Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/0TImoeOFobuAvAOMciF7V3TPB10.roa
File: 0TImoeOFobuAvAOMciF7V3TPB10.roa (raw, json)
Hash identifier: nUfjfiRcg/UYaizImww1B/czlUWqulii1BNxBqglWNk=
Subject key identifier: D1:32:26:A1:E3:85:A1:BB:80:BC:03:8C:72:21:7B:57:74:CF:07:5D
Certificate issuer: /CN=69c466d582ec558e4beaaee650be5007709c589f
Certificate serial: 019F236857FA51D661976C6DA293243F2185
Authority key identifier: 69:C4:66:D5:82:EC:55:8E:4B:EA:AE:E6:50:BE:50:07:70:9C:58:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acRm1YLsVY5L6q7mUL5QB3CcWJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/0TImoeOFobuAvAOMciF7V3TPB10.roa
Signing time: Thu 02 Jul 2026 15:17:48 +0000
ROA not before: Thu 02 Jul 2026 15:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150739
IP address blocks: 2a12:e6c0:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/acRm1YLsVY5L6q7mUL5QB3CcWJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:57:fa:51:d6:61:97:6c:6d:a2:93:24:3f:21:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c466d582ec558e4beaaee650be5007709c589f
Validity
Not Before: Jul 2 15:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d13226a1e385a1bb80bc038c72217b5774cf075d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:06:a4:f0:4f:a0:19:94:f4:2e:2e:16:7c:
4e:fa:b3:77:9c:e9:32:8c:97:ad:85:61:d2:4f:92:
7e:9b:d1:a6:8f:16:7c:5b:f9:3d:d4:41:72:a8:cd:
d4:12:6e:95:97:b2:e7:c1:ea:b5:aa:30:35:d4:74:
92:bb:ff:1d:78:26:88:8a:f2:5c:c5:e6:46:da:83:
ed:ba:a5:ee:67:ae:00:d0:7e:e0:e3:90:d3:2e:ea:
70:1f:fe:db:f9:b0:41:84:c0:11:b4:8a:b9:09:c3:
a0:73:93:53:d7:fd:84:cb:18:06:bd:b5:e0:6b:4b:
a0:41:ca:97:0b:b7:22:02:41:37:d9:52:46:20:e1:
22:60:4f:83:66:ff:77:a7:2b:55:da:55:59:3a:74:
da:10:11:69:ba:81:22:ea:be:95:3c:8e:63:9b:90:
96:da:5e:cc:81:b5:02:03:78:ec:0a:2b:d1:a9:9a:
f1:99:37:5b:d7:9e:72:95:21:3e:54:8c:63:f8:2b:
e1:88:bb:b8:90:ba:a2:c4:4a:4f:21:6e:30:c6:ba:
07:1d:08:28:01:4f:78:b9:52:01:33:49:42:f6:29:
56:9c:9e:a6:b9:e6:a1:42:98:93:f5:80:e1:47:c5:
4c:19:4c:3b:80:12:a3:59:88:89:13:c1:da:97:75:
8f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:32:26:A1:E3:85:A1:BB:80:BC:03:8C:72:21:7B:57:74:CF:07:5D
X509v3 Authority Key Identifier:
keyid:69:C4:66:D5:82:EC:55:8E:4B:EA:AE:E6:50:BE:50:07:70:9C:58:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acRm1YLsVY5L6q7mUL5QB3CcWJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/0TImoeOFobuAvAOMciF7V3TPB10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:e6c0:c::/48
Signature Algorithm: sha256WithRSAEncryption
0e:24:8e:53:96:24:cb:b8:32:08:37:13:7a:e2:fb:c1:ca:9d:
55:c7:5f:61:46:d8:08:16:53:9d:da:e1:cc:2a:81:21:42:55:
00:97:7d:be:10:52:61:c9:6f:31:53:49:5f:12:7c:b1:14:d5:
fa:ba:e1:ba:61:9b:79:d8:35:e8:9c:b6:1d:90:18:7f:64:ac:
b0:a1:07:8c:e1:4e:05:20:ee:49:e3:dc:d7:17:da:12:f0:6e:
b2:e1:d0:e3:d2:2d:db:6d:74:63:f9:a4:7c:9b:99:8d:69:54:
4c:e2:aa:3f:91:03:85:f2:42:0e:2a:e4:7e:c4:a3:4c:ef:d8:
9b:87:83:27:a3:4f:3a:31:dc:63:b2:75:84:4b:44:93:39:56:
d8:96:a4:dc:03:b3:7f:a7:ba:cf:21:dc:b5:93:4f:43:06:d0:
95:f6:a9:4c:92:37:24:a7:44:f6:72:8a:bf:ef:47:49:5a:ee:
de:a6:0e:e6:47:2b:26:c8:bd:53:d2:61:7c:ad:7e:d0:29:bf:
cf:18:6c:48:14:4d:da:3e:e4:b0:dc:23:1e:0c:3e:c4:41:bf:
74:68:68:7e:3e:10:93:0b:d5:70:5b:18:96:5e:79:42:77:bb:
c6:48:f2:73:d8:b5:3c:22:14:f5:1a:35:9d:21:d8:50:f4:a9:
5a:3d:15:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:37 2026 by rpki-client