Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/MbRih6JIWSz1RTEFFFSyO0Lzatk.roa
File: MbRih6JIWSz1RTEFFFSyO0Lzatk.roa (raw, json)
Hash identifier: Gzo5ZAGdUHx4qdxQcj511e5dP/n5lANKrO4fyHDoXdQ=
Subject key identifier: 31:B4:62:87:A2:48:59:2C:F5:45:31:05:14:54:B2:3B:42:F3:6A:D9
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01A0071F50B38B4579D54FF1F2CDF6C40B65
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/MbRih6JIWSz1RTEFFFSyO0Lzatk.roa
Signing time: Sat 15 Aug 2026 20:31:27 +0000
ROA not before: Sat 15 Aug 2026 20:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11967
IP address blocks: 2a0d:d940:2004::/48 maxlen: 48
2a0d:d940:2006::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:07:1f:50:b3:8b:45:79:d5:4f:f1:f2:cd:f6:c4:0b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Aug 15 20:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31b46287a248592cf54531051454b23b42f36ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:3a:9a:bb:67:f4:b2:ec:df:01:99:6b:39:0a:
0f:d3:b1:e7:b5:af:7b:98:ee:1b:0e:4d:89:67:19:
1e:d7:33:35:00:01:e2:46:16:01:d0:ec:69:46:96:
e4:94:d7:8a:06:d0:ca:f0:ff:f8:d5:fa:f4:bd:b8:
75:ad:18:92:6b:6c:ab:45:98:2a:54:5b:a2:fc:f0:
22:41:12:1f:85:db:98:01:8f:c3:6f:8d:a5:e1:84:
71:3a:5f:90:88:00:4f:35:c9:88:5a:1f:55:cd:81:
39:a7:b1:94:b2:f2:3f:d8:5a:a1:d1:6a:62:12:c3:
be:01:6c:ee:50:45:8b:34:fa:78:cf:bc:00:6a:66:
76:1e:4e:94:22:a3:5c:18:39:71:5b:fb:a2:92:2f:
7c:ad:db:37:f2:fa:e4:9c:56:55:ca:f9:94:da:bf:
16:ad:e1:e7:ca:5d:50:c3:c9:e8:87:54:69:96:1b:
0b:88:ab:59:8f:b3:3d:54:dd:96:af:33:34:ba:e9:
5f:74:ca:d7:3f:9d:5e:f6:f4:c9:92:de:3f:fa:e1:
4f:c8:2b:ec:bd:90:db:07:34:36:11:6c:cf:24:14:
22:25:15:21:da:31:e3:cc:ed:15:d0:e7:87:67:df:
a2:41:85:a6:96:be:9e:16:c7:c8:24:2e:1d:a1:04:
4e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B4:62:87:A2:48:59:2C:F5:45:31:05:14:54:B2:3B:42:F3:6A:D9
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/MbRih6JIWSz1RTEFFFSyO0Lzatk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:2004::/48
2a0d:d940:2006::/48
Signature Algorithm: sha256WithRSAEncryption
b2:e9:66:01:c8:e2:cb:10:b3:4e:84:cc:b5:e0:6f:ae:f5:31:
88:38:33:4b:25:df:7b:69:99:99:8a:6f:24:dc:5d:5e:67:ee:
3b:09:8d:f3:1e:f4:48:50:cd:0e:c1:38:c2:00:f8:79:9b:29:
ac:5f:51:0f:a0:9c:c2:2a:67:32:9f:7f:4a:1b:7b:f5:1e:fc:
59:f4:37:25:56:7d:85:f0:7f:9d:55:e4:ca:ab:00:78:9e:01:
74:96:2f:2e:f3:26:05:f0:4b:72:fa:ef:2b:d7:72:a0:26:2f:
4f:01:79:f7:72:da:2f:a2:87:d4:c8:bb:05:0a:af:6c:e8:9a:
d5:93:5a:f2:a2:53:7a:68:97:33:bc:63:7e:77:52:c5:bd:21:
50:c7:33:d3:bf:1b:27:d1:2e:55:2a:1e:82:02:d5:65:9c:9c:
4a:e4:1d:a7:e6:6d:85:ac:08:7b:60:51:8a:f9:54:3e:8f:3d:
eb:33:8d:91:11:3c:12:b3:6e:bf:54:c9:79:10:44:0c:4f:07:
d2:06:d7:b3:58:70:67:e1:42:6e:65:e6:c4:1f:bc:cd:90:4b:
45:2b:9c:46:55:26:61:c9:8e:94:53:9f:fb:a8:b1:99:3c:ee:
81:00:d9:6a:50:86:5c:1f:59:8f:cf:ae:9a:96:bd:be:28:e0:
b4:e7:18:dc
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaAHH1Czi0V51U/x8s32xAtlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYwODE1MjAzMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWI0NjI4N2EyNDg1OTJjZjU0NTMxMDUxNDU0YjIzYjQyZjM2YWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Tqau2f0suzfAZlrOQoP07Hnta97
mO4bDk2JZxke1zM1AAHiRhYB0OxpRpbklNeKBtDK8P/41fr0vbh1rRiSa2yrRZgq
VFui/PAiQRIfhduYAY/Db42l4YRxOl+QiABPNcmIWh9VzYE5p7GUsvI/2Fqh0Wpi
EsO+AWzuUEWLNPp4z7wAamZ2Hk6UIqNcGDlxW/uiki98rds38vrknFZVyvmU2r8W
reHnyl1Qw8noh1RplhsLiKtZj7M9VN2WrzM0uulfdMrXP51e9vTJkt4/+uFPyCvs
vZDbBzQ2EWzPJBQiJRUh2jHjzO0V0OeHZ9+iQYWmlr6eFsfIJC4doQRO4QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDG0YoeiSFks9UUxBRRUsjtC82rZMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvTWJSaWg2SklXU3oxUlRFRkZGU3lPMEx6YXRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg3ZQCAE
AwcAKg3ZQCAGMA0GCSqGSIb3DQEBCwUAA4IBAQCy6WYByOLLELNOhMy14G+u9TGI
ODNLJd97aZmZim8k3F1eZ+47CY3zHvRIUM0OwTjCAPh5mymsX1EPoJzCKmcyn39K
G3v1HvxZ9DclVn2F8H+dVeTKqwB4ngF0li8u8yYF8Ety+u8r13KgJi9PAXn3ctov
oofUyLsFCq9s6JrVk1ryolN6aJczvGN+d1LFvSFQxzPTvxsn0S5VKh6CAtVlnJxK
5B2n5m2FrAh7YFGK+VQ+jz3rM42RETwSs26/VMl5EEQMTwfSBtezWHBn4UJuZebE
H7zNkEtFK5xGVSZhyY6UU5/7qLGZPO6BANlqUIZcH1mPz66alr2+KOC05xjc
-----END CERTIFICATE-----
Generated at Wed Aug 26 17:25:05 2026 by rpki-client