Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/odIpENbkuAYUgSCFOb9X8keQCpI.roa
File: odIpENbkuAYUgSCFOb9X8keQCpI.roa (raw, json)
Hash identifier: n4YwE+c8Tv3wB760XLNIaYqSgw2aSbzr0UacMFL4Hr4=
Subject key identifier: A1:D2:29:10:D6:E4:B8:06:14:81:20:85:39:BF:57:F2:47:90:0A:92
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019E6AFED9D5B823E78CB8166F249664C06D
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/odIpENbkuAYUgSCFOb9X8keQCpI.roa
Signing time: Wed 27 May 2026 19:52:27 +0000
ROA not before: Wed 27 May 2026 19:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202224
IP address blocks: 2a0d:d940:2012::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6a:fe:d9:d5:b8:23:e7:8c:b8:16:6f:24:96:64:c0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: May 27 19:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1d22910d6e4b8061481208539bf57f247900a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:39:a4:33:4d:62:bc:f5:c4:78:19:4c:49:c4:
10:fd:b1:f8:3d:67:4d:3e:18:e2:db:13:76:d4:ce:
2f:d6:70:a2:f8:d9:05:72:a7:b7:af:c3:21:18:ee:
d6:78:c6:fd:e7:6c:9a:8d:7a:e7:63:9e:e3:e1:36:
4a:03:8e:50:43:89:be:cd:32:60:47:6f:7b:7a:b6:
93:ed:14:ee:1d:aa:72:7c:d9:f0:7c:a2:c1:76:22:
3a:5d:74:f3:ff:e0:5f:bd:5d:4f:de:fa:e3:5a:05:
24:72:2f:3d:28:d2:a0:92:86:4d:43:72:4c:a3:b1:
d9:98:d2:99:5b:3c:95:76:e5:ae:4b:e8:c2:11:9c:
36:2c:1f:47:5b:fd:d9:e5:a7:b4:95:d2:f7:b8:ed:
88:3c:13:f5:1e:47:69:14:ad:65:cd:4e:ae:2a:e6:
25:f3:77:95:04:b2:dd:39:57:57:79:3b:b6:13:6e:
39:d8:b4:fc:1b:dc:a3:89:26:28:2f:cb:21:65:20:
31:63:68:3f:3e:dd:25:2f:a5:74:f0:07:02:a5:5e:
31:b7:ee:7d:c5:75:87:11:94:25:b6:32:2e:03:88:
ae:24:3e:57:d9:72:43:39:88:9d:79:cf:68:5a:db:
67:e2:0d:fc:c6:a7:5e:61:ad:9a:81:0c:8e:ed:63:
05:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D2:29:10:D6:E4:B8:06:14:81:20:85:39:BF:57:F2:47:90:0A:92
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/odIpENbkuAYUgSCFOb9X8keQCpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:2012::/48
Signature Algorithm: sha256WithRSAEncryption
e6:1d:c8:59:42:0b:1f:1e:b8:77:d4:02:49:fd:e2:57:60:1f:
df:73:e0:0d:4e:e9:7d:5c:09:9a:c2:e5:b9:f6:eb:72:54:90:
4a:bd:2c:c8:ee:ea:5a:d7:2e:a4:b7:95:8c:41:d2:86:f4:08:
6a:f0:20:70:a1:1d:03:04:c1:ea:0a:54:70:5d:9d:04:8c:a8:
4f:d2:71:9b:f1:1e:c8:db:f0:ef:69:4f:2f:27:b9:e7:e8:a0:
13:50:bb:49:25:3e:d2:35:e2:61:e0:32:c0:67:b2:5c:12:84:
66:a3:00:61:6e:80:38:c0:e8:66:d0:39:e4:f1:9e:5d:9a:86:
ed:9b:53:6c:fe:b7:18:39:4d:83:1b:bb:1c:9e:a9:43:0d:cc:
62:8d:5f:6e:28:c5:55:2c:a7:5b:81:6d:2c:c1:28:73:73:d4:
1b:72:80:d5:3f:db:e3:c0:6e:b5:72:60:33:b9:7c:01:ae:b4:
9a:a5:ec:d7:94:8e:b0:20:53:0f:fb:20:33:3b:21:93:77:5d:
3a:d6:be:ea:21:71:14:82:f5:b9:76:b4:8f:a7:91:6e:e6:1d:
85:a3:3c:38:7c:ce:1d:91:87:1b:e7:24:1c:7c:77:46:6a:8f:
94:1e:fc:54:10:1a:48:98:09:d4:28:d6:11:2a:1e:6f:fc:98:
6c:1e:5f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:06:21 2026 by rpki-client