Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/ODDgCpA2eTkA-q97ibRKq4acgs0.roa
File: ODDgCpA2eTkA-q97ibRKq4acgs0.roa (raw, json)
Hash identifier: pn/dKTiFVKMKzJ6CuAqqBIUXz655F7pWtWuZWbqojgY=
Subject key identifier: 38:30:E0:0A:90:36:79:39:00:FA:AF:7B:89:B4:4A:AB:86:9C:82:CD
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 01A0DA0167A75DE0C36BA55EE84AC5CF332A
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/ODDgCpA2eTkA-q97ibRKq4acgs0.roa
Signing time: Fri 25 Sep 2026 19:18:40 +0000
ROA not before: Fri 25 Sep 2026 19:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201790
IP address blocks: 2a09:3f00:3b00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:01:67:a7:5d:e0:c3:6b:a5:5e:e8:4a:c5:cf:33:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Sep 25 19:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3830e00a9036793900faaf7b89b44aab869c82cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e2:2e:8a:c1:bf:3c:bd:45:e3:f7:1e:3d:35:
9d:1f:5f:78:05:fa:ba:5e:c4:d1:8a:f4:70:b6:4b:
17:60:e0:84:27:3a:bb:6c:de:df:54:a3:68:a0:56:
96:5b:da:cf:25:be:4e:96:de:55:15:bc:21:f6:25:
d1:8d:f0:46:cb:a4:dd:2b:66:ad:43:96:25:44:09:
3f:0e:8d:76:6c:c4:ef:df:20:3c:e3:5b:83:ac:26:
96:72:4e:fa:12:00:f1:28:59:b1:f7:67:9c:81:3e:
44:af:f3:42:b6:ba:e5:ad:c2:9e:76:22:4b:34:2e:
eb:0d:03:36:61:00:76:a3:d3:86:f8:29:19:60:33:
f6:b6:91:fd:6d:b3:2b:36:31:a2:ec:85:63:89:8f:
b9:4d:d1:45:81:da:07:da:9c:0d:05:2a:48:42:9a:
07:a2:a9:cb:e8:4c:f7:f6:85:8a:bc:17:6e:28:c2:
6f:2d:7b:a8:00:50:8b:9f:ba:5a:6a:3e:b4:56:52:
75:8e:c0:35:7c:a0:c8:74:cc:8a:c2:c5:7b:71:c9:
f4:d1:c4:5b:e7:38:3b:8e:db:75:09:0b:e3:71:c3:
dd:8d:96:72:ad:77:14:ba:70:6a:10:b6:ee:b1:3a:
91:f9:15:e9:54:41:cb:aa:7c:63:a7:c3:10:f7:f4:
4d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:30:E0:0A:90:36:79:39:00:FA:AF:7B:89:B4:4A:AB:86:9C:82:CD
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/ODDgCpA2eTkA-q97ibRKq4acgs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:3b00::/48
Signature Algorithm: sha256WithRSAEncryption
6f:15:db:65:3e:7c:b5:f8:4f:40:b3:d2:d7:d1:ac:6e:2d:79:
b5:f6:82:ad:9e:47:ba:b5:c5:ca:50:87:dd:46:67:bb:2a:70:
c5:b5:82:f9:7e:a7:5d:42:a0:90:2f:3c:e0:7f:b3:6b:1b:7d:
1f:07:e2:c4:70:45:f3:0d:b0:17:56:79:44:bb:d2:43:5e:8f:
db:6a:ab:d5:9e:06:23:7a:25:f5:0b:7e:de:1c:d0:72:ba:11:
fb:58:a7:04:db:80:9b:43:99:6a:2b:c5:fe:3f:6b:89:e5:cc:
2e:e0:30:e7:1c:f5:eb:aa:f2:b6:fb:55:86:25:7a:17:00:66:
92:85:cf:1a:2f:e7:74:c1:a6:5f:07:0e:db:e9:96:98:f9:83:
de:da:7a:de:e7:34:ad:a9:bb:29:ca:3a:0c:2b:87:65:5a:5f:
73:3a:0d:aa:67:43:b8:39:4b:e4:99:bd:ef:9a:94:d2:c0:2e:
67:87:b8:ed:77:14:82:c2:57:b0:4e:00:24:52:6e:c1:21:79:
e4:52:22:94:8c:b0:2b:ca:67:af:82:04:fe:3a:db:e7:76:8a:
3f:a3:17:5c:f4:e4:4a:0f:ff:1b:df:1f:82:82:f5:b6:87:ca:
0f:5e:fc:67:32:67:17:f0:07:3b:a2:ca:96:8f:1c:96:ce:7c:
0c:3f:e8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:51:00 2026 by rpki-client