Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/2uXg4bCYaKF9oPJdCdjV6Wm1vh4.roa
File: 2uXg4bCYaKF9oPJdCdjV6Wm1vh4.roa (raw, json)
Hash identifier: 5tjCrY36HsZMSJr5X8JRn7jNNeAR4rTtUEYxTdqrzbE=
Subject key identifier: DA:E5:E0:E1:B0:98:68:A1:7D:A0:F2:5D:09:D8:D5:E9:69:B5:BE:1E
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019FC479F8948509B9122D36F566E528427B
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/2uXg4bCYaKF9oPJdCdjV6Wm1vh4.roa
Signing time: Sun 02 Aug 2026 21:55:55 +0000
ROA not before: Sun 02 Aug 2026 21:55:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219336
IP address blocks: 2a0d:d940:2019::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c4:79:f8:94:85:09:b9:12:2d:36:f5:66:e5:28:42:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Aug 2 21:55:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dae5e0e1b09868a17da0f25d09d8d5e969b5be1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:87:2e:95:28:76:7f:7d:55:4b:8d:88:95:01:
35:e2:9d:bc:76:d7:e6:b5:86:e4:d2:01:e6:1b:cb:
21:eb:60:44:0a:d2:08:02:28:b6:b7:16:b2:45:56:
9c:a6:c2:15:fa:f8:e6:1b:d7:b4:0c:2d:d3:c5:f6:
dd:60:59:dd:b0:1f:3b:9a:4d:87:a1:eb:3d:4b:de:
6c:c4:e5:b7:49:22:dd:ce:a9:9b:34:ea:9e:ac:ac:
48:04:e9:56:11:3a:25:55:73:d7:69:6c:a3:5e:1c:
a2:56:2c:23:95:3d:ca:c0:fb:71:52:a4:e1:a2:fd:
18:bb:6f:6b:2b:7a:a5:c7:83:07:eb:d8:62:05:f2:
72:90:81:2e:4b:ec:ed:ee:d1:73:5a:36:9e:9f:fb:
86:e3:a6:7b:79:4e:08:9b:67:43:30:4a:3a:68:a5:
ef:56:da:19:5d:a0:ab:7f:19:84:b3:30:3d:f7:30:
d1:bb:5d:c7:af:ac:31:a6:0f:ec:3b:7b:01:82:08:
f6:8d:7d:5c:ec:a4:07:2b:24:3f:0e:18:79:6a:a8:
08:da:e3:5e:8b:ec:22:d9:3d:93:eb:49:5e:e4:3b:
3f:fd:f6:be:86:c9:56:99:30:63:81:bf:af:64:43:
6d:8e:4e:52:9f:15:6d:7d:98:ab:d6:82:df:a4:d9:
ad:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E5:E0:E1:B0:98:68:A1:7D:A0:F2:5D:09:D8:D5:E9:69:B5:BE:1E
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/2uXg4bCYaKF9oPJdCdjV6Wm1vh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:2019::/48
Signature Algorithm: sha256WithRSAEncryption
48:77:a8:8a:11:7a:e7:50:61:28:13:93:5c:11:9a:92:ce:d9:
a0:0c:ad:de:68:d0:7b:0a:7f:41:15:1c:cb:5f:aa:c3:e7:fe:
00:46:a8:f0:c7:98:d8:f4:b2:02:1f:3c:ca:58:99:77:cf:b7:
ac:f9:a9:19:a3:7d:8b:2f:0d:81:fb:54:a7:bc:0e:b5:df:2b:
c3:7b:72:4f:fb:9d:9b:75:ce:43:cc:d4:2b:d1:2b:6d:fe:87:
11:80:94:81:76:d6:b2:48:45:c3:bf:f4:19:58:77:5b:27:c0:
5b:4d:2d:d6:37:f7:65:45:f4:44:ef:27:c8:29:a4:d3:dd:38:
ba:28:05:95:a4:f0:86:6b:2f:5c:c4:32:b6:34:d7:8a:f2:71:
8d:b4:38:a3:e0:29:32:da:25:b4:1f:c3:e1:84:84:02:d4:5d:
d2:da:2e:4c:fa:97:f9:eb:09:47:1d:ad:28:70:94:c6:41:10:
3d:33:59:ed:f8:d8:80:98:92:e2:bf:62:84:7f:39:f1:9f:c1:
a4:63:c9:36:b4:e2:ea:30:8f:23:13:a6:3d:5d:16:55:cd:25:
56:da:12:0f:46:6d:9a:61:25:28:be:c9:a9:01:71:38:9c:c0:
0e:12:91:39:51:bf:a3:1e:63:06:0d:8a:b8:c4:0e:18:8d:48:
09:db:60:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:44 2026 by rpki-client