Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/r389-bRwfoFv3ttONx48xMLoaP4.roa
File: r389-bRwfoFv3ttONx48xMLoaP4.roa (raw, json)
Hash identifier: 6ncl/Ha3OCO5NlFbPQiKMRrxUuWAUkS775Z1nyXGIO4=
Subject key identifier: AF:7F:3D:F9:B4:70:7E:81:6F:DE:DB:4E:37:1E:3C:C4:C2:E8:68:FE
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019ED51CB28C6D4AEA661E6FEB45A82E8AC7
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/r389-bRwfoFv3ttONx48xMLoaP4.roa
Signing time: Wed 17 Jun 2026 10:24:48 +0000
ROA not before: Wed 17 Jun 2026 10:24:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209057
IP address blocks: 2a0d:d940:90aa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:1c:b2:8c:6d:4a:ea:66:1e:6f:eb:45:a8:2e:8a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jun 17 10:24:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af7f3df9b4707e816fdedb4e371e3cc4c2e868fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:b9:26:9b:19:61:a9:61:40:0c:13:f0:07:
49:83:45:68:c4:9b:e8:a4:8d:e4:7e:f4:be:c2:3b:
ec:da:cf:85:62:0f:83:99:bf:e9:92:5d:87:9a:9b:
96:dc:29:95:fc:8f:46:5f:56:97:b8:14:38:85:1e:
bd:08:ef:ef:b8:68:37:01:4d:60:cd:75:ba:75:9f:
54:6b:75:bc:b4:13:32:f8:c2:0b:05:21:ab:61:9a:
31:e9:29:e6:91:eb:ea:c6:5b:78:df:3b:65:9c:de:
f7:04:86:c9:12:14:db:19:cb:dc:78:a1:8a:a5:54:
3f:94:cf:46:34:33:86:9a:9f:f3:81:a0:aa:8a:5c:
e7:f7:3a:7a:e5:14:60:7d:b4:0a:a5:95:f0:df:d8:
ba:38:53:8e:ef:92:71:45:47:d5:f3:d4:20:24:b5:
81:64:25:af:9a:a3:a0:56:a8:0f:05:31:dd:4e:43:
da:9c:2f:19:6d:e2:2a:0b:6f:b0:41:8a:d6:80:cf:
f2:5d:56:44:a5:7f:d8:a9:df:5b:0d:2c:19:61:4e:
14:6d:92:0f:0d:19:0a:39:26:8d:4c:82:fd:3f:1a:
e6:7f:a7:95:e8:18:0f:59:1b:81:ef:0a:ba:95:77:
8b:6e:e1:7b:16:bd:4a:31:dc:a6:a3:60:26:57:c3:
29:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7F:3D:F9:B4:70:7E:81:6F:DE:DB:4E:37:1E:3C:C4:C2:E8:68:FE
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/r389-bRwfoFv3ttONx48xMLoaP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:90aa::/48
Signature Algorithm: sha256WithRSAEncryption
56:3b:d9:6a:ae:32:09:58:4e:31:9d:3e:42:96:be:4f:1f:24:
8f:78:07:6d:e8:21:50:a3:10:ba:fe:4f:1c:f7:52:af:70:4d:
1d:2b:a2:76:b2:3d:ed:d1:ce:84:0b:3d:9a:44:6e:e0:29:dd:
df:f8:6c:64:22:fb:93:87:e2:a5:4a:7c:4f:6c:cc:a7:f2:ed:
59:56:91:bc:65:a6:0d:ac:3c:22:bd:32:34:08:a8:e8:53:e7:
d8:ef:32:49:89:7c:1c:98:8c:91:6b:1f:90:e0:7b:f6:b9:d5:
c0:eb:e4:f2:08:b0:5d:54:0a:54:d4:42:11:51:e7:a7:fe:40:
15:91:9f:3d:4d:4b:66:be:e2:8a:b2:3a:d4:dd:f9:92:d8:3a:
50:3c:4d:3b:bf:45:dd:c1:f0:a5:65:c1:8c:cf:4b:b1:53:5d:
b4:fa:9c:2d:1f:9a:49:1d:0c:91:68:fa:5f:d1:58:01:03:97:
4b:68:55:cb:82:1f:de:da:32:56:61:16:17:8a:e4:4b:6b:77:
ec:0f:a5:17:b7:28:7c:90:77:96:7f:dc:6d:d6:9a:b3:70:a5:
b4:7a:62:41:87:b0:98:90:e3:a3:01:35:d0:25:72:bf:ff:34:
fb:02:9d:bd:cb:a7:af:dd:e7:1c:42:1a:49:cd:ff:04:33:af:
e4:d1:40:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:44:11 2026 by rpki-client