Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/N1PnU8iPr9EZ13dG8X64cG4ulKU.roa
File: N1PnU8iPr9EZ13dG8X64cG4ulKU.roa (raw, json)
Hash identifier: WHTt+fy/y2G++OYg+GB5IyURYY6HPSdNxpGg5oSsuIE=
Subject key identifier: 37:53:E7:53:C8:8F:AF:D1:19:D7:77:46:F1:7E:B8:70:6E:2E:94:A5
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019F7F27ADF7BC8701D42EBFBA7485812270
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/N1PnU8iPr9EZ13dG8X64cG4ulKU.roa
Signing time: Mon 20 Jul 2026 10:52:14 +0000
ROA not before: Mon 20 Jul 2026 10:52:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201541
IP address blocks: 2a0d:d940:2002::/48 maxlen: 48
2a0d:d940:200e::/48 maxlen: 48
2a0d:d940:3ecc::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:27:ad:f7:bc:87:01:d4:2e:bf:ba:74:85:81:22:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jul 20 10:52:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3753e753c88fafd119d77746f17eb8706e2e94a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b5:23:4a:4c:35:46:8e:ea:84:bb:62:c4:8e:
2e:10:5d:f6:f7:ee:90:8e:bc:6b:32:68:45:71:4d:
53:c5:95:c1:5a:93:fc:5f:8c:ea:27:fd:16:f7:aa:
20:e7:04:92:4a:cf:3d:61:e8:e5:eb:89:1d:8e:fb:
21:7a:da:3b:20:03:11:b8:6a:21:d0:f1:36:53:f6:
85:6c:d1:ed:52:7c:df:6a:2d:46:3d:22:ff:c4:dd:
40:1b:6d:24:df:54:69:02:86:87:70:09:84:33:bc:
16:59:7e:13:48:53:9c:b1:6b:30:bf:01:0e:0f:83:
f1:dd:94:67:cc:ef:82:6a:01:ae:6e:9d:43:12:76:
e5:ce:80:bb:70:d0:44:61:e8:cd:6b:8f:7c:f6:87:
b6:c7:e7:80:79:59:c1:30:e2:52:ba:41:ca:4e:bd:
76:6c:ea:65:05:38:76:13:b2:3b:e6:b2:7b:ce:37:
80:10:02:0c:11:fd:ec:59:ed:4f:1d:4b:d1:29:ca:
95:24:cf:87:a1:e1:70:d8:43:79:0d:93:06:8f:47:
b0:09:96:d6:6a:6a:44:45:4e:70:df:c0:f0:85:1d:
b5:73:ac:46:7e:11:06:02:67:54:96:ad:15:c5:70:
f3:af:ad:90:53:4b:81:3e:8b:b8:eb:45:6a:88:b6:
d3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:53:E7:53:C8:8F:AF:D1:19:D7:77:46:F1:7E:B8:70:6E:2E:94:A5
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/N1PnU8iPr9EZ13dG8X64cG4ulKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:2002::/48
2a0d:d940:200e::/48
2a0d:d940:3ecc::/46
Signature Algorithm: sha256WithRSAEncryption
06:30:56:56:de:69:a6:6a:f7:a6:93:29:78:b3:16:7f:9f:0d:
59:f8:01:69:9b:22:4e:89:c1:18:e6:84:da:0a:ec:3d:bb:2c:
ae:43:13:1d:b7:53:4c:03:ab:4c:cc:31:f3:74:fe:cd:8e:1e:
a9:2c:93:d4:67:30:ae:59:81:58:68:13:76:06:d5:48:4e:36:
95:0c:f1:a0:e1:ac:eb:7a:cc:03:60:cf:5b:a8:d1:99:f1:4c:
32:45:9b:80:65:82:53:5d:98:92:6b:6f:e3:60:df:2b:ac:0e:
a3:d5:0a:03:fb:cf:7a:b5:5a:c3:35:6d:0e:af:88:68:af:3f:
73:59:17:89:09:4e:20:1e:5f:a0:19:c1:dd:17:31:77:e4:62:
a8:6f:64:47:7a:ca:2a:9a:f1:5f:cd:ab:5e:92:bc:dc:70:91:
7c:9a:de:29:cb:c7:93:ca:4c:a3:06:6f:a4:cd:68:a3:39:b2:
a8:7a:4b:09:b9:99:5c:46:e9:0f:78:64:3b:75:e2:98:3f:3f:
aa:de:d4:d6:68:f5:57:4f:62:9e:ca:a4:4e:ce:52:76:4c:e6:
cd:c0:f0:73:fa:b1:1d:25:27:c3:5b:65:a4:7b:9c:e8:9a:49:
1e:b7:7e:ed:73:5c:1d:b3:93:f5:88:34:2e:d4:b8:00:ae:d1:
9c:8e:04:03
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ9/J633vIcB1C6/unSFgSJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYwNzIwMTA1MjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzUzZTc1M2M4OGZhZmQxMTlkNzc3NDZmMTdlYjg3MDZlMmU5NGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrUjSkw1Ro7qhLtixI4uEF329+6Q
jrxrMmhFcU1TxZXBWpP8X4zqJ/0W96og5wSSSs89Yejl64kdjvsheto7IAMRuGoh
0PE2U/aFbNHtUnzfai1GPSL/xN1AG20k31RpAoaHcAmEM7wWWX4TSFOcsWswvwEO
D4Px3ZRnzO+CagGubp1DEnblzoC7cNBEYejNa4989oe2x+eAeVnBMOJSukHKTr12
bOplBTh2E7I75rJ7zjeAEAIMEf3sWe1PHUvRKcqVJM+HoeFw2EN5DZMGj0ewCZbW
ampERU5w38DwhR21c6xGfhEGAmdUlq0VxXDzr62QU0uBPou460VqiLbTcQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFDdT51PIj6/RGdd3RvF+uHBuLpSlMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvTjFQblU4aVByOUVaMTNkRzhYNjRjRzR1bEtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKg3ZQCAC
AwcAKg3ZQCAOAwcCKg3ZQD7MMA0GCSqGSIb3DQEBCwUAA4IBAQAGMFZW3mmmavem
kyl4sxZ/nw1Z+AFpmyJOicEY5oTaCuw9uyyuQxMdt1NMA6tMzDHzdP7Njh6pLJPU
ZzCuWYFYaBN2BtVITjaVDPGg4azreswDYM9bqNGZ8UwyRZuAZYJTXZiSa2/jYN8r
rA6j1QoD+896tVrDNW0Or4horz9zWReJCU4gHl+gGcHdFzF35GKob2RHesoqmvFf
zatekrzccJF8mt4py8eTykyjBm+kzWijObKoeksJuZlcRukPeGQ7deKYPz+q3tTW
aPVXT2KeyqROzlJ2TObNwPBz+rEdJSfDW2Wke5zomkket37tc1wds5P1iDQu1LgA
rtGcjgQD
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:44:32 2026 by rpki-client