Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/I_vEplAASFx4KhybyZzDzwqZv6M.roa
File: I_vEplAASFx4KhybyZzDzwqZv6M.roa (raw, json)
Hash identifier: sd32U7If3+O56twYXlOQoz03s+eN2XCM/UpFwA5RQ7M=
Subject key identifier: 23:FB:C4:A6:50:00:48:5C:78:2A:1C:9B:C9:9C:C3:CF:0A:99:BF:A3
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01A0071F512BE56008079E34A9D44C68B047
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/I_vEplAASFx4KhybyZzDzwqZv6M.roa
Signing time: Sat 15 Aug 2026 20:31:27 +0000
ROA not before: Sat 15 Aug 2026 20:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199133
IP address blocks: 2a0d:d940:50::/47 maxlen: 47
2a0d:d940:52::/47 maxlen: 47
2a0d:d940:5e::/48 maxlen: 48
2a0d:d940:1100::/40 maxlen: 40
2a0d:d940:1300::/40 maxlen: 40
2a0d:d940:1f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:07:1f:51:2b:e5:60:08:07:9e:34:a9:d4:4c:68:b0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Aug 15 20:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23fbc4a65000485c782a1c9bc99cc3cf0a99bfa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dc:03:b4:87:77:18:4c:91:9b:5c:79:dd:16:
c5:98:4b:b7:1f:2a:15:f2:8e:5e:1e:94:63:e6:9c:
12:0a:f3:60:7e:c8:94:20:2a:05:92:54:7d:0b:d8:
80:59:8f:d3:a4:d9:e2:3a:01:90:c0:9e:22:57:56:
f7:51:a8:0f:1f:74:c5:13:ca:fe:1d:68:67:71:d9:
d6:63:2e:49:3f:99:7c:ac:1f:66:4a:ae:88:25:2b:
19:34:2c:86:ce:8a:e6:4d:96:ec:fe:47:5e:ed:45:
03:33:7e:7f:69:33:14:d5:c3:a4:04:47:d7:23:c9:
fb:60:15:ee:2a:04:a9:70:d7:13:a7:ba:37:d2:e6:
91:24:60:84:ef:b9:fb:62:b8:a7:7a:85:6c:5c:a7:
59:9f:ff:8b:5a:12:f9:f6:80:22:22:63:2f:57:51:
d4:23:05:52:1d:ab:a0:98:4f:5a:2e:e5:98:58:23:
6a:14:69:df:31:59:ce:38:20:73:d6:ca:05:a3:0d:
18:ef:dc:d3:27:d5:85:78:8c:d2:6c:cc:48:86:0b:
5a:33:34:5f:80:b2:a9:41:9e:ad:2f:98:ed:d1:3a:
7f:97:0c:34:20:96:c3:80:aa:19:60:c6:c9:6c:2d:
11:f8:7e:86:0b:b7:33:49:1b:f2:94:ed:18:25:39:
7e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FB:C4:A6:50:00:48:5C:78:2A:1C:9B:C9:9C:C3:CF:0A:99:BF:A3
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/I_vEplAASFx4KhybyZzDzwqZv6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:50::/46
2a0d:d940:5e::/48
2a0d:d940:1100::/40
2a0d:d940:1300::/40
2a0d:d940:1f00::/40
Signature Algorithm: sha256WithRSAEncryption
65:71:61:f7:9b:f4:7c:fe:39:6e:f6:70:30:56:bc:e4:71:a1:
60:1d:d4:95:34:77:96:81:fc:c7:8d:91:76:fc:54:07:7f:b6:
96:84:e1:69:9a:80:6c:9c:29:ba:cd:c6:47:cf:7b:2a:e0:ba:
a7:58:46:75:09:d5:85:eb:32:5b:84:08:1e:b0:42:55:19:fd:
16:2e:5f:5c:4d:cb:67:13:2e:88:76:db:91:07:b1:95:a1:d0:
09:af:42:8e:cc:cc:6a:7c:b4:5d:5b:1a:0e:66:94:4e:13:b2:
d9:87:26:99:1c:f1:2d:cd:ee:47:52:e1:21:67:92:b8:d4:0d:
0e:b4:26:60:cb:a9:3b:79:88:67:85:e1:8d:74:5d:f7:bd:ca:
47:7d:98:b0:6c:5d:cd:39:ed:48:5a:f1:29:1c:c6:0d:ea:4a:
34:c0:20:49:1d:e8:26:7d:10:ce:b7:6a:ac:93:74:53:a8:bb:
f4:97:a5:31:46:8f:6a:d9:d7:05:e9:01:a4:10:47:f5:14:e8:
b4:81:11:b1:2e:a0:80:ae:84:4b:d5:e5:d9:c9:74:58:2c:ea:
35:33:43:1f:0e:c3:23:0a:9d:5c:f1:2f:81:4b:04:51:d5:fa:
87:a4:aa:0b:34:85:9b:04:d1:38:c6:1f:cc:23:95:76:96:13:
55:89:aa:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:45 2026 by rpki-client