Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/0VGVkCvQt23BC-trY53WIQUsSbA.roa
File: 0VGVkCvQt23BC-trY53WIQUsSbA.roa (raw, json)
Hash identifier: h48/1y9WK2GgY15PRNCC82eqCwES44G+cuUjwUvJzvg=
Subject key identifier: D1:51:95:90:2B:D0:B7:6D:C1:0B:EB:6B:63:9D:D6:21:05:2C:49:B0
Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial: 019FDC497B91668CF21AC70C3EBA5AA95B30
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/0VGVkCvQt23BC-trY53WIQUsSbA.roa
Signing time: Fri 07 Aug 2026 12:53:51 +0000
ROA not before: Fri 07 Aug 2026 12:53:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137410
IP address blocks: 46.29.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:49:7b:91:66:8c:f2:1a:c7:0c:3e:ba:5a:a9:5b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Validity
Not Before: Aug 7 12:53:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d15195902bd0b76dc10beb6b639dd621052c49b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:91:8f:8a:b3:0b:a3:db:28:44:8c:2f:49:
05:51:dc:4f:d9:e8:08:94:9f:0b:e1:1d:d8:63:37:
65:8d:a8:94:29:d0:52:95:2c:4c:60:15:e2:6e:39:
a2:67:c0:49:51:1e:5b:d8:bd:64:d2:34:20:42:d7:
4f:1c:84:b6:ae:fa:03:c8:e2:10:be:54:7a:36:4b:
b6:e5:9a:dc:61:38:dd:89:35:c4:c5:33:8e:09:61:
f0:60:22:6d:e0:e1:9a:3a:15:c2:0a:81:2d:e1:56:
b8:b7:25:6b:a6:71:2d:d4:3c:e9:15:51:52:77:41:
cf:8d:cb:c4:fc:70:6b:a5:fe:f5:2a:19:bb:0c:d1:
cb:c0:e5:2d:18:83:62:4a:65:85:d9:2d:fe:c0:af:
ff:d7:04:a6:18:0b:65:ef:77:b0:7d:4f:ac:ee:3d:
0c:37:89:45:f3:af:3a:f6:2c:a9:c3:d3:1b:69:13:
4c:d4:9b:c7:6b:12:8e:66:33:be:7d:5b:f9:bc:70:
86:db:07:90:58:17:44:d3:8a:ec:16:3d:f5:a1:40:
01:b9:a9:7e:13:6d:85:97:e4:97:b9:2f:13:a5:bf:
98:45:5a:70:b4:21:ae:e7:df:49:db:23:3b:20:61:
18:14:3d:df:23:c1:3f:23:e6:59:32:d4:be:d6:18:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:51:95:90:2B:D0:B7:6D:C1:0B:EB:6B:63:9D:D6:21:05:2C:49:B0
X509v3 Authority Key Identifier:
keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/0VGVkCvQt23BC-trY53WIQUsSbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.36.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:92:ae:54:e7:7b:f9:b0:87:ac:55:ef:77:01:c0:11:2f:ed:
1f:70:b5:b3:22:fe:a5:f2:25:c2:b1:19:16:fd:df:58:4e:25:
89:f0:7a:32:e9:a1:a3:35:a2:5b:80:2a:1f:e5:11:b4:20:1b:
83:da:a6:94:4a:25:98:91:30:58:55:68:69:c2:fa:b6:b2:1d:
8b:2e:9e:2b:b8:9e:11:91:12:8c:28:99:09:25:b5:82:1e:11:
53:80:30:60:3c:4c:02:7c:46:de:f8:aa:d5:39:68:70:f5:a3:
01:0b:3f:ec:29:07:34:28:42:7e:86:85:da:79:78:d2:48:40:
39:e5:a4:4e:7c:dc:81:2c:a1:de:41:41:67:9c:bb:7f:1a:da:
2c:0f:b7:cf:c2:58:c6:72:ff:ed:f5:15:86:fd:e4:ec:07:ee:
27:8a:5a:fd:6c:e6:3b:ae:b1:02:66:92:a0:97:db:e4:a5:3c:
16:fe:6c:08:df:44:16:30:52:ca:b5:68:06:f8:90:79:46:44:
5b:54:7a:43:fc:32:1a:8a:d2:18:d3:f0:9e:21:eb:86:40:9b:
fc:5d:79:a1:ec:5a:ea:c4:00:76:02:2f:ad:e8:02:64:76:51:
97:b9:d0:29:32:95:9f:dc:3f:10:1a:f3:92:fe:6a:a9:31:70:
29:9f:d4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:43:09 2026 by rpki-client