Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/dEMHeIBd_F5wYPRGxd9kUERt7jg.roa
File: dEMHeIBd_F5wYPRGxd9kUERt7jg.roa (raw, json)
Hash identifier: QU+JQnjPXirhA4DDxINPGzNOOjDjxyU6E3dZMJAZCHg=
Subject key identifier: 74:43:07:78:80:5D:FC:5E:70:60:F4:46:C5:DF:64:50:44:6D:EE:38
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01A0BE8513965AF6E04A5C3F796547E65726
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/dEMHeIBd_F5wYPRGxd9kUERt7jg.roa
Signing time: Sun 20 Sep 2026 11:13:07 +0000
ROA not before: Sun 20 Sep 2026 11:13:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218637
IP address blocks: 2a0d:d940:901a::/48 maxlen: 48
2a0d:d941:1300::/40 maxlen: 40
2a0d:d941:1500::/40 maxlen: 40
2a0d:d941:1600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:85:13:96:5a:f6:e0:4a:5c:3f:79:65:47:e6:57:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Sep 20 11:13:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74430778805dfc5e7060f446c5df6450446dee38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b5:2a:72:a9:f4:92:5d:f5:f3:d0:7c:ef:c6:
7e:7e:bb:4f:8c:7f:fa:ab:fe:93:7b:36:8c:d5:d0:
ed:7b:ff:a3:53:5f:87:da:e6:32:4c:1c:7e:c6:a9:
5a:d1:8c:77:c2:a5:a8:fb:39:58:70:af:5f:89:c1:
c9:87:d9:4a:17:10:b2:0c:e3:a3:b0:9e:b9:62:e0:
76:0a:8d:3c:9a:c6:ad:65:70:9e:f5:1c:5e:4d:c0:
2c:ef:5a:23:8c:36:6c:fe:ee:2a:04:d7:38:45:2e:
90:4b:85:48:ba:0e:5a:7a:38:a3:c6:b9:c0:4e:3d:
a7:5d:64:83:3a:52:8c:d7:b9:98:70:e5:38:49:b6:
e7:f9:a3:3d:93:6e:a6:8b:75:22:44:10:41:4e:6c:
68:e4:cc:80:5d:3a:5c:2f:3d:c6:bb:6d:9d:08:fc:
4c:67:ce:c1:c6:7d:36:76:96:37:ab:76:b6:b7:e0:
91:3b:de:fe:dd:de:ee:57:bc:48:e0:11:4c:3b:2f:
2f:f8:d9:e3:49:0e:36:0c:4d:85:af:bb:b1:12:e4:
f1:bf:cb:27:7d:37:c6:32:3b:23:dc:6d:f7:92:38:
8d:43:33:5a:f8:72:0d:1e:e4:aa:3a:93:3b:55:a5:
09:4e:74:77:f3:75:9e:4e:26:df:7a:71:9f:82:82:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:43:07:78:80:5D:FC:5E:70:60:F4:46:C5:DF:64:50:44:6D:EE:38
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/dEMHeIBd_F5wYPRGxd9kUERt7jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:901a::/48
2a0d:d941:1300::/40
2a0d:d941:1500::-2a0d:d941:16ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7d:b9:75:ae:54:38:e5:5c:86:42:1a:b4:27:9d:78:6b:3e:79:
04:41:18:fe:b9:11:0d:64:27:7e:51:8c:9c:52:0c:29:27:7f:
da:21:e2:c4:1c:42:17:a5:7b:c7:59:94:15:dc:0a:49:77:ac:
3b:b9:7c:b0:53:50:76:75:57:47:db:16:a2:b3:cb:8c:cb:d7:
81:ff:5f:e8:c7:ec:4c:74:ca:ec:5a:c9:84:ae:88:99:a3:93:
57:3f:c4:82:b3:10:9d:c5:1c:f8:87:5e:8d:13:0d:21:8f:56:
7e:cd:cc:1a:78:56:8d:ec:5f:08:4e:a0:5b:31:d9:36:6d:f5:
1f:3a:14:4f:c1:e0:ca:78:6c:6d:27:4c:fd:d2:e6:a2:40:20:
c4:44:b2:e8:8f:9c:52:1c:dd:55:21:cc:29:67:5f:98:13:81:
b1:5c:b6:6d:5d:78:67:d2:5c:ca:70:74:5c:78:45:a1:a7:61:
7b:f6:fd:5c:56:dd:48:30:92:29:67:d5:2a:ed:00:1b:5c:ad:
80:df:89:8b:c9:a6:fc:df:c1:7b:6b:75:16:4a:f0:69:40:92:
58:70:38:72:c1:ff:8c:c5:98:a5:4c:ee:c3:2f:3e:69:47:e2:
bc:73:f3:79:b4:94:6b:ac:36:2a:38:d3:63:56:14:bf:f9:99:
0c:7c:47:e4
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAaC+hROWWvbgSlw/eWVH5lcmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYwOTIwMTExMzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDQzMDc3ODgwNWRmYzVlNzA2MGY0NDZjNWRmNjQ1MDQ0NmRlZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrUqcqn0kl3189B878Z+frtPjH/6
q/6TezaM1dDte/+jU1+H2uYyTBx+xqla0Yx3wqWo+zlYcK9ficHJh9lKFxCyDOOj
sJ65YuB2Co08msatZXCe9RxeTcAs71ojjDZs/u4qBNc4RS6QS4VIug5aejijxrnA
Tj2nXWSDOlKM17mYcOU4Sbbn+aM9k26mi3UiRBBBTmxo5MyAXTpcLz3Gu22dCPxM
Z87Bxn02dpY3q3a2t+CRO97+3d7uV7xI4BFMOy8v+NnjSQ42DE2Fr7uxEuTxv8sn
fTfGMjsj3G33kjiNQzNa+HINHuSqOpM7VaUJTnR383WeTibfenGfgoKKpwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFHRDB3iAXfxecGD0RsXfZFBEbe44MB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvZEVNSGVJQmRfRjV3WVBSR3hkOWtVRVJ0N2pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwcAKg3ZQJAa
AwYAKg3ZQRMwEAMGACoN2UEVAwYAKg3ZQRYwDQYJKoZIhvcNAQELBQADggEBAH25
da5UOOVchkIatCedeGs+eQRBGP65EQ1kJ35RjJxSDCknf9oh4sQcQhele8dZlBXc
Ckl3rDu5fLBTUHZ1V0fbFqKzy4zL14H/X+jH7Ex0yuxayYSuiJmjk1c/xIKzEJ3F
HPiHXo0TDSGPVn7NzBp4Vo3sXwhOoFsx2TZt9R86FE/B4Mp4bG0nTP3S5qJAIMRE
suiPnFIc3VUhzClnX5gTgbFctm1deGfSXMpwdFx4RaGnYXv2/VxW3Ugwkiln1Srt
ABtcrYDfiYvJpvzfwXtrdRZK8GlAklhwOHLB/4zFmKVM7sMvPmlH4rxz83m0lGus
Nio402NWFL/5mQx8R+Q=
-----END CERTIFICATE-----
Generated at Sat Oct 3 18:11:22 2026 by rpki-client