Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/_0QOD1iLOQ7nNSalXlUFq8l1DKc.roa
File: _0QOD1iLOQ7nNSalXlUFq8l1DKc.roa (raw, json)
Hash identifier: 9LxeCfnSlKfLVjaLSznS7g6keBzye2Y5wzmO6/J4hdM=
Subject key identifier: FF:44:0E:0F:58:8B:39:0E:E7:35:26:A5:5E:55:05:AB:C9:75:0C:A7
Certificate issuer: /CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Certificate serial: 019F2368974E80774A8F470DA4D9CEDC00C8
Authority key identifier: EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/_0QOD1iLOQ7nNSalXlUFq8l1DKc.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202313
IP address blocks: 2a0d:1a40:fa0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:97:4e:80:77:4a:8f:47:0d:a4:d9:ce:dc:00:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff440e0f588b390ee73526a55e5505abc9750ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:61:6c:e0:9c:b4:97:79:d8:ca:ef:d0:aa:
6c:1c:c5:5b:6d:2b:52:5b:33:38:01:9a:90:22:32:
19:5f:fc:da:99:fe:29:70:1e:70:e8:c9:c9:7b:ce:
72:14:c7:e5:d9:57:89:23:a2:55:ac:79:cf:f2:3c:
f8:a9:6f:57:1b:fe:6c:44:b1:27:f1:11:7e:8e:9a:
de:c8:a2:02:31:55:fb:7f:c3:cf:64:db:02:aa:05:
1b:80:48:25:15:9b:b1:00:80:72:bb:2f:d5:d8:63:
be:97:9b:51:c2:c9:1e:51:c0:aa:58:1e:0a:d2:40:
0e:be:53:22:ea:94:05:47:7b:dd:e2:0a:05:62:b6:
56:d8:89:49:a2:e8:7f:64:c8:92:96:99:a0:b9:b6:
92:71:1a:9a:87:a0:0c:c0:40:a2:47:b4:e2:f9:a7:
63:2e:bc:62:1b:69:c6:a6:da:30:20:2e:2b:ab:2b:
a7:b9:ba:94:bf:c4:8f:71:30:ee:01:56:77:dd:31:
0f:ba:51:90:63:98:fa:04:20:57:42:85:00:f9:2f:
1d:25:81:9d:4b:69:d7:73:80:5d:9e:10:86:aa:20:
16:dd:d7:be:6f:64:9c:aa:0b:d0:45:73:65:1d:29:
96:90:09:56:55:33:29:89:b8:ca:38:b4:c5:f7:e7:
12:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:44:0E:0F:58:8B:39:0E:E7:35:26:A5:5E:55:05:AB:C9:75:0C:A7
X509v3 Authority Key Identifier:
keyid:EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/_0QOD1iLOQ7nNSalXlUFq8l1DKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1a40:fa0::/44
Signature Algorithm: sha256WithRSAEncryption
79:99:bb:01:43:f0:ae:10:19:a7:53:71:ed:b3:4c:df:d6:17:
93:c8:84:62:3d:56:e3:fd:36:94:3c:66:4c:ae:e3:d3:ac:94:
7b:89:73:92:05:20:9e:f4:fd:4e:31:28:2f:2b:ca:3c:16:ae:
cb:03:de:96:6f:30:d6:32:33:00:52:7c:16:62:12:d3:3f:81:
c4:72:00:44:c0:ab:40:59:b3:88:93:08:fb:32:94:11:8a:fb:
d3:30:b5:c9:53:44:ff:9d:fe:75:cc:22:59:38:b4:d6:b9:23:
3f:77:0d:92:c2:5f:d1:cb:39:26:15:41:41:81:7d:4f:0d:7d:
e1:7d:d1:e0:7b:e6:2b:41:69:7c:fb:2d:fb:5f:94:b2:30:72:
92:ca:72:17:29:86:98:e4:bb:2e:3f:44:81:fc:2d:42:dc:36:
5d:da:f7:f0:32:43:c4:bb:d9:c8:f7:6e:d6:09:42:c6:8d:d2:
08:e4:e3:90:cc:72:98:ac:a0:11:24:93:aa:69:25:aa:1c:fc:
ed:07:15:7f:ed:30:60:94:83:9f:88:3f:4c:4b:01:ad:13:08:
e8:d0:13:68:c7:d1:55:75:d7:f3:18:40:ad:6f:03:4b:83:03:
8d:ba:ff:8c:84:a1:f8:d5:bd:c4:af:63:fc:43:d9:90:de:38:
27:e9:27:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:43:28 2026 by rpki-client