Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/D0YcMPOnrSPV7ASIyczMje58jk0.roa
File: D0YcMPOnrSPV7ASIyczMje58jk0.roa (raw, json)
Hash identifier: Is1vr91+FB4C4ZqWVmY3m9n+tl9WokJiTH6COjiU6fc=
Subject key identifier: 0F:46:1C:30:F3:A7:AD:23:D5:EC:04:88:C9:CC:CC:8D:EE:7C:8E:4D
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 019F236837643438CC46CEDD097A6081C35F
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/D0YcMPOnrSPV7ASIyczMje58jk0.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203252
IP address blocks: 2a02:eb00:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:37:64:34:38:cc:46:ce:dd:09:7a:60:81:c3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f461c30f3a7ad23d5ec0488c9cccc8dee7c8e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:63:cc:6d:73:ea:71:3d:19:31:72:df:d3:5b:
97:8e:98:e0:33:8f:bd:fb:25:f2:51:0d:47:0f:56:
3d:78:98:3e:aa:42:fd:c1:12:ac:12:b3:23:c8:59:
c4:a4:42:bd:cd:7f:1b:68:98:07:6e:5d:b9:54:d1:
91:46:4a:46:ab:46:bd:a3:a7:b8:20:c5:41:33:90:
64:a9:b1:95:c2:33:2c:34:df:4e:d0:2d:9d:1b:06:
54:31:45:13:af:ac:86:51:4a:55:bd:a5:49:85:a7:
1c:35:ef:37:47:a6:a1:9f:ce:5d:1e:b1:e9:66:5b:
fa:80:6f:97:d7:94:21:29:27:c7:28:e9:5b:57:3a:
ba:53:3c:6c:43:31:33:0a:5d:33:2b:8b:d3:64:aa:
ea:05:90:d0:7e:54:d6:a4:ca:3c:97:ea:95:56:45:
2c:27:59:5a:17:72:5f:b9:a1:04:27:ea:6c:71:02:
4e:fe:75:2a:18:81:11:f3:b8:f0:3f:6f:d7:7f:d9:
c4:cf:22:a8:10:db:71:a8:36:d1:e3:e4:9d:26:03:
2f:aa:66:9b:e4:31:7a:d7:4d:a2:2e:91:44:bb:55:
67:e7:89:14:7d:f4:d0:07:b9:e7:94:aa:0d:a1:74:
9d:75:f1:48:aa:7a:d5:69:d1:c8:34:31:6b:48:6e:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:46:1C:30:F3:A7:AD:23:D5:EC:04:88:C9:CC:CC:8D:EE:7C:8E:4D
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/D0YcMPOnrSPV7ASIyczMje58jk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:eb00:2::/48
Signature Algorithm: sha256WithRSAEncryption
6f:50:c5:bc:d2:08:78:23:f7:e9:aa:2c:73:c9:fb:3a:91:47:
af:20:f1:ff:93:30:bc:1e:1c:fd:41:2e:5b:b8:ea:24:da:cc:
4f:50:6a:38:a0:86:c9:cc:0a:3e:31:59:ef:1d:ba:fb:0d:a1:
98:1e:e2:30:34:4c:18:4e:6e:2c:a6:13:e6:74:39:9e:61:91:
2c:fe:20:e3:4c:62:dc:70:ae:8d:8e:3c:1c:71:fe:a4:6e:f0:
f2:1b:df:c8:8e:3f:e9:6c:44:59:c5:92:e4:bb:ac:0d:b8:b7:
cb:0e:2a:b1:ab:ab:5e:3f:8a:55:77:5d:1c:e2:bd:d4:e7:a6:
40:a1:78:52:f7:dd:14:2f:ea:4c:78:1a:86:54:c7:e8:f8:1d:
34:94:0e:93:cc:94:09:d1:8b:1c:e3:83:54:ef:11:0a:1c:a9:
67:6b:12:1f:3a:c6:11:e5:10:d0:d6:36:9f:a3:91:80:17:a2:
11:d9:cf:25:cd:e6:52:45:dc:f4:18:44:db:e6:00:07:ea:fc:
ec:42:19:ed:6d:dc:2b:b4:3f:8c:2c:08:dc:cf:8a:4e:34:bb:
18:0c:3f:e6:0e:d0:4d:7a:b0:a7:9b:15:ee:df:9f:db:e3:ed:
e3:14:1f:52:68:32:8f:7e:16:a5:d1:f5:11:73:d5:2b:6a:55:
ae:90:52:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:05:28 2026 by rpki-client