Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/P0H9mn8azX8J6K-hdAfHiYeHr48.roa
File: P0H9mn8azX8J6K-hdAfHiYeHr48.roa (raw, json)
Hash identifier: E4c9kuinUCaG0thWwOJajTUQL7VeKxkEvaLK1sfiV8U=
Subject key identifier: 3F:41:FD:9A:7F:1A:CD:7F:09:E8:AF:A1:74:07:C7:89:87:87:AF:8F
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 019F43AD11F85DFD8AE37C81578C66EDF625
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/P0H9mn8azX8J6K-hdAfHiYeHr48.roa
Signing time: Wed 08 Jul 2026 21:40:43 +0000
ROA not before: Wed 08 Jul 2026 21:40:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216106
IP address blocks: 2001:4b88:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:43:ad:11:f8:5d:fd:8a:e3:7c:81:57:8c:66:ed:f6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Jul 8 21:40:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f41fd9a7f1acd7f09e8afa17407c7898787af8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:a9:97:8d:18:c7:8e:39:e9:3e:1c:5d:d4:
ad:01:06:76:f6:a7:40:30:0f:64:b9:32:76:d3:c0:
e7:dc:f9:27:9e:6e:a6:4d:85:bd:4f:ae:7c:32:3e:
47:50:65:79:d4:92:4a:0b:3b:cd:9a:08:f6:b5:e2:
44:d8:cc:7d:48:f9:de:35:81:c6:93:9d:50:ee:7a:
8f:1b:24:0f:03:89:ed:fa:b8:f0:07:0b:86:72:e0:
66:2f:fb:a0:0a:26:88:9d:3e:12:c6:4d:44:2d:27:
ae:a2:30:5b:53:4e:e1:11:34:71:12:1b:21:84:cf:
da:45:27:dd:18:30:d5:e5:36:d1:2f:99:e4:6e:2f:
6f:9a:c8:f1:e5:22:a9:a0:05:cc:51:51:73:57:79:
af:6a:7e:16:d0:24:5e:53:30:21:d1:df:7f:7f:91:
c2:d2:b6:c3:22:c4:0a:11:13:73:71:96:bb:aa:77:
b2:eb:03:fb:0d:9d:84:51:3a:32:4e:20:62:ad:df:
de:24:aa:42:6b:e1:c9:33:e9:8f:e4:cc:ba:6e:8f:
0d:f2:7d:9e:4e:28:46:28:dc:cc:a2:f5:d2:d4:81:
41:64:33:88:b8:b8:db:34:94:2d:ff:1b:88:be:1e:
41:99:13:af:5d:15:72:77:6b:17:0b:6d:0f:4c:fb:
f4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:41:FD:9A:7F:1A:CD:7F:09:E8:AF:A1:74:07:C7:89:87:87:AF:8F
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/P0H9mn8azX8J6K-hdAfHiYeHr48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4b88:4000::/34
Signature Algorithm: sha256WithRSAEncryption
51:5e:e5:b5:15:cb:38:59:80:be:45:4e:8c:98:ec:5e:a9:29:
b1:5f:bc:a0:54:cd:cd:f5:5a:20:09:38:2b:36:18:1d:ab:23:
11:8b:f6:15:eb:14:4c:a4:b6:f8:6b:cf:b4:67:04:8e:51:4d:
14:8f:1b:a5:f1:1d:d6:78:0b:63:ad:bf:9a:b8:ac:51:c2:84:
84:e1:31:ce:ec:d0:c2:47:79:ce:78:ae:e7:71:60:40:6e:a3:
8d:d5:4f:6a:e3:69:bd:29:03:02:af:80:19:d8:41:b7:de:9d:
1b:c8:32:ab:b7:af:d3:bc:d2:5a:8b:6d:ea:68:8b:45:d5:9c:
20:f4:8f:ac:fe:8a:68:c3:11:0d:2c:85:0f:ae:14:14:52:ef:
30:56:33:0f:c4:f3:e7:47:f1:a0:8e:c4:5e:47:c7:7f:05:b3:
1a:63:64:18:a1:74:c5:b4:da:05:75:3b:a0:b2:dc:dc:67:f3:
30:c5:7b:af:92:bd:bc:d9:32:12:c1:f2:48:03:3e:b0:d2:92:
75:0f:c5:84:03:c5:1d:b4:71:e9:ea:4a:8d:7f:38:a2:4d:7d:
d1:f0:9e:c1:21:07:27:a8:d5:bb:30:22:bf:89:3d:54:a0:fd:
0a:1e:a5:91:80:b0:d7:1e:77:61:45:e8:c8:8c:03:9f:10:90:
11:62:2e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:48 2026 by rpki-client