Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/0QthiSfqOfGvEu0-Qi1-9rPRSsw.roa
File: 0QthiSfqOfGvEu0-Qi1-9rPRSsw.roa (raw, json)
Hash identifier: nUiF7YYhFFA0PU4PsoJh5DI7dbIDLsAv87+8iFOVqVA=
Subject key identifier: D1:0B:61:89:27:EA:39:F1:AF:12:ED:3E:42:2D:7E:F6:B3:D1:4A:CC
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01A01894EB243ABE01D4CF5AB2E011C89420
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/0QthiSfqOfGvEu0-Qi1-9rPRSsw.roa
Signing time: Wed 19 Aug 2026 05:53:27 +0000
ROA not before: Wed 19 Aug 2026 05:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219208
IP address blocks: 2a0d:d941::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:94:eb:24:3a:be:01:d4:cf:5a:b2:e0:11:c8:94:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Aug 19 05:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d10b618927ea39f1af12ed3e422d7ef6b3d14acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:85:a9:b5:71:64:1c:44:b8:b0:6b:b1:b9:
75:4a:1c:98:0c:96:db:d2:ad:c5:c7:de:ba:03:60:
9f:52:f8:13:b6:df:d6:b1:f8:e6:03:08:1e:c4:71:
d6:72:24:1a:06:b6:d4:b4:dd:7e:25:75:3b:93:bd:
dc:9d:15:66:8d:14:0d:11:27:af:2e:3c:de:c2:28:
5f:33:1c:4d:ff:e6:3a:43:6a:45:ac:f7:19:94:31:
88:89:a7:0e:c4:e3:46:a0:0b:ee:56:8a:ab:6d:46:
47:d4:13:f1:6f:9f:03:57:7c:cc:85:86:ee:43:65:
8f:43:68:41:ff:2c:8b:7f:4f:b7:e3:bd:81:a1:ba:
70:b9:07:32:17:c7:7f:15:47:32:e4:25:58:1e:23:
a5:7b:dc:ac:78:f1:d4:84:cd:80:1a:b8:cf:90:66:
ba:bc:e4:a9:6f:32:a1:5f:a3:2f:2c:3d:16:7c:a5:
8b:ec:2d:8d:36:2d:f3:d8:89:27:f8:6d:75:77:dc:
19:09:43:d1:98:54:6b:bb:5c:d0:6a:36:d8:81:60:
d6:37:29:b4:53:ea:34:b7:8e:90:ff:aa:9f:31:27:
4b:8e:bb:7d:30:65:81:7e:07:54:b7:89:24:d3:02:
5a:22:0e:a1:f8:32:8f:7f:df:48:34:a4:f5:40:72:
69:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0B:61:89:27:EA:39:F1:AF:12:ED:3E:42:2D:7E:F6:B3:D1:4A:CC
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/0QthiSfqOfGvEu0-Qi1-9rPRSsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d941::/36
Signature Algorithm: sha256WithRSAEncryption
b8:ba:61:1f:69:9c:7d:82:86:6f:8a:b1:51:25:56:1e:81:78:
7a:46:e5:f1:cd:10:8d:90:9d:34:2c:31:94:f6:69:0e:c6:d7:
fc:58:a8:30:3c:11:55:df:c7:29:cd:8f:a0:98:0e:5d:ec:19:
86:65:2f:03:99:4c:f2:a3:d3:36:e9:38:40:90:4c:c4:19:e4:
03:54:9b:78:27:bd:41:9c:9e:f1:eb:64:fa:f8:a0:f2:a5:f8:
6c:7a:e8:45:97:10:6b:b4:56:0c:4e:5b:a7:98:cf:9c:d4:1a:
9f:94:45:f4:0a:2b:fd:de:64:fe:94:07:bc:26:2f:95:05:5d:
9b:70:6c:f8:9e:02:f8:b1:14:72:53:e0:5d:b7:f8:0f:2b:2f:
49:f0:98:22:b9:90:79:f6:5e:cd:94:2b:9e:d2:4f:bb:3c:43:
9b:3b:81:67:08:fc:63:8b:2f:95:c7:43:b1:47:52:09:97:dd:
4d:3e:93:ae:ed:fc:ab:46:04:e0:2b:d7:1c:04:13:34:e8:ea:
4a:86:25:fe:c9:51:9b:c8:9e:66:d3:5a:f0:d5:65:26:db:43:
ce:44:8b:de:4b:b0:e5:09:48:b4:79:02:1d:68:0c:54:88:a3:
46:43:5a:ba:96:2e:55:52:ce:60:ec:84:7b:4a:36:c2:0c:89:
6f:61:aa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:49 2026 by rpki-client