Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/S5LS_bpjTSbmRnive3Zl8hzTJg0.roa
File: S5LS_bpjTSbmRnive3Zl8hzTJg0.roa (raw, json)
Hash identifier: mvwM6Y3AjgcGvJLU07xuMwMQhEsH15lCs7wn853KSMs=
Subject key identifier: 4B:92:D2:FD:BA:63:4D:26:E6:46:78:AF:7B:76:65:F2:1C:D3:26:0D
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019EFE9C44EE4254E337F65B9E9E10C2992E
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/S5LS_bpjTSbmRnive3Zl8hzTJg0.roa
Signing time: Thu 25 Jun 2026 11:48:34 +0000
ROA not before: Thu 25 Jun 2026 11:48:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216039
IP address blocks: 2a0d:d940:600::/40 maxlen: 40
2a0d:d940:900b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:9c:44:ee:42:54:e3:37:f6:5b:9e:9e:10:c2:99:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jun 25 11:48:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b92d2fdba634d26e64678af7b7665f21cd3260d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1a:b6:b1:2c:d6:ea:c3:a9:37:2d:81:7e:4a:
44:97:08:eb:12:45:f2:ae:16:62:df:ad:6a:ff:fd:
5d:81:da:ec:9b:54:70:27:56:c6:db:85:8b:4e:06:
28:8c:77:f3:69:da:1a:ff:45:fe:b3:05:77:82:c1:
37:a8:6e:5f:0f:9a:cf:d9:14:e8:cc:c0:29:f3:91:
3a:a7:76:ca:5d:5a:96:54:b0:01:b7:93:7b:a6:73:
92:68:62:a2:64:06:65:2e:18:32:06:b6:1a:56:b2:
6f:00:ed:34:29:ae:c8:c9:5b:7e:75:c0:c5:bf:4f:
19:7c:a4:b6:d8:3f:16:6b:8c:5b:3a:af:28:34:ea:
94:11:e3:fe:aa:6f:db:0d:ac:9c:56:8c:1e:d0:7c:
3c:44:e1:09:05:fe:9d:03:82:9e:8d:84:e7:37:0d:
f4:05:8d:e0:ca:bb:91:b6:d0:c7:9d:1d:e4:a5:1a:
51:f0:ee:26:e3:e0:94:55:1c:ab:59:bc:7b:2f:d0:
cb:fd:ad:c9:05:71:1a:0c:4b:90:ca:d8:4e:87:9c:
ab:76:40:3d:bd:0b:e7:18:19:da:98:c6:04:43:1e:
2e:29:f9:ca:40:62:15:c1:12:ad:6b:0a:34:5f:2d:
29:18:8e:51:1b:49:09:cd:94:3b:fd:b7:e6:8f:34:
ff:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:92:D2:FD:BA:63:4D:26:E6:46:78:AF:7B:76:65:F2:1C:D3:26:0D
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/S5LS_bpjTSbmRnive3Zl8hzTJg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:600::/40
2a0d:d940:900b::/48
Signature Algorithm: sha256WithRSAEncryption
68:7c:7b:13:4c:3f:c9:32:ab:30:e5:65:b1:02:21:9e:48:c3:
be:5a:ca:97:fe:96:51:ae:0b:ac:a3:c4:73:aa:14:8d:5b:27:
a8:23:6d:c1:ca:15:64:42:d7:fc:c3:9d:a6:3f:0f:1c:99:56:
5a:2a:25:91:f7:08:94:e1:ac:b5:ef:cc:2b:5a:c8:26:3c:98:
83:f9:36:ac:ce:7a:6e:c6:a0:ad:c9:44:f2:d6:13:5a:2d:2b:
ff:c4:41:c8:23:51:65:fd:78:6b:9f:57:be:29:0d:a1:a9:1b:
20:d7:bd:76:92:90:00:ea:b0:0d:9e:6d:09:42:9a:f5:a5:d4:
57:89:60:aa:75:03:71:36:35:b5:d4:44:05:12:ff:e0:16:f4:
d4:2f:1d:3c:46:a2:90:55:95:78:df:db:59:68:93:b1:b9:b0:
b1:f1:6e:24:86:96:1d:23:14:2a:d7:49:8b:cf:08:2f:af:b4:
42:44:71:91:50:64:5d:48:c5:a7:ce:2c:3c:d9:45:e0:2a:f5:
61:e5:d0:65:7b:34:0c:8d:de:d1:fd:8c:f4:2c:f5:48:a0:ab:
a0:7a:a8:3e:59:dd:90:fd:6e:6d:5a:50:ec:00:70:3a:52:42:
87:a3:02:4e:40:9c:63:68:90:0e:f0:e4:34:68:65:a7:1b:54:
96:ca:76:45
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAZ7+nETuQlTjN/Zbnp4QwpkuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYwNjI1MTE0ODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjkyZDJmZGJhNjM0ZDI2ZTY0Njc4YWY3Yjc2NjVmMjFjZDMyNjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBq2sSzW6sOpNy2BfkpElwjrEkXy
rhZi361q//1dgdrsm1RwJ1bG24WLTgYojHfzadoa/0X+swV3gsE3qG5fD5rP2RTo
zMAp85E6p3bKXVqWVLABt5N7pnOSaGKiZAZlLhgyBrYaVrJvAO00Ka7IyVt+dcDF
v08ZfKS22D8Wa4xbOq8oNOqUEeP+qm/bDaycVowe0Hw8ROEJBf6dA4KejYTnNw30
BY3gyruRttDHnR3kpRpR8O4m4+CUVRyrWbx7L9DL/a3JBXEaDEuQythOh5yrdkA9
vQvnGBnamMYEQx4uKfnKQGIVwRKtawo0Xy0pGI5RG0kJzZQ7/bfmjzT/KwIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFEuS0v26Y00m5kZ4r3t2ZfIc0yYNMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvUzVMU19icGpUU2JtUm5pdmUzWmw4aHpUSmcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwYAKg3ZQAYD
BwAqDdlAkAswDQYJKoZIhvcNAQELBQADggEBAGh8exNMP8kyqzDlZbECIZ5Iw75a
ypf+llGuC6yjxHOqFI1bJ6gjbcHKFWRC1/zDnaY/DxyZVloqJZH3CJThrLXvzCta
yCY8mIP5NqzOem7GoK3JRPLWE1otK//EQcgjUWX9eGufV74pDaGpGyDXvXaSkADq
sA2ebQlCmvWl1FeJYKp1A3E2NbXURAUS/+AW9NQvHTxGopBVlXjf21lok7G5sLHx
biSGlh0jFCrXSYvPCC+vtEJEcZFQZF1IxafOLDzZReAq9WHl0GV7NAyN3tH9jPQs
9Uigq6B6qD5Z3ZD9bm1aUOwAcDpSQoejAk5AnGNokA7w5DRoZacbVJbKdkU=
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:44:07 2026 by rpki-client