBjMjVbA4mZB-uVin8-sMqm8.roa
Signing time: Tue 16 Jun 2026 11:23:55 +0000
ROA not before: Tue 16 Jun 2026 11:23:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212743
IP address blocks: 2a0d:d940:b0::/44 maxlen: 44
2a0d:d940:400::/40 maxlen: 40
2a0d:d940:900f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:2c:77:fe:f1:bf:f3:47:07:3c:bc:6e:d9:0e:90:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jun 16 11:23:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0ea4706332355b03899907eb958a7f3eb0caa6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a1:74:87:4b:4f:91:96:92:4a:3a:4f:b2:e7:
93:bb:88:fb:22:b6:f3:ba:56:22:e0:4b:f9:42:c5:
45:32:55:84:d5:bc:58:0a:52:63:16:26:07:85:54:
4a:4e:93:b8:b2:02:d3:e0:71:28:62:0a:fc:c1:28:
3f:16:a4:14:eb:47:16:b3:ed:4c:07:fe:f7:da:b4:
ad:2a:43:f8:d5:44:c0:16:4b:72:5b:24:02:fd:00:
b8:0b:d9:ca:cb:fb:9c:0c:51:15:0d:63:d9:9c:5f:
d8:8f:4e:49:f8:2a:b8:85:53:d5:7c:12:88:b4:4e:
b8:6b:94:ae:68:36:c9:08:fe:13:cc:76:83:65:98:
ac:ab:fe:85:af:d5:45:7d:e0:22:69:3c:49:d8:ce:
e6:0c:a1:17:72:d4:8d:f2:42:bb:eb:b5:52:56:97:
78:c5:80:d2:dc:ec:b4:34:94:13:8a:e3:4a:37:19:
54:06:66:bf:1d:52:1a:99:1d:dc:d3:29:86:fc:44:
15:bf:02:63:ca:6f:4d:49:e7:e2:01:b8:ac:8c:e7:
d9:f5:59:c8:1e:82:de:df:1e:32:35:b7:db:3b:ed:
5c:94:ae:eb:2b:f8:36:05:17:a6:df:02:48:1e:dd:
79:8e:0a:05:d8:d0:c8:15:ac:1c:b2:1e:da:27:5a:
3b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EA:47:06:33:23:55:B0:38:99:90:7E:B9:58:A7:F3:EB:0C:AA:6F
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/0OpHBjMjVbA4mZB-uVin8-sMqm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:b0::/44
2a0d:d940:400::/40
2a0d:d940:900f::/48
Signature Algorithm: sha256WithRSAEncryption
e8:aa:63:e2:29:91:61:5d:f4:4a:f6:d2:ad:6e:dd:2a:2b:de:
f5:2a:dc:cd:5b:2e:a4:2c:fe:b3:bf:b6:60:a7:33:e7:7f:7a:
33:4c:a3:e6:aa:06:59:2a:02:d6:13:eb:a8:26:c5:32:45:b9:
5f:2f:14:09:fb:e8:e6:5b:bc:a4:79:d4:fa:e1:6d:1c:b6:63:
eb:d9:7c:91:98:13:45:04:bf:39:9d:35:a9:b3:e9:d2:50:cf:
c9:f7:02:13:9f:4d:ed:f1:ad:6e:ef:4f:d8:62:cf:d8:e9:6f:
15:bf:8c:1e:65:3b:08:ef:2e:da:ec:f8:51:4c:57:d2:c0:0e:
7d:8e:0c:d5:de:45:25:05:60:f6:c4:1e:d0:16:be:ee:d1:32:
39:40:e6:13:e6:cc:a2:d8:8e:7a:06:47:32:ae:b6:9d:ae:88:
b2:d4:30:36:ad:e6:a4:d2:71:2b:5c:a1:82:6f:72:77:9d:7f:
dc:97:9f:74:74:71:15:75:b4:40:4f:8a:a8:bd:e9:03:c1:f5:
6f:66:97:b3:3a:b2:44:29:9e:fb:35:58:d7:bc:20:85:70:51:
c1:de:0a:90:13:94:4a:9f:7f:2b:ca:33:7d:d9:d8:23:01:09:
03:48:92:74:ca:fe:3f:17:88:01:3d:41:df:25:87:8e:e9:9b:
5a:5c:6e:bb
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZ7QLHf+8b/zRwc8vG7ZDpA7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYwNjE2MTEyMzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGVhNDcwNjMzMjM1NWIwMzg5OTkwN2ViOTU4YTdmM2ViMGNhYTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6F0h0tPkZaSSjpPsueTu4j7Irbz
ulYi4Ev5QsVFMlWE1bxYClJjFiYHhVRKTpO4sgLT4HEoYgr8wSg/FqQU60cWs+1M
B/732rStKkP41UTAFktyWyQC/QC4C9nKy/ucDFEVDWPZnF/Yj05J+Cq4hVPVfBKI
tE64a5SuaDbJCP4TzHaDZZisq/6Fr9VFfeAiaTxJ2M7mDKEXctSN8kK767VSVpd4
xYDS3Oy0NJQTiuNKNxlUBma/HVIamR3c0ymG/EQVvwJjym9NSefiAbisjOfZ9VnI
HoLe3x4yNbfbO+1clK7rK/g2BRem3wJIHt15jgoF2NDIFawcsh7aJ1o7eQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFNDqRwYzI1WwOJmQfrlYp/PrDKpvMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvME9wSEJqTWpWYkE0bVpCLXVWaW44LXNNcW04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAAjAaAwcEKg3ZQACw
AwYAKg3ZQAQDBwAqDdlAkA8wDQYJKoZIhvcNAQELBQADggEBAOiqY+IpkWFd9Er2
0q1u3Sor3vUq3M1bLqQs/rO/tmCnM+d/ejNMo+aqBlkqAtYT66gmxTJFuV8vFAn7
6OZbvKR51PrhbRy2Y+vZfJGYE0UEvzmdNamz6dJQz8n3AhOfTe3xrW7vT9hiz9jp
bxW/jB5lOwjvLtrs+FFMV9LADn2ODNXeRSUFYPbEHtAWvu7RMjlA5hPmzKLYjnoG
RzKutp2uiLLUMDat5qTScStcoYJvcnedf9yXn3R0cRV1tEBPiqi96QPB9W9ml7M6
skQpnvs1WNe8IIVwUcHeCpATlEqffyvKM33Z2CMBCQNIknTK/j8XiAE9Qd8lh47p
m1pcbrs=
-----END CERTIFICATE-----
Generated at Sat Jun 20 06:10:15 2026 by rpki-client