Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/pk1n32_6wDCth_KFQiNLI04TQeQ.roa
File: pk1n32_6wDCth_KFQiNLI04TQeQ.roa (raw, json)
Hash identifier: UrkjSU2AnOmSwgJlZMHSDfm+daaFnMquUxnVyiBeYYs=
Subject key identifier: A6:4D:67:DF:6F:FA:C0:30:AD:87:F2:85:42:23:4B:23:4E:13:41:E4
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019CEEAA62A272F12765DE449B9DD78E39D6
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/pk1n32_6wDCth_KFQiNLI04TQeQ.roa
Signing time: Sat 14 Mar 2026 23:24:29 +0000
ROA not before: Sat 14 Mar 2026 23:24:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11967
IP address blocks: 2a0d:d940:5c::/47 maxlen: 47
2a0d:d940:2004::/48 maxlen: 48
2a0d:d940:2006::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ee:aa:62:a2:72:f1:27:65:de:44:9b:9d:d7:8e:39:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Mar 14 23:24:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a64d67df6ffac030ad87f28542234b234e1341e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4f:b2:ba:1d:18:39:29:71:92:a0:69:fe:ff:
1e:bf:ab:21:58:39:1b:f4:2f:22:5d:49:1e:c6:3f:
a3:d4:b0:fa:76:d0:ca:43:64:62:78:d9:c6:b8:69:
27:88:ad:bb:c7:df:5d:a1:c5:20:0e:50:9c:a0:07:
85:36:cb:6c:22:cd:4b:eb:25:a3:58:0b:39:6f:6d:
4b:a9:c9:7c:4a:67:3b:45:e6:58:4e:72:cf:0a:26:
d1:d7:34:5c:02:93:1a:6f:c2:1e:f2:92:04:37:14:
ba:06:cb:56:d0:32:b2:44:84:0f:5a:a5:b1:9c:75:
7e:46:83:44:03:e2:9c:24:c6:dd:e4:e3:dc:aa:2e:
15:e2:9d:23:36:28:95:fc:27:97:ed:dd:ea:3d:36:
c8:4d:48:b8:1f:88:25:33:4c:88:ff:16:79:06:46:
ff:7b:39:b5:da:77:1e:49:58:a0:6b:df:1d:1b:58:
5c:34:6e:c7:6e:45:0a:cd:e2:21:64:4e:ae:99:a6:
8e:3d:39:5f:b9:a1:2c:6d:d7:bc:fc:90:4f:88:cd:
be:14:b3:52:39:ea:30:e0:05:64:9f:0d:e2:d7:e3:
75:3f:0f:b1:c6:c0:c3:4c:91:3f:23:7a:26:e4:75:
ed:0a:21:9a:ac:f5:5f:f3:e2:2b:32:18:26:0e:f0:
ff:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4D:67:DF:6F:FA:C0:30:AD:87:F2:85:42:23:4B:23:4E:13:41:E4
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/pk1n32_6wDCth_KFQiNLI04TQeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:5c::/47
2a0d:d940:2004::/48
2a0d:d940:2006::/48
Signature Algorithm: sha256WithRSAEncryption
b6:28:9c:0f:3c:1a:25:ae:d4:48:8c:c0:8c:46:1b:1b:e6:d4:
85:ad:5c:db:f0:f5:e9:f6:ce:e0:6d:2e:06:a3:77:fe:51:d1:
97:1b:5c:34:eb:2c:f2:32:b8:c2:57:7d:7a:d4:e7:55:e3:c3:
fe:c4:1f:ee:81:83:c9:9e:a1:99:f3:af:6a:3f:07:40:df:65:
de:1d:ff:e1:82:61:01:82:38:f6:6a:66:fc:81:1c:07:27:9e:
8a:76:b0:1a:71:f0:7c:12:38:61:b5:5a:ae:d3:a9:06:05:41:
2d:c3:0f:59:d9:bc:f4:54:98:f6:eb:1c:a6:e9:b7:92:e6:d4:
5e:10:97:03:b0:ef:5e:df:a2:39:2c:d0:ee:9b:9c:eb:3b:3d:
bc:29:3d:da:25:f1:91:12:be:90:eb:0f:5c:30:40:7d:76:a0:
b6:22:a6:e8:2a:eb:f3:d1:ec:af:37:2a:01:d6:bd:88:64:89:
a3:65:d8:a1:fd:3d:1b:65:0b:83:18:15:1d:a3:24:bd:17:52:
f6:00:63:ff:ae:17:22:32:fe:a5:71:02:db:77:33:29:60:ca:
f2:31:13:07:6f:77:67:32:61:43:66:3f:91:dd:14:8d:1e:9d:
80:45:e0:bf:b6:46:a1:43:17:f7:05:71:e7:a6:4a:a8:53:64:
01:8d:04:99
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZzuqmKicvEnZd5Em53XjjnWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYwMzE0MjMyNDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjRkNjdkZjZmZmFjMDMwYWQ4N2YyODU0MjIzNGIyMzRlMTM0MWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk+yuh0YOSlxkqBp/v8ev6shWDkb
9C8iXUkexj+j1LD6dtDKQ2RieNnGuGkniK27x99docUgDlCcoAeFNstsIs1L6yWj
WAs5b21Lqcl8Smc7ReZYTnLPCibR1zRcApMab8Ie8pIENxS6BstW0DKyRIQPWqWx
nHV+RoNEA+KcJMbd5OPcqi4V4p0jNiiV/CeX7d3qPTbITUi4H4glM0yI/xZ5Bkb/
ezm12nceSViga98dG1hcNG7HbkUKzeIhZE6umaaOPTlfuaEsbde8/JBPiM2+FLNS
Oeow4AVknw3i1+N1Pw+xxsDDTJE/I3om5HXtCiGarPVf8+IrMhgmDvD/nwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFKZNZ99v+sAwrYfyhUIjSyNOE0HkMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvcGsxbjMyXzZ3REN0aF9LRlFpTkxJMDRUUWVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcBKg3ZQABc
AwcAKg3ZQCAEAwcAKg3ZQCAGMA0GCSqGSIb3DQEBCwUAA4IBAQC2KJwPPBolrtRI
jMCMRhsb5tSFrVzb8PXp9s7gbS4Go3f+UdGXG1w06yzyMrjCV3161OdV48P+xB/u
gYPJnqGZ869qPwdA32XeHf/hgmEBgjj2amb8gRwHJ56KdrAacfB8EjhhtVqu06kG
BUEtww9Z2bz0VJj26xym6beS5tReEJcDsO9e36I5LNDum5zrOz28KT3aJfGREr6Q
6w9cMEB9dqC2IqboKuvz0eyvNyoB1r2IZImjZdih/T0bZQuDGBUdoyS9F1L2AGP/
rhciMv6lcQLbdzMpYMryMRMHb3dnMmFDZj+R3RSNHp2AReC/tkahQxf3BXHnpkqo
U2QBjQSZ
-----END CERTIFICATE-----
Generated at Wed Mar 18 04:38:35 2026 by rpki-client