Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/apdlR9yvflDTKKIXJ67fjl8xDOo.roa
File: apdlR9yvflDTKKIXJ67fjl8xDOo.roa (raw, json)
Hash identifier: bK32lK6qoaOVabJNvvUP8TTPkjqexdWgmiaw7lt28kY=
Subject key identifier: 6A:97:65:47:DC:AF:7E:50:D3:28:A2:17:27:AE:DF:8E:5F:31:0C:EA
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 019D0581F139348752901C501DB01CBE594E
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/apdlR9yvflDTKKIXJ67fjl8xDOo.roa
Signing time: Thu 19 Mar 2026 09:51:35 +0000
ROA not before: Thu 19 Mar 2026 09:51:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135402
IP address blocks: 45.10.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:81:f1:39:34:87:52:90:1c:50:1d:b0:1c:be:59:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: Mar 19 09:51:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a976547dcaf7e50d328a21727aedf8e5f310cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:11:b3:b9:6b:33:94:d3:49:ef:7b:21:2d:d8:
e1:27:0d:d7:ca:ec:65:e5:0d:29:d3:a8:84:40:03:
0c:63:ec:a5:4a:2c:08:72:00:66:a0:ba:18:c5:fe:
cb:12:32:5c:0e:7f:4f:01:17:d1:fb:de:10:78:a7:
d6:98:1e:cb:95:d6:91:7f:97:f3:ff:79:bf:ac:c2:
18:be:70:59:b1:c7:c5:81:b9:88:df:d6:2f:ff:71:
8a:21:bb:fe:bf:9a:06:6f:9b:eb:54:ba:13:84:f6:
34:22:c5:64:ff:85:13:16:22:bc:a3:35:61:50:61:
f6:6c:2c:4e:09:61:26:f7:8d:91:d8:a8:06:4b:9f:
26:6f:85:8a:32:3b:12:42:57:0d:6b:14:9c:4f:a7:
b8:5b:14:37:38:bf:a1:b5:4c:6a:32:b7:df:32:d4:
39:5d:39:4a:ce:2a:36:59:61:2a:a1:cc:20:9a:6d:
39:bc:da:c3:69:ba:dd:25:64:b1:a9:63:39:72:9c:
7d:3e:cb:37:27:d8:88:e7:34:12:9a:2e:e6:f6:df:
2c:98:fb:d0:41:98:be:6f:c6:24:2b:38:fd:3a:bb:
aa:e5:ce:80:df:80:75:7c:f0:2f:9b:ef:76:7f:1e:
1e:91:4c:44:68:22:b6:22:ba:ea:db:65:d6:9c:a1:
42:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:97:65:47:DC:AF:7E:50:D3:28:A2:17:27:AE:DF:8E:5F:31:0C:EA
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/apdlR9yvflDTKKIXJ67fjl8xDOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.38.0/24
Signature Algorithm: sha256WithRSAEncryption
95:1f:86:6c:d4:c5:70:5a:03:2d:58:0d:5c:33:d8:7a:f1:79:
14:dc:39:4b:7d:bb:26:7f:79:75:31:71:e5:5f:b5:a5:0b:29:
6a:57:29:7b:05:2e:af:0e:bb:a1:02:23:44:97:42:ae:23:89:
4a:32:e7:a3:41:74:8d:fd:e3:dd:7a:78:2d:aa:f7:49:ae:a0:
8c:fa:90:ce:01:4e:02:9b:25:06:15:c6:8b:b1:93:ba:f4:f0:
16:8a:03:ec:97:4c:84:d7:d0:b8:ce:a7:1f:3e:f0:7b:95:25:
69:fe:d5:67:f8:15:e9:a6:64:7b:c7:ba:c5:3f:88:d1:16:6b:
38:93:08:03:1e:17:92:28:ac:9b:9b:76:a0:f6:90:53:c3:e2:
2a:87:64:42:24:7f:3f:a1:aa:98:a2:3c:3e:f7:06:90:74:33:
f6:2e:71:02:a3:59:44:39:d2:c2:2d:7f:ba:90:53:ec:0a:b5:
60:2b:49:af:16:f3:9a:e3:66:59:f8:f7:07:81:4e:cf:8b:ef:
24:4a:47:de:dc:7b:50:3e:60:9f:1b:b5:63:90:7c:71:16:b9:
d1:75:e8:53:0d:7a:9e:47:3c:62:72:69:cb:15:45:b9:06:2b:
74:b4:c6:69:23:06:a1:9c:66:1b:18:4b:ca:3c:88:bb:6c:91:
6c:f3:d6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:03:05 2026 by rpki-client