Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/SIk4QDvIs_Si_QthmLjYcAIpVtM.roa
File: SIk4QDvIs_Si_QthmLjYcAIpVtM.roa (raw, json)
Hash identifier: lgWB0R4U9SziriP1RJY7UeZzzZ4+xya5rF0FeYRzNns=
Subject key identifier: 48:89:38:40:3B:C8:B3:F4:A2:FD:0B:61:98:B8:D8:70:02:29:56:D3
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01A080D8661B3EBA2DED4FEBE0BACE689780
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/SIk4QDvIs_Si_QthmLjYcAIpVtM.roa
Signing time: Tue 08 Sep 2026 11:47:40 +0000
ROA not before: Tue 08 Sep 2026 11:47:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200954
IP address blocks: 2a0d:d940:500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 13:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:d8:66:1b:3e:ba:2d:ed:4f:eb:e0:ba:ce:68:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Sep 8 11:47:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=488938403bc8b3f4a2fd0b6198b8d870022956d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:af:a5:ba:54:d0:da:0f:5a:e6:de:72:1b:
45:da:50:65:a3:8e:61:f4:93:c8:09:0e:1d:22:08:
4d:61:c4:02:e7:56:5b:d2:0d:d6:48:b4:65:3f:67:
83:51:25:43:c0:47:5e:f9:eb:47:a5:47:e4:9f:c4:
7b:6a:e0:17:7b:23:d3:4e:71:9e:45:d0:14:2c:28:
64:45:b3:22:64:24:b2:8a:5a:e0:80:08:49:e6:a5:
86:f4:a7:c4:dd:c2:74:f9:98:63:96:ba:2e:b8:a9:
48:05:90:86:17:06:47:f3:9a:1d:e7:dc:f2:03:09:
11:b6:b8:46:b2:ba:68:05:71:19:5e:d2:91:db:d6:
de:b9:11:56:d5:13:19:f4:c1:6e:a6:28:7f:2a:51:
73:98:bb:f2:a4:00:d3:54:a9:8e:2f:ea:f6:af:da:
c0:96:c7:4a:c8:6f:1b:1c:63:a7:d3:cb:dc:83:14:
7c:6d:4c:88:02:fe:10:26:b2:58:ae:56:6a:51:37:
1e:c8:5c:90:6b:3e:87:a9:95:2e:12:21:8f:30:db:
8c:cd:92:c5:ba:5e:54:ba:c0:91:c9:f1:26:29:67:
0a:29:21:76:08:81:e9:52:2b:60:b4:59:78:1c:0f:
e2:50:ee:32:3d:54:26:74:b6:dc:46:b3:73:2d:cf:
a8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:89:38:40:3B:C8:B3:F4:A2:FD:0B:61:98:B8:D8:70:02:29:56:D3
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/SIk4QDvIs_Si_QthmLjYcAIpVtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:500::/40
Signature Algorithm: sha256WithRSAEncryption
4c:fd:d7:85:33:31:c0:e2:42:2e:2f:07:76:0f:37:98:01:20:
7b:aa:c3:61:6e:ce:7d:73:73:ea:a1:23:48:9d:97:36:4b:a3:
64:18:27:56:3f:79:c9:20:8f:96:c6:b6:72:7d:2d:85:45:c6:
8f:24:ab:87:0f:70:db:f7:94:17:d9:e0:a5:bd:47:71:74:26:
db:ac:7f:e2:d1:8c:c6:ac:32:9f:fc:bd:58:be:07:dd:33:f8:
e5:cd:cc:5d:8d:ce:1d:bb:04:e1:a5:4b:2c:4b:e3:68:97:ac:
d1:e7:f1:f7:77:83:e2:73:7d:f1:9c:91:0b:b0:03:0f:ed:bc:
48:00:94:59:b9:18:b2:cf:65:d8:7d:d7:33:1d:c8:8f:2d:6c:
19:91:64:b7:bb:3c:fa:cb:9d:bd:1f:a3:b0:85:c2:a1:4e:9f:
09:b3:e6:ef:ca:d5:64:73:14:60:7b:22:18:22:41:ff:3c:8f:
1f:42:0a:b7:df:98:de:3a:42:df:32:f6:1a:87:0c:59:06:1f:
16:3a:1b:3e:a1:b3:f6:d7:d7:0d:66:49:01:45:72:26:52:3d:
4c:8d:c3:67:71:2a:78:ad:c2:92:38:f5:62:cb:64:26:03:e1:
de:4e:8b:60:f7:17:9e:da:58:d6:a4:4c:d3:7d:69:4a:41:d1:
3b:c1:25:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 22:56:56 2026 by rpki-client