Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/aimu91424nqQb6w1ZTz_lC-gcJc.roa
File: aimu91424nqQb6w1ZTz_lC-gcJc.roa (raw, json)
Hash identifier: PKjFdphZPV4cHfOLYd3H377KpUcw3pQlHhKYTfN6pY4=
Subject key identifier: 6A:29:AE:F7:5E:36:E2:7A:90:6F:AC:35:65:3C:FF:94:2F:A0:70:97
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019E119D397D4EE282C035850B21025E0B50
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/aimu91424nqQb6w1ZTz_lC-gcJc.roa
Signing time: Sun 10 May 2026 11:19:37 +0000
ROA not before: Sun 10 May 2026 11:19:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206604
IP address blocks: 2a0d:d940:500::/40 maxlen: 48
2a0d:d940:2005::/48 maxlen: 48
2a0d:d940:2007::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:11:9d:39:7d:4e:e2:82:c0:35:85:0b:21:02:5e:0b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: May 10 11:19:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a29aef75e36e27a906fac35653cff942fa07097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:89:aa:86:e7:42:74:dd:47:af:ed:f2:81:
bb:ec:4f:17:4c:eb:46:d8:ee:8c:72:e9:a0:72:39:
52:a6:aa:fc:5f:9b:82:96:f7:c9:34:76:0c:83:00:
18:47:48:3e:82:5d:aa:c2:79:18:b8:4e:8b:97:28:
26:75:0a:a9:8e:55:a7:d2:c5:03:96:e9:ae:61:94:
70:85:40:0f:98:18:5d:b3:51:2d:da:41:67:01:37:
41:73:c8:f1:f5:0a:b1:35:e3:7d:b5:6b:00:42:7d:
73:fc:65:28:6f:08:2f:e2:b7:c6:1a:ee:97:45:d1:
dc:1c:04:04:d2:fd:ca:93:9f:6e:c8:92:64:41:ca:
5a:a3:f4:f2:e5:49:dc:95:05:e1:dc:2f:ed:60:61:
ba:a6:3b:08:5c:fd:0f:e7:1b:90:0d:ca:24:8c:06:
ee:e9:bb:07:40:ba:b6:96:c9:b0:1f:7f:3c:b0:5d:
e7:40:5d:0b:2b:53:fa:2a:39:2f:cb:4e:3d:07:d1:
ba:53:c8:73:31:e2:da:7f:bd:41:b9:cd:10:70:2d:
46:38:85:f8:09:28:ff:6b:90:51:3e:42:bf:33:80:
f4:8d:ca:91:d3:c0:68:01:74:59:5e:aa:4b:75:d6:
cc:aa:99:43:ab:ef:c6:80:46:41:93:24:25:9f:89:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:29:AE:F7:5E:36:E2:7A:90:6F:AC:35:65:3C:FF:94:2F:A0:70:97
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/aimu91424nqQb6w1ZTz_lC-gcJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:500::/40
2a0d:d940:2005::/48
2a0d:d940:2007::/48
Signature Algorithm: sha256WithRSAEncryption
01:f0:55:aa:d5:08:62:c0:52:93:aa:c2:61:f7:bc:31:63:64:
27:5d:cf:ab:b5:b9:a1:09:b3:a2:b3:27:dd:d3:d2:3d:50:ee:
ed:dc:09:0e:44:45:b3:bd:23:ac:72:14:82:b0:ef:bc:43:1f:
86:fb:aa:65:17:a4:51:e1:a2:07:60:b3:68:f1:35:93:1b:b4:
82:96:7d:73:ac:df:d7:71:ff:59:45:5f:8d:f2:60:da:17:71:
2f:30:d4:28:f1:3d:e0:49:93:53:a1:7d:87:08:ce:e7:01:66:
a0:d6:2d:48:5a:91:0f:a3:4f:2b:e9:85:74:b1:d5:4b:e1:8a:
5a:b0:23:b5:56:72:3a:94:cf:d8:ba:0c:c9:61:89:48:ff:01:
61:92:ce:63:43:18:c5:b3:7b:42:49:8e:bb:33:e9:d6:bf:5d:
31:62:4f:58:96:dd:ff:41:79:04:66:bb:ac:b3:80:6a:dc:bc:
3d:7e:92:a5:3e:b9:ab:db:c2:aa:83:fd:28:2d:61:d6:f6:48:
77:20:2a:46:01:ea:fd:a7:17:40:8e:c3:92:a7:f4:f3:c3:63:
32:c2:ba:bf:79:30:6f:4e:a8:a0:80:d6:17:19:69:f2:14:54:
88:67:5d:75:95:90:52:08:1f:67:2f:9f:53:58:02:2c:0e:5a:
d8:44:7b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:28:30 2026 by rpki-client