Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/_LPutGcJvjbUZNezwDM4fbTf9Yw.roa
File: _LPutGcJvjbUZNezwDM4fbTf9Yw.roa (raw, json)
Hash identifier: qZ6fQpPg4ATb7c4ADJ+HASj82GrA5+XTK3IMbssA6yg=
Subject key identifier: FC:B3:EE:B4:67:09:BE:36:D4:64:D7:B3:C0:33:38:7D:B4:DF:F5:8C
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019FCD7886328D3209FC494C07A77B6B15D3
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/_LPutGcJvjbUZNezwDM4fbTf9Yw.roa
Signing time: Tue 04 Aug 2026 15:50:55 +0000
ROA not before: Tue 04 Aug 2026 15:50:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202610
IP address blocks: 2a0d:d940:6c0::/42 maxlen: 42
2a0d:d940:90a5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:78:86:32:8d:32:09:fc:49:4c:07:a7:7b:6b:15:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Aug 4 15:50:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcb3eeb46709be36d464d7b3c033387db4dff58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c1:26:a5:a6:28:f3:88:3e:ed:b7:85:87:2d:
a0:36:29:82:a7:8f:50:a3:38:68:d9:0d:d5:40:a1:
7a:ff:51:07:6d:dc:56:f8:41:a0:29:f2:e3:06:a8:
22:a5:db:df:6b:f3:6b:62:6c:7f:6f:45:d5:a4:33:
57:25:05:e2:d9:33:9e:46:0d:2e:94:34:3f:2a:26:
f3:e8:4a:8f:d5:47:36:77:fe:cb:cc:a4:fe:63:1c:
9e:3a:61:ca:68:e1:8e:11:67:81:93:ab:e8:98:16:
91:f0:fa:4f:26:9a:7d:1b:ec:fb:c8:2e:b9:16:94:
c8:9d:ce:4f:a9:b0:52:b7:0a:8e:8e:8e:a8:1c:a9:
54:52:6f:a5:56:ab:7c:4a:24:42:cc:d3:ff:69:dd:
7f:8d:e6:ba:91:84:c5:dd:7c:ef:91:44:61:bf:18:
de:5c:03:a9:75:70:a8:bd:42:21:dc:56:7a:68:1f:
23:73:30:32:e1:6d:e3:63:de:8d:ee:33:22:c5:5b:
d2:75:62:8c:77:9c:ce:48:7f:24:e2:c2:64:5c:74:
62:d1:11:07:1c:b6:05:92:79:15:54:56:69:14:fa:
77:9d:14:f4:15:69:aa:1a:36:fc:5f:37:de:9f:da:
dd:17:64:f0:f5:80:e6:10:ac:8a:f1:52:4b:95:32:
13:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B3:EE:B4:67:09:BE:36:D4:64:D7:B3:C0:33:38:7D:B4:DF:F5:8C
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/_LPutGcJvjbUZNezwDM4fbTf9Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:6c0::/42
2a0d:d940:90a5::/48
Signature Algorithm: sha256WithRSAEncryption
e8:98:38:be:30:01:16:7d:4b:a4:b9:48:9b:d5:1d:b6:1b:87:
75:b1:37:48:60:77:32:27:0c:7e:b9:38:8f:6a:a9:6d:10:14:
be:3a:ae:ab:a3:b3:5d:4e:96:4a:71:0e:47:92:1e:54:e3:e6:
aa:3d:e8:ab:6a:8e:1b:be:36:13:7b:c2:62:9d:97:79:8f:12:
86:e4:53:02:1e:2a:21:73:67:9f:fe:2e:3e:d4:b3:92:ad:e1:
56:7d:59:58:68:fe:0b:37:47:e3:06:f5:63:b0:c6:1f:7b:26:
6f:22:e1:0f:e3:c7:10:61:f5:4a:5c:e4:d6:73:f3:b2:70:3c:
fb:79:dd:d4:45:61:e0:a7:70:d8:b8:33:c5:16:3b:7b:44:19:
18:a2:b3:05:b8:63:f9:59:da:69:0a:8a:ac:f9:b3:08:0d:cd:
72:63:2e:d0:c6:82:ac:df:f0:48:10:04:02:fd:67:5d:bd:57:
93:c8:96:24:7c:ff:98:d6:10:25:b1:9f:7e:9c:67:cb:4b:7f:
7b:83:98:fb:3f:55:89:a7:79:76:67:36:1e:98:86:3d:a7:39:
0a:00:44:47:44:ad:9c:46:2b:c6:ac:9a:5d:e8:e8:fa:48:c6:
b5:a4:39:96:b1:ce:71:84:35:bc:42:a0:27:60:44:f9:74:79:
df:79:31:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:34 2026 by rpki-client