Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/pGGebxLx4XztFhL3d2FWKK4rZu8.roa
File: pGGebxLx4XztFhL3d2FWKK4rZu8.roa (raw, json)
Hash identifier: wTuqBfI5TFU97R0fFtk4VO9NuffKzPVGVg3+aChUHF0=
Subject key identifier: A4:61:9E:6F:12:F1:E1:7C:ED:16:12:F7:77:61:56:28:AE:2B:66:EF
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019F896C2791B713FBE3D7106E61BE9C171D
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/pGGebxLx4XztFhL3d2FWKK4rZu8.roa
Signing time: Wed 22 Jul 2026 10:43:14 +0000
ROA not before: Wed 22 Jul 2026 10:43:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219443
IP address blocks: 2a0d:d940:90b2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:6c:27:91:b7:13:fb:e3:d7:10:6e:61:be:9c:17:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jul 22 10:43:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4619e6f12f1e17ced1612f777615628ae2b66ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c4:08:31:0e:28:68:27:0d:33:aa:1e:70:9b:
f2:92:90:ba:eb:dc:d6:29:16:25:5a:a4:2c:6d:5b:
62:60:2e:b1:1d:f2:1b:39:74:7e:dd:e9:78:6e:61:
57:26:8e:f8:e1:a1:ab:7a:82:3f:c8:d9:8e:d1:cb:
75:96:6e:0a:2e:85:ae:65:5a:95:7f:96:de:87:96:
7c:e4:ec:ce:44:6b:a1:7f:d2:c5:df:70:55:0f:3d:
5d:a6:5c:7f:12:dc:b1:07:a8:06:c0:0e:45:7a:83:
85:af:42:00:35:a8:13:1e:5d:f1:df:b0:81:3f:d1:
63:89:6d:07:2d:ac:bd:80:4f:cd:de:e9:0f:5d:ed:
d4:ad:4f:ab:ad:8d:40:85:8e:c2:ff:96:0f:67:e7:
7e:1d:c8:7c:16:84:f7:67:d8:e8:ce:e6:bd:39:8a:
28:fd:b0:64:91:b9:a7:bd:96:83:f5:15:e4:1e:d9:
f4:fc:23:2a:28:db:2d:85:19:b5:13:1f:62:d7:30:
3b:f8:67:5e:93:28:05:a5:b2:c9:65:56:83:f4:1a:
11:24:9e:de:b5:5b:af:4c:77:10:2d:8f:02:0c:c1:
4b:c8:33:74:59:73:ee:2a:32:67:6f:c4:ce:a4:0a:
0b:65:0c:bd:1e:a2:e4:c5:12:da:2c:9a:5d:d5:0b:
7f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:61:9E:6F:12:F1:E1:7C:ED:16:12:F7:77:61:56:28:AE:2B:66:EF
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/pGGebxLx4XztFhL3d2FWKK4rZu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:90b2::/48
Signature Algorithm: sha256WithRSAEncryption
85:0d:53:89:60:49:1f:b5:b5:b3:4c:85:59:3c:b1:50:75:f4:
7b:00:25:98:3f:ce:cc:a7:c3:7b:18:33:17:3c:8f:0c:af:65:
4e:8a:8d:b1:90:dc:a0:b5:4a:75:74:63:55:6f:0b:6b:bb:13:
77:ea:ee:82:40:6b:2d:16:4a:46:ea:5c:b8:fe:6d:5b:61:74:
2b:26:a3:cb:d8:ce:a0:27:3d:16:d1:3f:0a:f9:46:00:0d:bf:
eb:a5:df:00:8e:9f:80:4f:ba:6f:0b:51:00:c6:78:e6:e9:f5:
78:5f:e6:4c:6e:75:f3:80:e4:f2:77:07:84:d5:a4:0d:fe:e0:
6b:1b:33:29:5a:de:bc:31:97:ea:b8:39:e2:28:60:e1:1a:24:
b7:ea:1f:23:7a:3b:bc:f5:ee:9d:66:64:cb:c9:84:56:a9:96:
85:f7:17:45:eb:10:9e:c4:f5:f8:cc:e1:ec:d8:c9:f1:c7:20:
89:b7:72:55:26:07:9f:8c:d8:79:7a:4b:6f:97:2d:0e:cb:dd:
16:e0:57:d9:24:92:28:b1:69:29:4e:3d:46:6f:d6:fb:3c:e4:
0f:98:ed:21:7b:fb:2a:78:c3:5a:57:8c:a9:c0:75:eb:0f:4b:
a6:e3:92:ba:da:ee:31:aa:93:be:5f:05:7b:a8:64:61:7a:2d:
2f:3f:69:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:15 2026 by rpki-client