Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/O5yYrSdzsWBhXAGaJ3GbbLdJki8.roa
File: O5yYrSdzsWBhXAGaJ3GbbLdJki8.roa (raw, json)
Hash identifier: NAJt8mOJoxYYW9MXtdTP+WC2VQ+5i9NPNpJvzgY1wPI=
Subject key identifier: 3B:9C:98:AD:27:73:B1:60:61:5C:01:9A:27:71:9B:6C:B7:49:92:2F
Certificate issuer: /CN=13e4dd8f804f6637568194e3c79395d8ea60bd49
Certificate serial: 019F2368F87F9AC361045226A4CE6C83346A
Authority key identifier: 13:E4:DD:8F:80:4F:66:37:56:81:94:E3:C7:93:95:D8:EA:60:BD:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/O5yYrSdzsWBhXAGaJ3GbbLdJki8.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15557
IP address blocks: 129.104.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f8:7f:9a:c3:61:04:52:26:a4:ce:6c:83:34:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e4dd8f804f6637568194e3c79395d8ea60bd49
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b9c98ad2773b160615c019a27719b6cb749922f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:3d:8e:d0:48:1a:72:b7:68:8d:a8:3e:75:
46:18:5a:2e:bc:75:d7:37:cc:fe:75:38:67:c8:c8:
be:5e:bd:dc:68:99:b7:9f:ae:67:9f:b3:1b:eb:36:
72:3c:0c:45:13:73:65:f6:42:9d:30:f4:14:63:b9:
4e:76:72:0d:3d:4b:1b:eb:1a:39:6b:3a:97:1a:3f:
09:da:4b:66:69:57:61:73:4d:a2:05:53:44:26:bc:
93:20:13:8d:25:40:2e:2a:e6:c9:3d:3d:ef:7d:07:
fc:f5:ba:4e:d2:18:1a:7e:de:36:35:de:37:7d:6e:
d2:fc:76:85:31:1f:cb:8a:70:d3:5d:da:8d:ac:54:
f4:d6:e6:df:1e:a1:cf:d7:97:58:6a:f0:d2:ad:84:
f1:f2:fa:0f:b4:00:06:71:32:89:40:4f:0b:b0:fa:
d1:b9:d1:1b:83:e4:fd:74:33:9b:97:8d:4d:a4:82:
3c:99:cb:92:04:70:a3:ae:89:e5:b1:9e:7a:5d:72:
c9:87:d6:d3:f0:c8:26:79:5c:66:ef:70:35:71:7d:
e4:e8:ef:af:db:37:83:48:e8:2c:35:8b:83:aa:f7:
af:1c:e7:a1:39:91:d6:67:fa:f0:6a:d0:17:c8:da:
f4:9b:b2:73:11:be:4d:05:c7:a8:45:a5:64:e5:e0:
39:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9C:98:AD:27:73:B1:60:61:5C:01:9A:27:71:9B:6C:B7:49:92:2F
X509v3 Authority Key Identifier:
keyid:13:E4:DD:8F:80:4F:66:37:56:81:94:E3:C7:93:95:D8:EA:60:BD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/O5yYrSdzsWBhXAGaJ3GbbLdJki8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.104.0.0/16
Signature Algorithm: sha256WithRSAEncryption
26:38:70:10:58:c5:bd:4f:73:bc:3a:1d:a0:90:fb:53:70:7b:
c8:69:2d:8e:14:3d:af:71:78:d8:f4:52:29:6a:92:5c:3e:1c:
e5:11:96:e0:83:9f:fb:6a:de:83:16:c3:48:3a:54:13:34:3d:
9b:da:a3:18:6c:77:f2:c7:7b:5f:4b:09:60:6b:70:b0:2c:e1:
5c:5f:98:b0:6b:65:80:8a:49:ab:83:9b:fc:20:df:cf:8e:ab:
2d:13:e1:8f:f9:7d:a0:6b:99:f2:c1:59:a4:25:af:96:f0:27:
07:a0:58:b6:bf:1a:22:b9:97:f9:f9:5d:5d:1a:72:23:fc:9a:
c8:d3:e3:fe:05:84:ab:da:16:0c:b5:c6:52:ec:3d:63:65:a8:
0f:7d:78:13:7c:fc:d9:aa:75:13:62:a0:26:ec:62:f9:e7:9c:
6b:80:1f:f8:c9:26:ea:01:bc:54:bb:31:09:dc:38:92:8d:ec:
b4:be:93:59:5f:f2:8c:5c:13:6d:53:ba:bf:a6:e9:b0:17:fa:
a3:fe:84:7c:50:ba:d4:ec:9d:c0:39:65:c1:3d:e2:98:4e:67:
00:02:21:d6:85:d8:16:fe:6d:63:98:34:69:16:92:34:0a:d0:
52:50:75:9e:0a:d8:c2:97:58:79:7e:09:b0:94:66:b7:02:66:
75:88:60:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:10 2026 by rpki-client