Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/0e4922-e547-4559-b7a3-79962c0f4515/1/onax22orp9aPX6JBzkCEgQHEpK4.roa
File: onax22orp9aPX6JBzkCEgQHEpK4.roa (raw, json)
Hash identifier: YkAqulV7jTa5rY8AeeKV4BLqEQTQB2lE7BiD7vGkE+M=
Subject key identifier: A2:76:B1:DB:6A:2B:A7:D6:8F:5F:A2:41:CE:40:84:81:01:C4:A4:AE
Certificate issuer: /CN=f1d1f63dc123ec6a64cfc9562047d9ea02969c9a
Certificate serial: 019FACA52E4B900B3C47D1FB84497F6DCC62
Authority key identifier: F1:D1:F6:3D:C1:23:EC:6A:64:CF:C9:56:20:47:D9:EA:02:96:9C:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/0e4922-e547-4559-b7a3-79962c0f4515/1/onax22orp9aPX6JBzkCEgQHEpK4.roa
Signing time: Wed 29 Jul 2026 06:52:14 +0000
ROA not before: Wed 29 Jul 2026 06:52:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215000
IP address blocks: 2a04:4080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/0e4922-e547-4559-b7a3-79962c0f4515/1/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/0e4922-e547-4559-b7a3-79962c0f4515/1/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:a5:2e:4b:90:0b:3c:47:d1:fb:84:49:7f:6d:cc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d1f63dc123ec6a64cfc9562047d9ea02969c9a
Validity
Not Before: Jul 29 06:52:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a276b1db6a2ba7d68f5fa241ce40848101c4a4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:54:13:ee:0e:f6:c6:b6:26:76:c5:fb:de:dc:
7e:f2:98:57:00:26:7f:f9:03:29:74:0a:a4:fe:05:
bc:a2:67:f4:1f:32:81:25:c0:bb:1f:cb:fb:83:1d:
82:a8:1f:44:78:a1:8e:8d:25:8e:8f:54:2c:ee:87:
28:36:92:a7:6e:f5:b8:1b:6e:1c:97:6c:cb:45:1a:
85:a6:80:c2:6f:c4:ed:f0:3a:a2:af:27:d7:8f:23:
e0:c5:9d:42:58:45:3a:c4:ee:28:d5:73:37:e3:92:
bd:c4:76:8d:49:4a:49:d3:9d:54:ea:31:f1:ab:0d:
c7:55:41:0c:ac:dc:0e:cf:9b:aa:4e:47:c8:37:71:
90:fe:4f:db:bf:13:5e:dd:6c:d8:34:04:f3:5e:1c:
b1:2f:8d:02:a7:16:1d:4b:f3:7a:02:e8:36:1f:58:
8f:13:64:e4:e8:d1:d0:22:36:bb:76:ae:26:17:9e:
05:5c:75:a6:3d:98:2f:ed:1c:40:49:d3:f9:03:38:
ba:5b:2f:5a:ac:ed:99:d4:39:f6:28:80:eb:45:b9:
97:4c:b7:08:d8:4a:8d:7a:77:2e:2e:5e:9d:bb:fe:
15:85:5f:dc:9b:b0:a4:b0:14:bf:46:0f:6c:27:c1:
e6:62:5d:e5:09:c6:32:86:45:44:87:06:2a:52:03:
0e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:76:B1:DB:6A:2B:A7:D6:8F:5F:A2:41:CE:40:84:81:01:C4:A4:AE
X509v3 Authority Key Identifier:
keyid:F1:D1:F6:3D:C1:23:EC:6A:64:CF:C9:56:20:47:D9:EA:02:96:9C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0e4922-e547-4559-b7a3-79962c0f4515/1/onax22orp9aPX6JBzkCEgQHEpK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0e4922-e547-4559-b7a3-79962c0f4515/1/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:4080::/29
Signature Algorithm: sha256WithRSAEncryption
65:aa:2d:9b:38:6a:58:2f:a8:7f:56:ea:50:c7:47:4f:f7:8c:
8f:db:82:d4:bd:a7:2a:19:f3:69:fa:9e:e8:b3:d3:bf:3d:12:
77:aa:fa:75:7d:f7:5a:fa:cc:89:e5:b4:11:fa:27:13:7e:c4:
4e:2c:58:47:13:1a:03:63:4c:84:83:e8:b9:27:fd:54:cf:4f:
1e:9e:31:81:7e:d5:e5:ae:7f:a8:27:5f:34:d5:71:a0:d1:a0:
55:aa:0c:18:fb:a0:02:1c:01:47:2e:ce:c3:c8:1a:63:ca:2d:
60:3e:14:91:25:ce:a5:aa:b6:4e:a5:72:ee:ba:59:7d:74:0d:
25:08:6b:1e:6e:ba:3e:6a:bb:d1:04:ac:b8:f3:c8:4d:90:76:
d7:2a:c8:c8:d7:80:2a:61:d8:d6:ca:a6:1b:c6:8d:a2:79:dc:
2f:cb:11:c7:3b:fa:90:60:9d:25:5d:a9:18:37:e9:c8:34:cc:
d2:6b:23:61:04:fc:7d:be:17:bb:20:f7:56:f1:e6:6e:fc:5c:
49:b1:49:e0:c6:c3:99:3f:b3:06:86:96:3a:8a:8e:0f:dc:af:
e1:a8:9e:47:42:31:cc:f7:3c:38:19:fe:f8:ec:6b:ab:3e:79:
d0:d2:31:3b:5f:e9:45:c3:7d:e7:ab:1b:c6:59:99:27:1d:c9:
37:b5:4d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:33:53 2026 by rpki-client