Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/a7EMNfHaZa02sNwbjzB8adFrQak.roa
File: a7EMNfHaZa02sNwbjzB8adFrQak.roa (raw, json)
Hash identifier: T4zYTFgEnhhyJqZyhS2nN9mt9Qfsizn+OrjLAyTlfEY=
Subject key identifier: 6B:B1:0C:35:F1:DA:65:AD:36:B0:DC:1B:8F:30:7C:69:D1:6B:41:A9
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019FD1D72C21E56BD8C9A036240D0216EDEF
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/a7EMNfHaZa02sNwbjzB8adFrQak.roa
Signing time: Wed 05 Aug 2026 12:12:47 +0000
ROA not before: Wed 05 Aug 2026 12:12:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200954
IP address blocks: 2a0d:d940:5c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:d7:2c:21:e5:6b:d8:c9:a0:36:24:0d:02:16:ed:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Aug 5 12:12:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bb10c35f1da65ad36b0dc1b8f307c69d16b41a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:9a:e5:f7:34:d2:02:11:92:53:02:bd:4d:
d0:54:38:21:fc:48:fa:71:f2:a2:4c:4e:a0:30:a7:
bf:e5:a0:76:be:7a:97:56:60:c7:45:43:2b:de:ff:
8c:05:ba:75:13:8e:1f:d9:9c:91:55:b2:0b:b8:8f:
92:34:b2:98:40:86:2e:43:04:ab:48:8e:d3:25:fc:
ca:42:02:2e:9e:ee:74:a1:23:7d:be:f8:86:72:33:
f0:91:43:cc:5f:74:3b:99:d9:5c:a8:37:81:51:ab:
83:a3:5a:d7:4a:23:51:1d:b8:8f:af:54:78:90:c2:
b4:f1:e3:f5:8a:ca:7a:fd:2d:09:0f:a7:56:ea:e5:
60:f2:38:97:12:d4:79:58:ca:fa:99:43:65:bd:a2:
b3:9f:4a:9a:8e:e6:fd:ff:1e:a0:6a:e4:67:75:1f:
6c:97:34:5a:f5:22:27:55:1b:c5:e7:2b:b5:8c:8c:
6c:60:a4:21:73:cb:4a:30:9a:56:28:8b:ac:8f:87:
71:ab:87:8d:b8:ed:5a:01:6f:64:a7:3a:53:a1:ef:
a5:24:df:bb:dd:89:23:ec:69:37:92:17:3f:11:22:
9b:83:8c:6c:50:97:52:7c:14:6a:dc:41:ee:ab:46:
41:fb:94:15:28:76:db:10:3e:19:a2:7d:46:49:4a:
c5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B1:0C:35:F1:DA:65:AD:36:B0:DC:1B:8F:30:7C:69:D1:6B:41:A9
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/a7EMNfHaZa02sNwbjzB8adFrQak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:5c0::/44
Signature Algorithm: sha256WithRSAEncryption
b4:9c:26:bc:01:e8:55:c6:67:c6:b8:ef:81:10:a4:1b:f7:cc:
81:8b:b8:53:9b:4a:0c:8c:d5:e0:ec:59:4d:34:87:0d:15:d4:
43:41:09:22:4c:61:a4:e4:1d:d2:53:1c:a7:d8:da:06:8a:b1:
8b:fa:9d:07:8f:81:b0:fa:2c:5f:37:95:21:10:f4:dc:18:0e:
bf:31:dd:04:a7:7f:2e:0a:7d:89:44:e0:cd:ae:46:cb:e9:e5:
69:d4:b4:7d:1c:69:60:dc:1b:91:8c:46:54:f1:af:66:ca:53:
39:7a:fe:40:b1:16:27:2e:4f:3d:91:41:b5:1a:74:d7:e9:61:
83:9d:b7:7b:f7:64:7c:e3:64:cf:2c:75:a6:33:8e:12:39:83:
4e:f9:36:19:f5:91:32:a2:b6:5e:2f:a9:ab:dc:19:8f:56:09:
2c:de:47:a6:54:cd:c1:1e:cd:35:aa:b9:6b:9c:e7:37:0a:f0:
1e:17:0e:05:1a:3d:4b:d0:41:05:2e:8a:e5:53:3c:76:a1:83:
cb:e4:84:d5:d2:49:fc:31:d8:25:37:1f:6a:c5:87:7a:cb:09:
b9:d6:89:47:c8:4a:cf:7c:90:90:14:26:e4:16:73:f6:26:e2:
40:db:cf:cc:9d:06:9d:9a:a4:01:27:61:f0:b0:0c:de:6c:4d:
d1:69:88:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:36 2026 by rpki-client