Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/t5pUvE5dxlNF__dGxEFRv9jHqaw.roa
File: t5pUvE5dxlNF__dGxEFRv9jHqaw.roa (raw, json)
Hash identifier: NIoK1siVgLxF+qezO0TRQbwbZCOSHGqA2dYqrWGf4Ok=
Subject key identifier: B7:9A:54:BC:4E:5D:C6:53:45:FF:F7:46:C4:41:51:BF:D8:C7:A9:AC
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019D1A6DB17D88DA28EB666DB0AE776514B4
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/t5pUvE5dxlNF__dGxEFRv9jHqaw.roa
Signing time: Mon 23 Mar 2026 11:21:29 +0000
ROA not before: Mon 23 Mar 2026 11:21:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213887
IP address blocks: 2a0d:d940:d0::/44 maxlen: 44
2a0d:d940:1e00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:6d:b1:7d:88:da:28:eb:66:6d:b0:ae:77:65:14:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Mar 23 11:21:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b79a54bc4e5dc65345fff746c44151bfd8c7a9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:fe:8b:67:e7:5f:d0:43:83:23:82:d9:96:
00:37:94:99:c7:fb:76:83:5c:5a:de:9b:cf:19:54:
1d:f9:5e:eb:b9:c0:f5:fe:29:81:0a:84:b7:32:9c:
4f:22:ea:45:22:52:5e:c8:bc:95:aa:ca:ad:6b:e7:
f7:5a:4f:36:69:1e:5f:cb:c3:a8:2e:44:9d:b6:ad:
ad:46:79:26:6a:3b:01:ed:71:a2:cd:fa:85:1f:81:
72:75:15:d9:41:7e:92:87:f8:b3:b8:9a:4c:eb:29:
af:b8:24:f7:9d:79:9a:ba:7b:9d:81:23:e2:28:6d:
fa:d8:4f:3a:fc:ff:c4:42:d2:bb:bc:88:20:fc:31:
1d:80:44:28:83:54:e4:f0:cc:96:5d:c8:c9:87:97:
b1:63:43:8e:82:c0:28:46:86:49:12:0b:74:9c:4e:
39:a2:e0:c9:9c:25:3e:08:31:52:a3:eb:82:82:e8:
54:c9:2a:2b:4b:3c:f2:75:c7:f3:3f:4a:a9:84:2e:
36:3f:84:4a:86:54:ea:1f:92:ef:9c:7b:5f:a5:36:
da:ae:fa:da:d2:62:b8:69:cc:c1:fc:58:1d:95:0d:
57:94:f6:cd:8d:b4:bb:f2:1a:b0:fe:0b:81:0c:c6:
62:05:dd:fb:b1:12:2c:84:93:42:19:cb:af:67:98:
a0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9A:54:BC:4E:5D:C6:53:45:FF:F7:46:C4:41:51:BF:D8:C7:A9:AC
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/t5pUvE5dxlNF__dGxEFRv9jHqaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:d0::/44
2a0d:d940:1e00::/40
Signature Algorithm: sha256WithRSAEncryption
82:06:f8:18:1b:dc:6c:93:6a:6b:3d:8c:68:16:c1:69:66:e4:
6e:f3:b1:04:fe:ac:5d:b2:7b:e0:a8:f3:3d:65:a3:bd:db:5c:
56:03:46:68:3c:8c:94:c8:15:7c:4d:51:ad:52:13:e3:60:3c:
98:23:39:92:78:b6:d0:df:e1:d1:d1:f5:0f:87:2e:35:52:6a:
64:b3:9b:19:1e:38:24:eb:fd:77:43:27:ad:a3:6d:55:16:da:
8a:ba:fd:d7:29:b8:34:27:51:e0:56:46:dd:6d:13:91:5b:b3:
a7:2d:45:59:b6:f8:8c:e2:f5:e9:52:bc:2d:ea:4e:07:d7:08:
52:95:40:fe:90:85:e3:ba:d8:26:c2:73:61:38:b6:ee:61:9e:
8f:38:cb:5b:f6:76:af:5c:11:f7:67:bc:7c:aa:69:c4:b8:f7:
e9:bf:4f:a2:1c:b6:c1:c6:9b:44:f8:32:da:b5:12:6f:0f:d4:
f2:53:15:ac:de:26:fb:3b:c8:cd:4b:06:66:01:12:76:7e:e2:
16:2c:63:db:43:de:f5:47:c2:55:33:13:e2:63:0d:4f:54:a7:
1c:68:af:43:e3:d6:65:bd:ae:5b:91:5b:e6:ed:1f:86:ed:35:
e4:fe:b8:89:18:a8:67:fb:c7:c0:6c:90:ed:b9:80:73:57:02:
7c:08:23:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:33:05 2026 by rpki-client