Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/o9LeVuyG4zwZfl9X19i5EI5YY1w.roa
File: o9LeVuyG4zwZfl9X19i5EI5YY1w.roa (raw, json)
Hash identifier: IhxdWhfxb6x1vtP/bQGfsWt6Bv7vG9Bd56mOjcaVmC0=
Subject key identifier: A3:D2:DE:56:EC:86:E3:3C:19:7E:5F:57:D7:D8:B9:10:8E:58:63:5C
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019FF5B24EB14D2E0E835AC14895E8272D65
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/o9LeVuyG4zwZfl9X19i5EI5YY1w.roa
Signing time: Wed 12 Aug 2026 11:18:51 +0000
ROA not before: Wed 12 Aug 2026 11:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 2a0b:8440::/29 maxlen: 32
2a13:cdc0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:b2:4e:b1:4d:2e:0e:83:5a:c1:48:95:e8:27:2d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Aug 12 11:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3d2de56ec86e33c197e5f57d7d8b9108e58635c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:45:4e:17:76:f8:98:ec:10:b9:80:39:0d:
73:8f:56:7f:fd:3d:69:9d:c3:0e:c5:80:91:04:19:
f9:ba:b1:19:cd:20:3b:80:7a:b6:41:be:b1:15:a2:
93:8f:3c:38:bd:cf:cb:de:11:31:15:1d:c7:d4:f1:
e5:36:9b:e2:57:8a:18:79:d2:1d:1d:79:b2:07:df:
80:13:f7:18:64:29:31:9b:4d:b5:78:c3:86:7d:ed:
a0:36:26:31:46:b6:31:9b:c0:9d:5a:f6:0b:60:ed:
0a:79:c6:22:a4:fb:0c:97:98:5b:4c:34:cc:37:7e:
dc:76:32:84:67:45:73:34:ec:2e:20:12:40:34:73:
1e:b2:7d:12:99:3b:7c:36:2f:e6:54:f6:fc:42:74:
ea:0d:31:05:28:44:10:dc:4e:88:ed:ee:44:e3:fc:
a5:ef:6c:79:b5:c7:01:a5:89:0a:3e:fb:d6:2f:0d:
a7:2a:6c:a9:40:20:aa:4d:12:ce:0b:05:a8:b5:e4:
61:66:da:ab:a2:5f:55:4d:23:bc:54:38:ad:a5:11:
f9:c2:e4:49:0e:68:44:26:13:cb:87:e3:df:e6:3a:
f1:ea:c1:8a:20:f5:ec:06:28:ba:a1:17:cf:3f:69:
af:3d:71:d2:9a:56:ef:71:1d:e7:54:c4:c0:12:dd:
b9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D2:DE:56:EC:86:E3:3C:19:7E:5F:57:D7:D8:B9:10:8E:58:63:5C
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/o9LeVuyG4zwZfl9X19i5EI5YY1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:8440::/29
2a13:cdc0::/29
Signature Algorithm: sha256WithRSAEncryption
78:f9:c3:f6:a2:69:96:c2:d4:e5:f2:28:81:9d:0f:57:d3:8f:
79:84:db:5d:dd:3f:4c:95:11:de:99:7d:15:d8:82:73:b3:2b:
ee:72:bb:04:c2:76:be:7f:86:f2:9e:ec:a2:4b:c9:b0:b6:3e:
b1:52:91:4b:7b:e7:10:21:95:fa:22:d7:d0:8d:08:70:9e:07:
f2:39:1e:4a:26:d2:aa:ae:24:cd:2d:eb:a3:6a:f5:98:6f:1d:
e5:ec:34:30:db:fa:64:b0:49:92:7d:16:90:d4:cd:2f:6d:2f:
ae:ff:84:9b:8b:13:0f:45:bd:a6:4d:a7:30:b8:43:a7:b1:8c:
84:ec:86:03:97:99:c1:94:32:80:fb:bb:ee:68:09:e4:2b:f9:
f4:8e:e0:af:1a:7d:25:4a:e6:ee:2e:fc:ad:aa:ec:b8:ff:90:
de:7e:d0:c6:82:9b:55:ba:de:80:75:f9:78:a1:43:bb:ed:e6:
dd:67:bf:c3:80:21:e9:a4:fc:ee:d8:0c:2e:2b:bd:c4:4d:c5:
25:23:88:40:e5:f3:5b:f0:d6:84:4b:0c:65:51:bc:72:56:ce:
8e:96:b0:2f:59:2c:56:47:6d:80:ce:4e:d5:8e:09:f6:4c:9f:
f1:cc:1f:67:10:04:bf:28:a9:6e:78:37:a6:0a:64:90:c8:bf:
d4:fa:0a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:43:34 2026 by rpki-client