Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Dy-JppyLsL9Mbh-ttzAYDxrII4I.roa
File: Dy-JppyLsL9Mbh-ttzAYDxrII4I.roa (raw, json)
Hash identifier: pCeNF0Zg4H7IxB+CV6OqqPvoSgFMGBy6a665B1wCyFs=
Subject key identifier: 0F:2F:89:A6:9C:8B:B0:BF:4C:6E:1F:AD:B7:30:18:0F:1A:C8:23:82
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019D1A6CC7CC99FB7B89D25738A6D86F7A99
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Dy-JppyLsL9Mbh-ttzAYDxrII4I.roa
Signing time: Mon 23 Mar 2026 11:20:29 +0000
ROA not before: Mon 23 Mar 2026 11:20:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206604
IP address blocks: 2a0d:d940:2005::/48 maxlen: 48
2a0d:d940:2007::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:6c:c7:cc:99:fb:7b:89:d2:57:38:a6:d8:6f:7a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Mar 23 11:20:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f2f89a69c8bb0bf4c6e1fadb730180f1ac82382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:3f:65:83:c9:ec:ae:f5:0b:56:ab:63:66:
04:9e:a4:4e:06:56:46:75:02:40:24:98:6d:b2:b8:
9e:0a:ad:96:82:8f:70:73:77:f5:98:78:6a:bc:9b:
b9:e5:85:4c:02:8b:2b:fc:84:93:99:0e:f3:b3:d5:
ce:87:96:9a:80:3a:f9:27:5f:32:a0:ed:92:a5:88:
52:59:22:7a:47:b5:2c:dc:8e:bd:de:d5:2b:79:fe:
aa:91:a0:b9:a3:16:96:4f:59:81:57:bb:ba:4e:2d:
aa:cd:4e:1a:19:da:01:29:d7:11:d9:64:09:1f:8c:
f7:e1:b9:f1:38:ff:f7:fd:0a:73:e9:cd:af:e9:a1:
56:c8:d6:a2:e4:e2:0b:56:8e:7d:aa:56:46:03:c3:
66:88:de:c1:ff:af:dd:1f:13:ff:8c:dc:8c:c7:23:
7a:b8:f3:60:ed:55:fa:9a:6b:3c:90:6e:c7:ea:3d:
7e:b3:26:a8:59:ba:c7:5c:fc:86:b0:ad:51:91:98:
80:9b:0e:9d:8a:b6:55:5b:c9:67:c7:7f:94:13:9d:
50:2a:9e:71:6b:6a:de:63:b5:c0:44:1b:cc:83:73:
1a:2f:a2:fb:d3:df:8e:76:2d:23:02:36:48:31:85:
cb:79:1e:e8:7c:f7:5e:22:6f:f1:97:60:03:fd:14:
73:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2F:89:A6:9C:8B:B0:BF:4C:6E:1F:AD:B7:30:18:0F:1A:C8:23:82
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Dy-JppyLsL9Mbh-ttzAYDxrII4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:2005::/48
2a0d:d940:2007::/48
Signature Algorithm: sha256WithRSAEncryption
a6:67:2d:44:fc:d5:65:76:e7:d4:34:49:40:85:3b:45:71:d3:
c6:3c:df:a3:92:c4:b9:bc:2b:6c:ed:cc:41:af:a1:d6:5e:78:
b9:f4:68:f5:44:fd:fc:b4:36:f2:f6:63:01:90:de:d5:4d:fc:
0d:28:3a:5d:06:7b:f8:fd:48:86:ff:ad:bf:90:b9:5a:63:94:
04:e1:17:81:0b:49:5d:37:61:87:1b:86:ef:64:68:57:38:35:
87:74:2c:84:de:43:7d:2e:16:4c:40:4e:2a:3d:6e:e4:15:7d:
20:8a:39:77:67:3e:31:c0:66:c3:e0:14:2f:b8:8a:b1:85:de:
78:57:05:9e:82:35:5a:44:df:66:53:81:8b:e6:3e:29:e0:c4:
5d:2b:7b:52:db:4b:e2:1e:35:e7:54:e0:e0:3b:51:29:b6:59:
a3:7d:36:aa:d0:ae:14:46:0e:82:60:79:f2:d1:a2:e7:10:d4:
6c:15:1f:c3:c9:1c:4d:2b:94:2c:6e:6f:ce:12:f3:eb:55:aa:
6a:91:be:13:e5:8c:47:92:8d:a3:9f:ab:61:87:45:79:ae:14:
30:13:bd:12:8a:a8:bc:5f:ff:dd:5a:c5:1a:c0:6e:d7:38:71:
92:fc:95:e9:a6:89:36:aa:41:45:f0:04:73:0d:9a:6f:d8:0b:
ed:e1:c4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:41 2026 by rpki-client