Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/0ujXrGQTao7zE0UXYj0QEZetn9M.roa
File: 0ujXrGQTao7zE0UXYj0QEZetn9M.roa (raw, json)
Hash identifier: SxU2SJlRSmNPPjg7I0n+fsfsrGwbPEb2o3ed/Qx4SL0=
Subject key identifier: D2:E8:D7:AC:64:13:6A:8E:F3:13:45:17:62:3D:10:11:97:AD:9F:D3
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019EFB0B7E1F4577EF3E5110594375405758
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/0ujXrGQTao7zE0UXYj0QEZetn9M.roa
Signing time: Wed 24 Jun 2026 19:11:34 +0000
ROA not before: Wed 24 Jun 2026 19:11:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213887
IP address blocks: 2a0d:d940:1e00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:0b:7e:1f:45:77:ef:3e:51:10:59:43:75:40:57:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jun 24 19:11:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2e8d7ac64136a8ef3134517623d101197ad9fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:29:04:6b:42:1d:f6:fe:c3:3a:ff:94:75:
05:40:06:45:7a:de:9f:3e:0b:9d:f7:6c:e8:95:41:
33:34:89:ca:53:62:4b:88:70:9f:a8:25:2e:c6:09:
e6:a1:db:1f:50:72:79:70:c2:b7:a8:65:f5:33:ef:
ca:05:2b:15:59:bd:45:6c:29:39:82:40:c5:aa:62:
cd:12:dd:bd:7a:cf:5d:3f:d7:44:b4:61:52:04:d0:
e3:5d:47:ca:a1:d8:76:03:e7:bf:fd:88:12:1f:a7:
46:2b:4f:da:3b:cb:8b:94:59:1c:17:7d:ba:a8:d1:
5c:35:1e:80:26:2d:4e:9c:8a:92:0a:77:04:e7:ca:
ad:60:c0:00:b7:8f:ed:34:c6:71:a2:06:15:21:9e:
35:0a:01:a1:f4:07:11:6e:96:ac:d0:ab:06:40:f2:
c9:df:1f:22:41:63:6c:1d:c3:40:8e:f0:00:f3:80:
fe:de:ce:c1:e5:38:7d:74:54:66:b1:bb:a5:85:b5:
73:b1:04:a5:4b:29:28:82:9d:57:9e:1c:9b:6b:19:
f9:91:d1:38:d0:3c:c0:91:78:3c:01:62:23:07:9e:
00:8f:2b:8f:ac:38:8a:67:d7:8b:11:a9:6b:a0:d2:
25:ba:cb:f1:f3:c4:a6:f0:4f:5e:35:db:40:ef:f2:
ed:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E8:D7:AC:64:13:6A:8E:F3:13:45:17:62:3D:10:11:97:AD:9F:D3
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/0ujXrGQTao7zE0UXYj0QEZetn9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:1e00::/40
Signature Algorithm: sha256WithRSAEncryption
64:25:7f:29:e6:57:e2:5a:0e:f7:a1:0a:a6:d5:9f:57:ee:01:
b7:b7:a9:04:78:10:30:70:aa:e3:27:b2:11:97:79:7b:0e:aa:
2b:38:3f:45:00:e4:82:94:56:8b:e6:b1:e1:b5:21:df:7a:7c:
34:5d:b9:ad:59:c8:b9:6b:ff:2f:1c:9e:ab:d0:78:5d:ed:c0:
5a:9a:0f:f4:67:99:c0:76:b4:34:8b:b3:0a:85:2f:29:67:dd:
2b:7d:5d:da:e7:6b:66:54:86:cd:b3:33:75:47:96:1b:24:d5:
c0:65:2c:63:54:6e:2d:15:c4:bd:fd:1d:44:75:f3:1c:67:5e:
f0:ce:ad:f1:27:f9:18:6e:6a:84:33:61:fa:38:26:e1:64:ef:
e5:69:be:49:c5:08:03:ca:d6:5f:ef:08:96:5b:65:a6:1e:d1:
80:2c:4a:1a:69:d1:1a:a1:2b:11:e0:f1:5c:1a:48:6b:9d:e8:
28:ef:b1:c8:4e:f9:ea:70:4c:f4:31:f3:b4:90:90:47:fb:4d:
b5:18:a2:1c:af:aa:1e:d3:cf:60:01:1e:44:61:4f:0c:5f:5b:
91:99:3c:b1:eb:14:c4:64:5f:01:61:fe:6f:99:fc:d3:17:e5:
c7:ba:99:47:3c:1b:8d:42:9d:5c:bb:2b:86:cf:2f:2e:d2:3d:
7f:0c:23:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:45:03 2026 by rpki-client