Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/KwdEgivLZej_qtf1VreoYtJ_vws.roa
File: KwdEgivLZej_qtf1VreoYtJ_vws.roa (raw, json)
Hash identifier: z4aAMORv9yfbBwX4s8y3vMCAH+jOZy1idA0nGt2GZcA=
Subject key identifier: 2B:07:44:82:2B:CB:65:E8:FF:AA:D7:F5:56:B7:A8:62:D2:7F:BF:0B
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019FC6735809C6B66CABB280FFDCAAF10401
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/KwdEgivLZej_qtf1VreoYtJ_vws.roa
Signing time: Mon 03 Aug 2026 07:07:55 +0000
ROA not before: Mon 03 Aug 2026 07:07:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216039
IP address blocks: 2a0d:d940:600::/42 maxlen: 42
2a0d:d940:640::/42 maxlen: 42
2a0d:d940:680::/42 maxlen: 42
2a0d:d940:6c0::/42 maxlen: 42
2a0d:d940:900b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:73:58:09:c6:b6:6c:ab:b2:80:ff:dc:aa:f1:04:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Aug 3 07:07:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b0744822bcb65e8ffaad7f556b7a862d27fbf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:07:9c:0a:14:8c:15:42:f2:fd:50:64:1c:
84:fd:d0:29:b2:d3:9f:24:ca:6a:76:37:d2:1e:e5:
df:64:90:4a:3f:f6:93:89:0a:86:47:d9:ee:0f:e0:
fd:8b:b7:71:47:25:04:5b:a4:b0:9f:83:83:0c:eb:
54:6a:df:bf:d8:f8:50:77:bb:a2:fc:7a:9b:13:bf:
bd:90:19:5d:e7:e7:5f:e9:49:e0:6e:9a:01:bf:d1:
3d:6f:d1:70:4d:5d:c2:fd:0e:a1:c9:5e:5d:cc:db:
cf:5b:ca:2a:60:a1:07:49:4b:21:23:e1:fb:88:d0:
ab:fa:9c:24:ab:68:7b:76:31:bc:ce:a5:8e:d8:5e:
68:8b:f9:ec:ad:cf:7b:72:fe:fe:a4:48:6d:83:0b:
68:9d:09:27:63:3e:ff:d8:fc:27:5b:27:30:b0:18:
b7:6c:72:ea:2f:a4:03:be:4a:16:90:b3:1f:ff:df:
71:c1:ce:d8:bd:34:5e:24:f5:5d:a2:a3:f4:bd:88:
cd:64:d8:79:9d:c0:13:b5:b7:5a:b1:e3:5f:64:2d:
e8:1a:c1:11:68:c6:48:e8:97:c3:40:87:08:61:dc:
e0:53:03:22:88:c2:99:af:45:8c:4b:a6:b4:b9:5f:
7c:92:62:77:08:fb:58:e4:23:84:b9:dd:9a:9a:c2:
54:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:07:44:82:2B:CB:65:E8:FF:AA:D7:F5:56:B7:A8:62:D2:7F:BF:0B
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/KwdEgivLZej_qtf1VreoYtJ_vws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:600::/40
2a0d:d940:900b::/48
Signature Algorithm: sha256WithRSAEncryption
8a:48:d5:d4:06:d3:4f:83:68:52:78:50:25:8d:e7:c6:08:ef:
a4:f2:17:c1:4d:57:56:76:13:f7:39:52:0d:0e:e2:01:c0:67:
6b:df:22:66:d1:72:86:4d:39:12:c8:34:09:5e:a0:b8:4b:b0:
22:85:8d:39:18:36:cd:2d:38:6d:4a:ae:9b:38:6c:94:d4:1c:
37:d6:b3:b2:df:3d:3d:21:cd:2f:91:3e:09:27:d7:a9:a2:ff:
f7:cd:f2:3f:e5:28:5f:60:e4:46:2c:d0:8f:23:2d:70:15:1c:
f5:91:38:81:9d:72:c0:89:c2:50:0b:ae:6a:43:8e:83:5a:7f:
6d:c7:e8:b4:06:61:ce:b6:47:86:9d:55:06:f2:41:ce:54:2c:
55:45:67:20:0d:cd:2e:0b:4b:9f:1c:62:75:6a:cc:d0:31:a9:
c5:c1:13:d6:2b:fa:cd:80:85:d8:2c:b2:55:d5:01:17:ef:64:
4e:67:5b:df:4a:c9:4e:cc:3a:39:61:20:9e:ad:a3:78:e1:a7:
cd:2d:7e:88:64:09:3a:24:f5:f2:58:91:45:cd:6c:ca:da:5b:
c4:4f:27:d6:24:fc:e4:9f:9a:af:b4:67:be:51:b2:bf:94:3c:
cc:4c:b7:91:e5:3d:30:73:ac:86:1b:ef:61:3a:94:27:3f:d6:
cf:27:a7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:19:06 2026 by rpki-client