Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/iUizWLhWfxuhAg01J5TZ1jFmSPg.roa
File: iUizWLhWfxuhAg01J5TZ1jFmSPg.roa (raw, json)
Hash identifier: ENIMp5nV0vUaK5H7wzEsTFdmK8DXWPVnhfT4KGT0dVc=
Subject key identifier: 89:48:B3:58:B8:56:7F:1B:A1:02:0D:35:27:94:D9:D6:31:66:48:F8
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019CC8AD9EB3D238983E33B0A81918DBB46B
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/iUizWLhWfxuhAg01J5TZ1jFmSPg.roa
Signing time: Sat 07 Mar 2026 14:22:27 +0000
ROA not before: Sat 07 Mar 2026 14:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210457
IP address blocks: 2a0d:d940:400::/40 maxlen: 40
2a0d:d940:90a6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:ad:9e:b3:d2:38:98:3e:33:b0:a8:19:18:db:b4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Mar 7 14:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8948b358b8567f1ba1020d352794d9d6316648f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:95:0c:a3:9a:4e:68:f1:a7:40:f8:2b:d4:
e3:bb:c6:bb:16:f4:95:e9:b7:c8:01:d1:09:4a:ae:
56:b5:49:96:a9:01:5b:6c:4b:5f:f9:12:ee:51:16:
e6:7e:a2:9d:37:9e:1a:c8:8f:3c:85:52:43:20:cd:
9b:ec:a1:5b:32:27:af:82:48:c3:18:49:4b:41:22:
ce:d1:67:15:32:d1:8f:e7:4a:65:01:2f:11:88:e1:
af:09:ca:fd:05:78:a4:cf:eb:da:04:6b:2b:ee:f7:
c0:e2:aa:01:6d:ac:08:28:e9:52:2d:d2:f2:9e:71:
dc:3d:d7:95:0b:af:0c:a5:0c:a1:99:97:59:7d:dd:
07:b6:04:35:26:96:f9:82:22:cd:f0:62:74:5b:ee:
fa:01:32:72:b2:eb:59:79:28:dd:3d:8d:9f:ba:5d:
60:61:7a:43:99:30:2c:8e:c8:2f:dd:97:d2:b6:78:
9c:dd:dc:b4:23:f7:97:ea:67:65:17:08:1f:09:2c:
b9:98:30:45:13:43:37:96:15:5d:a7:98:44:99:ad:
4a:ac:6c:89:5e:be:a0:a4:97:10:02:25:a8:4e:e2:
dc:37:45:3e:81:3f:f3:2c:8f:6b:cf:c0:2b:d7:8a:
5a:08:a7:c1:1f:29:97:f3:38:d8:39:7d:36:df:4f:
d5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:48:B3:58:B8:56:7F:1B:A1:02:0D:35:27:94:D9:D6:31:66:48:F8
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/iUizWLhWfxuhAg01J5TZ1jFmSPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:400::/40
2a0d:d940:90a6::/48
Signature Algorithm: sha256WithRSAEncryption
e8:5e:75:68:8d:57:1c:41:4e:aa:d9:6b:fb:6f:79:28:1b:a1:
23:37:b1:47:14:84:6f:fe:b3:3b:e8:2e:80:c7:7b:7f:bb:93:
96:b4:3b:da:51:1f:c8:27:65:e7:71:34:0d:74:1e:0a:8a:39:
56:3c:b3:32:01:2b:eb:5a:44:21:3c:6d:3c:3c:d9:b7:69:c9:
14:73:aa:06:ec:da:b6:0f:55:46:27:da:b3:35:d5:60:30:d1:
69:53:61:35:3c:af:b1:7a:c6:28:46:d7:a2:e3:ab:8b:da:74:
fa:4a:b0:2b:5a:d6:85:3b:73:4b:e2:72:21:c1:85:30:74:d5:
1b:0a:9c:e9:b4:c4:1d:41:24:76:fe:03:f1:c5:3b:61:23:e1:
99:6d:40:79:3a:88:4e:c8:74:e1:19:44:24:af:df:9c:73:f0:
fa:38:c1:2b:7b:9a:97:af:00:35:ae:2f:40:4d:03:ce:7a:97:
25:a2:36:e1:22:f9:a3:cf:6c:a3:c8:d0:db:1c:ad:ff:8f:47:
d2:83:d5:1f:1d:7a:66:51:95:0e:e3:ac:ad:1b:78:e0:30:1e:
df:0f:ba:97:12:1a:1a:0b:06:bf:12:53:8c:bb:a8:3e:9f:7f:
33:9c:87:2d:a4:9c:d9:83:44:0a:46:1c:99:f2:70:31:91:33:
53:da:bf:ef
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAZzIrZ6z0jiYPjOwqBkY27RrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYwMzA3MTQyMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTQ4YjM1OGI4NTY3ZjFiYTEwMjBkMzUyNzk0ZDlkNjMxNjY0OGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/yVDKOaTmjxp0D4K9Tju8a7FvSV
6bfIAdEJSq5WtUmWqQFbbEtf+RLuURbmfqKdN54ayI88hVJDIM2b7KFbMievgkjD
GElLQSLO0WcVMtGP50plAS8RiOGvCcr9BXikz+vaBGsr7vfA4qoBbawIKOlSLdLy
nnHcPdeVC68MpQyhmZdZfd0HtgQ1Jpb5giLN8GJ0W+76ATJysutZeSjdPY2ful1g
YXpDmTAsjsgv3ZfStnic3dy0I/eX6mdlFwgfCSy5mDBFE0M3lhVdp5hEma1KrGyJ
Xr6gpJcQAiWoTuLcN0U+gT/zLI9rz8Ar14paCKfBHymX8zjYOX0230/VnQIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFIlIs1i4Vn8boQINNSeU2dYxZkj4MB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvaVVpeldMaFdmeHVoQWcwMUo1VFoxakZtU1BnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwYAKg3ZQAQD
BwAqDdlAkKYwDQYJKoZIhvcNAQELBQADggEBAOhedWiNVxxBTqrZa/tveSgboSM3
sUcUhG/+szvoLoDHe3+7k5a0O9pRH8gnZedxNA10HgqKOVY8szIBK+taRCE8bTw8
2bdpyRRzqgbs2rYPVUYn2rM11WAw0WlTYTU8r7F6xihG16Ljq4vadPpKsCta1oU7
c0viciHBhTB01RsKnOm0xB1BJHb+A/HFO2Ej4ZltQHk6iE7IdOEZRCSv35xz8Po4
wSt7mpevADWuL0BNA856lyWiNuEi+aPPbKPI0Nscrf+PR9KD1R8demZRlQ7jrK0b
eOAwHt8PupcSGhoLBr8SU4y7qD6ffzOchy2knNmDRApGHJnycDGRM1Pav+8=
-----END CERTIFICATE-----
Generated at Sun Mar 8 03:27:44 2026 by rpki-client