Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/oZm9CNQnjebQKe-FgEac0Lwl8yc.roa
File: oZm9CNQnjebQKe-FgEac0Lwl8yc.roa (raw, json)
Hash identifier: FE3ZDAYGZ/Vdld1HkaNpI6otoBdzeGsixpU/ciZ2mxk=
Subject key identifier: A1:99:BD:08:D4:27:8D:E6:D0:29:EF:85:80:46:9C:D0:BC:25:F3:27
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019ED0B00352E1462BFF52A800D8CA91C838
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/oZm9CNQnjebQKe-FgEac0Lwl8yc.roa
Signing time: Tue 16 Jun 2026 13:47:36 +0000
ROA not before: Tue 16 Jun 2026 13:47:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216039
IP address blocks: 2a0d:d940:40::/44 maxlen: 44
2a0d:d940:600::/40 maxlen: 40
2a0d:d940:900b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:b0:03:52:e1:46:2b:ff:52:a8:00:d8:ca:91:c8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jun 16 13:47:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a199bd08d4278de6d029ef8580469cd0bc25f327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b1:67:35:4c:80:f2:00:0f:45:0a:8d:9f:4a:
a0:36:ce:d8:51:0c:58:ba:4c:2e:9e:06:c9:be:1c:
06:31:85:d5:6b:50:cf:b3:22:84:87:f1:94:1a:ab:
fb:f1:f2:52:90:7e:d4:6f:20:19:e2:d6:cc:c4:7d:
f9:a6:de:b3:9f:64:02:3d:43:84:d2:2c:bd:cf:8f:
fc:f5:46:f7:89:17:c2:af:fc:51:5a:75:8b:a4:3b:
be:ae:81:41:16:84:b1:7b:20:b2:a8:9a:21:79:bc:
53:ec:28:22:62:66:bb:6c:9f:24:cc:37:d5:16:33:
94:e3:88:d4:65:53:57:82:30:16:28:5c:52:94:b3:
c9:bb:f4:fe:05:75:96:55:09:e7:ff:3e:c7:b6:77:
7e:e1:74:d6:51:8c:27:94:da:04:48:8e:f4:a9:93:
2b:a4:51:30:ac:1c:a2:73:e0:4d:1c:7d:ed:36:e7:
52:d1:9c:7d:e6:e8:f8:fa:62:f6:cc:08:ad:02:cc:
1b:d1:64:7b:30:a0:f6:fb:94:1b:f1:19:65:1b:87:
3b:df:5a:59:70:1f:26:99:b9:8f:c3:fa:dd:ef:d4:
17:81:c5:c2:25:9e:b9:ac:bd:41:13:14:32:f4:eb:
8d:7f:92:bd:ab:87:1f:ca:6e:f8:f0:0b:d1:5e:2f:
e2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:99:BD:08:D4:27:8D:E6:D0:29:EF:85:80:46:9C:D0:BC:25:F3:27
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/oZm9CNQnjebQKe-FgEac0Lwl8yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:40::/44
2a0d:d940:600::/40
2a0d:d940:900b::/48
Signature Algorithm: sha256WithRSAEncryption
22:60:ca:15:87:a7:4e:a8:33:aa:76:8e:7c:65:6e:ee:c8:58:
fb:e0:15:39:ee:56:14:96:39:33:55:21:9b:cd:18:96:f1:b7:
e6:5e:17:ed:17:9c:62:21:26:e1:f3:da:e2:d7:55:3e:3f:54:
ba:24:31:ee:00:dd:6e:3f:f2:9d:bb:ca:d3:98:f5:ae:0f:48:
eb:3b:cb:cc:02:5a:85:83:11:6b:a3:49:88:d9:2b:f3:e7:37:
da:90:c2:be:87:6c:a3:3d:02:8a:a3:ac:dd:3f:e7:83:0f:ff:
f2:b6:f8:b7:07:3c:fa:a1:08:8d:fb:8f:ae:93:11:7d:4b:19:
a8:d6:25:1d:28:77:20:93:f9:13:70:5e:a5:e5:66:3a:ce:23:
96:b0:ee:5b:bb:da:dd:7f:55:49:f1:2d:a8:1f:10:9c:de:9c:
74:11:c2:d1:3b:f2:c8:31:2b:d9:82:9e:66:51:92:32:f1:ac:
4d:87:e8:7d:7f:02:ee:dc:30:d0:d2:7b:5a:b1:e2:cf:05:48:
69:e8:63:41:f0:60:62:46:7e:fc:3d:2f:04:ef:2b:f5:74:62:
f3:11:07:91:81:ee:47:9a:a8:20:be:a5:81:99:ac:ad:a2:bb:
aa:44:56:ef:44:45:ff:9d:0d:87:a4:11:9d:fc:75:7c:2c:61:
19:bd:2c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 06:11:36 2026 by rpki-client