Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/oLuKdixsOjJR-VV4eMZXfYnBYJU.roa
File: oLuKdixsOjJR-VV4eMZXfYnBYJU.roa (raw, json)
Hash identifier: xdydxHf6VBS+CoP8LITMwPDaX0WVPwIeOUN/SU7lK8g=
Subject key identifier: A0:BB:8A:76:2C:6C:3A:32:51:F9:55:78:78:C6:57:7D:89:C1:60:95
Certificate issuer: /CN=136ad6a4148d9c2052f40069fe70ed3eb8bef01b
Certificate serial: 019F236881BEAE20924C4DA0C7F12C4163FE
Authority key identifier: 13:6A:D6:A4:14:8D:9C:20:52:F4:00:69:FE:70:ED:3E:B8:BE:F0:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2rWpBSNnCBS9ABp_nDtPri-8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/oLuKdixsOjJR-VV4eMZXfYnBYJU.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42244
IP address blocks: 2a04:b540:1000::/36 maxlen: 36
2a04:b540:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/E2rWpBSNnCBS9ABp_nDtPri-8Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/E2rWpBSNnCBS9ABp_nDtPri-8Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2rWpBSNnCBS9ABp_nDtPri-8Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:81:be:ae:20:92:4c:4d:a0:c7:f1:2c:41:63:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=136ad6a4148d9c2052f40069fe70ed3eb8bef01b
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0bb8a762c6c3a3251f9557878c6577d89c16095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:42:1c:ce:ae:25:bc:d0:1d:50:b1:fc:b9:46:
9b:e7:cc:86:56:65:df:56:f4:f0:c0:0b:b7:61:33:
36:f1:a5:7f:e3:0e:1f:3d:69:e6:3e:01:95:82:1f:
dc:49:11:fc:18:b4:a1:89:cd:45:c3:de:92:ae:e5:
d9:d4:8d:78:70:28:45:c1:f4:0f:77:32:12:1f:47:
f1:99:f0:2b:d1:1b:67:87:bf:4e:de:ac:99:e5:fd:
87:f3:4b:44:92:fa:43:7f:11:1d:9e:6c:cf:0e:a2:
8d:01:a9:1c:e8:38:f2:db:54:3f:8e:f9:b7:61:a9:
48:1b:17:f4:65:3b:fd:1f:51:1e:8b:ec:e0:6d:d1:
f9:ac:2d:d1:9e:9e:dd:96:67:02:3f:35:41:01:94:
8c:14:cc:2f:e4:9e:5b:15:41:d9:17:97:73:25:6d:
25:b9:f2:61:dc:38:d4:bf:aa:0c:ff:46:1e:19:5f:
0a:95:b1:47:bc:be:9c:61:c3:df:83:75:59:36:bf:
1c:88:83:9b:93:d8:27:02:24:1e:12:10:75:0f:07:
db:3a:3a:70:06:82:ca:a2:40:cb:a9:02:4a:9a:d6:
ba:e1:67:dd:af:07:1d:71:38:01:e7:af:9a:54:44:
42:25:37:39:d0:e6:74:24:90:15:40:2a:4e:0c:d9:
c8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BB:8A:76:2C:6C:3A:32:51:F9:55:78:78:C6:57:7D:89:C1:60:95
X509v3 Authority Key Identifier:
keyid:13:6A:D6:A4:14:8D:9C:20:52:F4:00:69:FE:70:ED:3E:B8:BE:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2rWpBSNnCBS9ABp_nDtPri-8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/oLuKdixsOjJR-VV4eMZXfYnBYJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/E2rWpBSNnCBS9ABp_nDtPri-8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b540:1000::-2a04:b540:2fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
37:5a:0d:12:e9:bd:2d:bb:14:1f:5c:b2:7c:d0:7f:36:1a:57:
63:85:93:ae:fa:35:43:f7:90:64:51:2b:b4:53:1f:e4:74:24:
ae:5c:9c:76:1c:4b:1e:50:b9:87:f6:00:ef:5f:01:ef:ba:90:
60:f3:88:d5:41:29:8f:71:28:90:8b:43:6a:75:b8:0a:11:7d:
24:e8:8a:2d:fb:d9:93:53:2b:b3:2d:96:a9:6c:cf:61:3a:e6:
59:4a:9d:29:7d:a2:6e:0b:b1:9d:c7:92:b7:82:05:3b:c2:9e:
95:d6:06:8b:38:ea:db:76:16:30:d8:89:8c:ff:94:86:09:3a:
69:5c:f6:75:7f:68:00:4a:32:06:00:db:5d:4f:10:9a:9e:80:
28:1e:7c:1c:83:e6:e6:dd:76:83:72:50:ad:a9:96:b2:5b:c9:
6e:87:5e:a8:87:c3:04:d7:10:81:05:3a:db:e7:78:89:5d:95:
81:bd:81:98:5a:5c:12:9b:30:be:d8:4c:9d:d8:e5:d2:35:4f:
7e:f9:3d:96:ec:fe:41:b4:56:15:0d:2c:f2:74:83:05:d9:76:
50:7b:80:89:32:8f:af:f0:28:d9:90:de:84:94:1e:86:49:0d:
c0:b5:dc:a2:62:18:c7:46:f6:82:8e:7c:03:90:f0:7b:94:4e:
7b:a1:84:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 14:15:13 2026 by rpki-client