Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/U_0qeEP3Idv12PhOFh75-9eeGC0.roa
File: U_0qeEP3Idv12PhOFh75-9eeGC0.roa (raw, json)
Hash identifier: ZpLMeKbCTbA3ZzJdV64fd3QZKSQkrt0U+5GkY5iWMQc=
Subject key identifier: 53:FD:2A:78:43:F7:21:DB:F5:D8:F8:4E:16:1E:F9:FB:D7:9E:18:2D
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019F7A968C490F8248FC5F021C7FFA70F3DA
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/U_0qeEP3Idv12PhOFh75-9eeGC0.roa
Signing time: Sun 19 Jul 2026 13:35:14 +0000
ROA not before: Sun 19 Jul 2026 13:35:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201279
IP address blocks: 2a0d:d940:3000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7a:96:8c:49:0f:82:48:fc:5f:02:1c:7f:fa:70:f3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jul 19 13:35:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53fd2a7843f721dbf5d8f84e161ef9fbd79e182d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:31:e9:13:f5:f3:02:1a:dd:0f:24:44:b0:
0b:59:bb:c1:82:2c:27:5b:b1:4d:30:e1:63:d5:f6:
1e:1e:19:17:4e:f6:8c:99:af:c5:a6:4c:9a:93:50:
ce:cc:71:b5:c5:36:52:b0:86:ad:d9:48:a9:0e:3f:
d5:b6:10:30:36:5e:31:6a:5b:85:1a:e0:e0:70:34:
58:6a:91:c5:9d:d1:88:76:1b:da:02:44:f4:e0:9b:
f0:a7:58:4a:e2:9c:fa:c6:b3:89:47:0b:e4:bb:1b:
65:c7:e2:71:e1:cd:19:e0:c4:36:bb:26:d0:87:88:
31:e4:c0:eb:05:6a:94:ae:12:a0:46:d9:09:92:f2:
38:0a:2c:c7:77:ea:ef:11:dd:f6:bd:99:eb:af:03:
29:fe:9d:66:40:3d:95:a7:ac:92:73:46:f1:33:21:
e3:88:bb:78:5c:bd:1c:72:8f:7b:4b:d5:88:3d:0c:
cf:70:b8:2c:2d:03:10:1b:a2:5b:cb:53:c9:35:ca:
8d:05:0e:da:ee:d3:51:f4:d6:57:0c:88:af:0e:b4:
b4:b9:32:aa:d6:de:7b:34:26:8f:d0:b5:be:df:05:
06:34:93:a0:07:e4:84:18:6b:d5:e6:01:02:bc:ff:
3a:37:19:3f:d9:0d:88:7d:c3:62:93:c9:6c:ed:56:
b1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FD:2A:78:43:F7:21:DB:F5:D8:F8:4E:16:1E:F9:FB:D7:9E:18:2D
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/U_0qeEP3Idv12PhOFh75-9eeGC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:3000::/36
Signature Algorithm: sha256WithRSAEncryption
da:4a:90:bd:56:c9:a7:ec:d9:50:da:b7:52:b6:ec:51:ce:b7:
4f:59:be:a2:09:b7:94:56:60:7b:49:eb:1e:15:0b:ea:b8:8a:
38:65:ae:69:63:73:4d:01:37:9d:7e:2f:fd:24:c9:e7:b6:b2:
2e:54:4b:aa:98:f0:c1:09:77:32:e0:9a:de:be:d0:89:d4:bc:
b5:d4:d5:9f:be:44:ca:5e:ea:db:df:63:61:1d:a3:3a:fa:44:
61:d7:a3:b3:52:96:01:4f:7a:c9:58:86:47:b2:56:c9:25:a7:
0f:e3:1e:c1:81:16:26:93:c0:e2:78:e8:13:6b:eb:0f:6f:8f:
09:51:f7:49:fd:43:bd:c9:06:e7:da:39:6a:40:52:ef:f9:52:
35:a8:22:29:5d:d6:fd:d5:e4:93:7f:ba:ce:37:53:a2:e1:a4:
1d:64:7d:14:49:9d:0b:13:5a:2c:ab:9a:ee:62:c7:53:ce:ff:
14:0c:26:b6:0c:c9:e5:5d:37:a9:6b:f2:ad:cb:9e:08:f4:fe:
20:c4:56:4a:af:5d:75:ac:a0:e4:d9:fe:90:54:83:f6:02:58:
fe:11:a9:7c:40:36:97:4b:ab:2e:00:68:ba:55:b5:21:c8:c0:
ea:8d:8c:c9:4e:8a:bf:fc:1f:ff:d7:8c:90:66:99:d2:c7:5f:
fe:18:cb:88
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZ96loxJD4JI/F8CHH/6cPPaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYwNzE5MTMzNTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2ZkMmE3ODQzZjcyMWRiZjVkOGY4NGUxNjFlZjlmYmQ3OWUxODJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYcx6RP18wIa3Q8kRLALWbvBgiwn
W7FNMOFj1fYeHhkXTvaMma/Fpkyak1DOzHG1xTZSsIat2UipDj/VthAwNl4xaluF
GuDgcDRYapHFndGIdhvaAkT04Jvwp1hK4pz6xrOJRwvkuxtlx+Jx4c0Z4MQ2uybQ
h4gx5MDrBWqUrhKgRtkJkvI4CizHd+rvEd32vZnrrwMp/p1mQD2Vp6ySc0bxMyHj
iLt4XL0cco97S9WIPQzPcLgsLQMQG6Jby1PJNcqNBQ7a7tNR9NZXDIivDrS0uTKq
1t57NCaP0LW+3wUGNJOgB+SEGGvV5gECvP86Nxk/2Q2IfcNik8ls7Vax3wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFFP9KnhD9yHb9dj4ThYe+fvXnhgtMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvVV8wcWVFUDNJZHYxMlBoT0ZoNzUtOWVlR0MwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKg3ZQDAw
DQYJKoZIhvcNAQELBQADggEBANpKkL1Wyafs2VDat1K27FHOt09ZvqIJt5RWYHtJ
6x4VC+q4ijhlrmljc00BN51+L/0kyee2si5US6qY8MEJdzLgmt6+0InUvLXU1Z++
RMpe6tvfY2Edozr6RGHXo7NSlgFPeslYhkeyVsklpw/jHsGBFiaTwOJ46BNr6w9v
jwlR90n9Q73JBufaOWpAUu/5UjWoIild1v3V5JN/us43U6LhpB1kfRRJnQsTWiyr
mu5ix1PO/xQMJrYMyeVdN6lr8q3Lngj0/iDEVkqvXXWsoOTZ/pBUg/YCWP4RqXxA
NpdLqy4AaLpVtSHIwOqNjMlOir/8H//XjJBmmdLHX/4Yy4g=
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:43:26 2026 by rpki-client