Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/sUHY0zeOH4myDaYRUn0RhX_wZ84.roa
File: sUHY0zeOH4myDaYRUn0RhX_wZ84.roa (raw, json)
Hash identifier: X5EQNeamkzBA7Ld8VyF8O0H5/OZTv208X3+3V3dV8VY=
Subject key identifier: B1:41:D8:D3:37:8E:1F:89:B2:0D:A6:11:52:7D:11:85:7F:F0:67:CE
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019E4E7E3EDB7FF9596C2EDFE0AB5DE3AECD
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/sUHY0zeOH4myDaYRUn0RhX_wZ84.roa
Signing time: Fri 22 May 2026 07:02:36 +0000
ROA not before: Fri 22 May 2026 07:02:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213529
IP address blocks: 2a0d:d940:20::/44 maxlen: 44
2a0d:d940:2008::/48 maxlen: 48
2a0d:d940:9006::/48 maxlen: 48
2a0d:d940:900e::/48 maxlen: 48
2a0d:d940:90ab::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:7e:3e:db:7f:f9:59:6c:2e:df:e0:ab:5d:e3:ae:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: May 22 07:02:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b141d8d3378e1f89b20da611527d11857ff067ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:a2:ff:85:48:d5:cc:31:08:4b:2f:8d:92:
24:7d:f8:ad:b0:a6:2e:10:64:49:61:ba:a8:cc:f1:
72:22:12:08:1b:f5:4c:ad:97:eb:b5:db:a2:7f:e4:
a9:72:38:4a:99:13:49:8c:6f:68:e4:f5:10:1b:76:
2e:da:27:3a:05:81:75:60:49:7f:47:e6:5a:a7:6f:
02:d1:5b:94:3e:29:90:95:ac:b2:34:a4:99:c6:39:
68:c8:da:4a:e4:20:ab:7d:9a:5f:4e:b7:1a:65:20:
44:49:fa:c5:94:c6:47:30:ab:00:d2:14:93:96:b2:
6c:f1:47:b8:8c:8c:0a:83:fe:ef:57:aa:10:69:ea:
03:a1:3d:05:04:90:84:9e:0e:be:af:d9:98:6c:d4:
c1:eb:2f:55:82:f1:e4:6d:43:c7:d0:37:62:a7:8c:
92:30:13:bf:c7:35:51:78:38:96:64:b1:9a:d7:35:
7f:58:bc:19:bf:6b:35:b8:e3:8e:43:cb:54:44:93:
cf:d6:c9:bd:8c:bc:c4:ab:07:3a:34:b0:8a:54:ec:
eb:e1:de:b8:c0:e4:6d:b4:ec:8b:11:56:73:15:f9:
5d:91:f0:04:64:31:5a:b8:51:91:26:8c:5c:c8:d1:
c2:a2:10:93:dc:cb:5c:82:da:5f:6f:f5:78:cc:9c:
1a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:41:D8:D3:37:8E:1F:89:B2:0D:A6:11:52:7D:11:85:7F:F0:67:CE
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/sUHY0zeOH4myDaYRUn0RhX_wZ84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:20::/44
2a0d:d940:2008::/48
2a0d:d940:9006::/48
2a0d:d940:900e::/48
2a0d:d940:90ab::/48
Signature Algorithm: sha256WithRSAEncryption
98:d9:9e:a5:97:17:8c:c1:de:71:ac:fd:a6:bb:17:c7:7f:b9:
93:de:12:cc:fb:9d:c8:fd:55:31:c9:70:e8:cb:e4:bc:3a:52:
3d:a2:4f:39:d8:c8:ca:41:8f:14:4c:42:a7:da:10:28:ae:e8:
3b:96:2f:e3:70:d4:a4:21:ce:e9:86:9b:31:78:af:d9:5a:ce:
68:c0:de:fa:e9:d1:b6:0e:41:bb:16:a4:90:ac:78:13:29:b2:
b3:b6:bd:8a:21:59:37:3d:cd:e4:02:db:77:66:db:16:51:a7:
8d:9c:e5:e3:20:d7:25:fc:72:1b:2d:7b:a7:e2:9b:aa:71:65:
ea:2e:40:e2:4d:94:e4:a9:97:ff:ec:ab:19:79:33:9b:e2:62:
80:6d:36:3e:6e:5d:84:3e:92:9d:44:ee:b4:f9:24:b1:6a:02:
1f:e7:42:2a:1a:e6:9b:18:3e:31:cf:82:ef:8b:e8:e9:23:7f:
b4:57:21:be:2e:01:17:f3:ed:0a:17:c9:d6:26:ba:fd:ad:d7:
f5:01:b0:49:cb:9f:91:ac:68:f5:15:38:a0:79:e6:73:79:1f:
1c:67:ea:fb:7d:1c:b5:f3:43:d9:f9:4a:8e:f0:eb:aa:af:15:
35:4a:a1:c9:2b:92:d4:df:6c:52:5e:a1:ef:34:67:95:b4:88:
01:3e:e6:75
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZ5Ofj7bf/lZbC7f4Ktd467NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYwNTIyMDcwMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTQxZDhkMzM3OGUxZjg5YjIwZGE2MTE1MjdkMTE4NTdmZjA2N2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7ii/4VI1cwxCEsvjZIkffitsKYu
EGRJYbqozPFyIhIIG/VMrZfrtduif+SpcjhKmRNJjG9o5PUQG3Yu2ic6BYF1YEl/
R+Zap28C0VuUPimQlayyNKSZxjloyNpK5CCrfZpfTrcaZSBESfrFlMZHMKsA0hST
lrJs8Ue4jIwKg/7vV6oQaeoDoT0FBJCEng6+r9mYbNTB6y9VgvHkbUPH0Ddip4yS
MBO/xzVReDiWZLGa1zV/WLwZv2s1uOOOQ8tURJPP1sm9jLzEqwc6NLCKVOzr4d64
wORttOyLEVZzFfldkfAEZDFauFGRJoxcyNHCohCT3Mtcgtpfb/V4zJwaDQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFLFB2NM3jh+Jsg2mEVJ9EYV/8GfOMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvc1VIWTB6ZU9ING15RGFZUlVuMFJoWF93Wjg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcEKg3ZQAAg
AwcAKg3ZQCAIAwcAKg3ZQJAGAwcAKg3ZQJAOAwcAKg3ZQJCrMA0GCSqGSIb3DQEB
CwUAA4IBAQCY2Z6llxeMwd5xrP2muxfHf7mT3hLM+53I/VUxyXDoy+S8OlI9ok85
2MjKQY8UTEKn2hAorug7li/jcNSkIc7phpsxeK/ZWs5owN766dG2DkG7FqSQrHgT
KbKztr2KIVk3Pc3kAtt3ZtsWUaeNnOXjINcl/HIbLXun4puqcWXqLkDiTZTkqZf/
7KsZeTOb4mKAbTY+bl2EPpKdRO60+SSxagIf50IqGuabGD4xz4Lvi+jpI3+0VyG+
LgEX8+0KF8nWJrr9rdf1AbBJy5+RrGj1FTigeeZzeR8cZ+r7fRy180PZ+UqO8Ouq
rxU1SqHJK5LU32xSXqHvNGeVtIgBPuZ1
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:33:01 2026 by rpki-client