Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/0y3by7vrttBQ33nFxtmSxUGDWQA.roa
File: 0y3by7vrttBQ33nFxtmSxUGDWQA.roa (raw, json)
Hash identifier: yskrl2o2WvFQv0MLJ0YRc2QrdyAgKS3RiSkSxlcjALE=
Subject key identifier: D3:2D:DB:CB:BB:EB:B6:D0:50:DF:79:C5:C6:D9:92:C5:41:83:59:00
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019F12D4AFCC51C9BB7B3A4A7D5352F3B266
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/0y3by7vrttBQ33nFxtmSxUGDWQA.roa
Signing time: Mon 29 Jun 2026 10:02:36 +0000
ROA not before: Mon 29 Jun 2026 10:02:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204464
IP address blocks: 2a09:3f04::/30 maxlen: 30
2a09:3f05::/32 maxlen: 32
2a09:3f06::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d4:af:cc:51:c9:bb:7b:3a:4a:7d:53:52:f3:b2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jun 29 10:02:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d32ddbcbbbebb6d050df79c5c6d992c541835900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:23:66:4d:7c:fe:79:e2:ff:b3:06:d8:f1:b7:
07:53:53:b3:b5:5e:68:2d:6e:2e:b4:49:3d:68:a6:
0a:14:4c:14:27:12:43:bb:48:be:a2:e1:07:13:27:
68:e5:13:de:86:96:b9:3b:c0:04:7f:7a:d6:fc:61:
91:49:31:d7:10:e9:cd:5f:c4:d7:f7:b5:ba:67:79:
1d:18:1d:24:2d:2e:12:af:30:bd:2e:bb:f7:15:97:
7c:93:a6:b1:49:64:19:66:d9:71:67:78:0a:2f:9a:
f4:ab:98:94:c0:bd:92:c1:62:2f:39:3b:32:1f:bf:
f4:2d:33:ad:62:b3:6b:53:1a:aa:37:33:60:41:b4:
8f:90:ad:fb:64:b1:e2:7d:8e:18:f8:ef:c1:ff:50:
95:47:58:8d:5d:1e:ee:6d:b0:af:f7:9f:68:d7:83:
39:15:a0:5e:79:92:5e:69:be:2a:d9:5e:77:48:f6:
90:e4:95:cb:eb:68:f6:df:4d:36:61:a6:8f:09:62:
4f:f4:25:b7:3f:b8:68:65:56:0c:58:a5:99:c5:dd:
a1:12:6b:0a:ce:22:49:3a:51:d5:09:42:dc:1e:88:
05:ed:a3:01:04:a0:15:87:01:0e:2e:cf:01:d0:38:
56:66:de:2f:69:45:0d:57:79:64:55:d7:d3:bb:92:
f9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2D:DB:CB:BB:EB:B6:D0:50:DF:79:C5:C6:D9:92:C5:41:83:59:00
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/0y3by7vrttBQ33nFxtmSxUGDWQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f04::/30
Signature Algorithm: sha256WithRSAEncryption
21:b0:eb:1c:2c:16:43:0c:de:0f:7c:73:98:3f:00:68:a8:da:
f2:49:d1:f2:fc:5c:bc:ef:8a:77:a6:f3:06:f1:c5:59:64:63:
d9:64:5c:b3:f6:c8:87:85:35:34:0f:ae:f0:5e:fb:70:bb:4a:
8b:8f:46:97:d7:64:a5:08:58:8e:38:7e:d6:ff:86:15:a0:a7:
cf:4a:99:04:ed:0b:b1:07:77:15:a9:57:52:d0:ab:4e:25:b1:
79:05:d2:dc:d5:01:93:00:34:c3:5e:8f:20:3b:85:3a:55:33:
d1:00:b3:de:71:50:b8:8a:2b:13:90:d6:24:84:17:be:99:b8:
09:02:a2:41:d2:f9:27:06:20:82:9c:81:38:fa:30:79:7f:44:
b5:a8:22:0f:f4:02:a7:48:08:90:fc:9c:62:1c:e8:fc:a2:83:
32:7d:60:45:5c:42:08:dc:2a:68:b0:67:77:9f:67:0b:b1:3a:
d3:98:b3:70:5d:39:55:3e:2e:26:10:d5:33:c9:48:66:10:58:
6f:8a:b9:74:5f:d8:55:4f:71:46:d3:cb:80:66:97:09:cf:bb:
e9:46:36:d2:8c:65:63:3c:34:53:dd:db:a6:70:37:0b:82:43:
7a:c1:59:02:3d:da:50:9e:8a:58:ef:3c:fe:a6:8e:4b:c8:58:
5d:e7:bb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:47 2026 by rpki-client