Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/UJfsnVTFtZAGREEoOHuz9y3Aq_k.roa
File: UJfsnVTFtZAGREEoOHuz9y3Aq_k.roa (raw, json)
Hash identifier: X9lj6WYHS/pZJ0cdZFlrlK04094Ok3EFAY3agrxjuxE=
Subject key identifier: 50:97:EC:9D:54:C5:B5:90:06:44:41:28:38:7B:B3:F7:2D:C0:AB:F9
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019E9785D1CBCB020A6635368F33338DC25A
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/UJfsnVTFtZAGREEoOHuz9y3Aq_k.roa
Signing time: Fri 05 Jun 2026 11:23:10 +0000
ROA not before: Fri 05 Jun 2026 11:23:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219529
IP address blocks: 2a0d:d940:2003::/48 maxlen: 48
2a0d:d940:9014::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:97:85:d1:cb:cb:02:0a:66:35:36:8f:33:33:8d:c2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jun 5 11:23:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5097ec9d54c5b59006444128387bb3f72dc0abf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:03:72:a4:d1:54:61:37:01:9a:4b:d2:80:
5e:09:7f:e6:d3:19:68:97:a1:8a:28:74:37:e0:70:
c8:ee:89:bd:1e:e5:65:f2:01:39:a2:e0:3a:27:d1:
e9:0f:0c:db:e9:58:af:71:06:2b:c1:98:c8:30:90:
90:ca:46:c6:88:bc:25:a2:0e:84:1d:28:0b:af:97:
e6:c8:4d:6f:9a:f1:25:b3:01:d8:3b:eb:31:57:4a:
6f:14:70:63:a8:cf:65:13:33:dc:06:8a:90:2f:10:
9f:8a:42:5f:15:e7:1b:a4:3e:d5:94:e3:9f:71:77:
3d:7f:fa:fa:6d:20:fd:62:ce:47:d1:b2:8d:ec:bf:
31:e4:a9:50:02:73:81:af:b0:43:94:1a:cc:cc:fa:
3e:bf:16:c9:d6:aa:16:58:3f:be:13:ff:86:81:54:
f0:0f:bb:33:bd:1d:7a:f3:e0:54:e3:dd:49:ce:4f:
bf:6f:11:fe:82:3c:5a:ac:96:03:37:9f:19:88:a5:
3a:b2:a7:6c:54:5a:e1:cb:fa:65:ec:03:fa:6a:cf:
c2:a3:27:37:03:ee:35:dc:e0:be:c5:2a:c1:a9:4f:
6b:91:96:25:d8:18:67:ac:67:6a:6a:4f:c6:d7:d6:
bf:36:31:41:5a:21:b2:5c:c9:fe:79:8f:7d:c0:25:
27:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:97:EC:9D:54:C5:B5:90:06:44:41:28:38:7B:B3:F7:2D:C0:AB:F9
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/UJfsnVTFtZAGREEoOHuz9y3Aq_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:2003::/48
2a0d:d940:9014::/48
Signature Algorithm: sha256WithRSAEncryption
69:4c:92:b1:6e:56:d6:7a:f2:fb:9c:0f:3d:e8:fa:e6:e9:54:
d2:28:e7:45:f5:78:54:ec:22:06:03:e6:58:50:e9:a4:b5:b6:
cf:06:c9:2c:9c:62:70:fd:1f:d1:0c:6d:38:1e:89:4e:4e:b5:
83:83:02:05:b7:76:08:e1:54:10:76:bf:40:b1:9e:18:f6:f9:
4e:9a:1a:45:ab:5d:f1:20:32:19:ff:81:1a:ce:4d:12:0b:a6:
9c:d6:a4:d3:13:fc:53:c6:28:c2:7a:bc:aa:21:ac:fa:8e:f9:
8b:27:82:38:81:ca:84:4d:a6:49:43:97:db:cd:49:9f:77:32:
d9:41:81:f7:81:05:d9:74:16:52:7d:38:27:cb:38:16:81:b0:
38:98:38:81:bf:6e:16:13:ca:e2:59:61:bb:61:af:75:3b:24:
6a:e4:aa:9f:ba:a0:17:a6:53:30:c4:a2:a5:b8:fa:1a:d4:70:
69:5d:6d:09:90:c5:04:f3:e4:6d:48:45:fe:13:a4:a4:53:1f:
8d:c1:af:c1:d5:bc:e2:9f:df:37:a3:1b:2e:f6:3f:19:64:33:
d7:50:e5:67:ba:7b:83:3e:05:56:10:4f:be:58:e0:84:fa:96:
94:24:46:49:3f:34:1e:46:eb:53:b8:b2:d6:0c:a3:bb:9c:71:
f8:f5:49:e3
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ6XhdHLywIKZjU2jzMzjcJaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYwNjA1MTEyMzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDk3ZWM5ZDU0YzViNTkwMDY0NDQxMjgzODdiYjNmNzJkYzBhYmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUkDcqTRVGE3AZpL0oBeCX/m0xlo
l6GKKHQ34HDI7om9HuVl8gE5ouA6J9HpDwzb6VivcQYrwZjIMJCQykbGiLwlog6E
HSgLr5fmyE1vmvElswHYO+sxV0pvFHBjqM9lEzPcBoqQLxCfikJfFecbpD7VlOOf
cXc9f/r6bSD9Ys5H0bKN7L8x5KlQAnOBr7BDlBrMzPo+vxbJ1qoWWD++E/+GgVTw
D7szvR168+BU491Jzk+/bxH+gjxarJYDN58ZiKU6sqdsVFrhy/pl7AP6as/Coyc3
A+413OC+xSrBqU9rkZYl2BhnrGdqak/G19a/NjFBWiGyXMn+eY99wCUnZwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFCX7J1UxbWQBkRBKDh7s/ctwKv5MB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvVUpmc25WVEZ0WkFHUkVFb09IdXo5eTNBcV9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg3ZQCAD
AwcAKg3ZQJAUMA0GCSqGSIb3DQEBCwUAA4IBAQBpTJKxblbWevL7nA896Prm6VTS
KOdF9XhU7CIGA+ZYUOmktbbPBsksnGJw/R/RDG04HolOTrWDgwIFt3YI4VQQdr9A
sZ4Y9vlOmhpFq13xIDIZ/4Eazk0SC6ac1qTTE/xTxijCeryqIaz6jvmLJ4I4gcqE
TaZJQ5fbzUmfdzLZQYH3gQXZdBZSfTgnyzgWgbA4mDiBv24WE8riWWG7Ya91OyRq
5KqfuqAXplMwxKKluPoa1HBpXW0JkMUE8+RtSEX+E6SkUx+Nwa/B1bzin983oxsu
9j8ZZDPXUOVnunuDPgVWEE++WOCE+paUJEZJPzQeRutTuLLWDKO7nHH49Unj
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:33:00 2026 by rpki-client