Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/tnETkcZqlzSDzu6LtxDcqipcACE.roa
File: tnETkcZqlzSDzu6LtxDcqipcACE.roa (raw, json)
Hash identifier: Srg6f5i1VO4Z1nAKwwt0agRqp5N/Ql48tNk6y2zGiko=
Subject key identifier: B6:71:13:91:C6:6A:97:34:83:CE:EE:8B:B7:10:DC:AA:2A:5C:00:21
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019E01DB6913E6C8CE61815F3C80C051DB64
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/tnETkcZqlzSDzu6LtxDcqipcACE.roa
Signing time: Thu 07 May 2026 09:53:36 +0000
ROA not before: Thu 07 May 2026 09:53:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199742
IP address blocks: 2a0d:d940:130::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:01:db:69:13:e6:c8:ce:61:81:5f:3c:80:c0:51:db:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: May 7 09:53:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6711391c66a973483ceee8bb710dcaa2a5c0021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2e:b3:2f:c6:4b:ba:8e:b5:8a:8c:0c:9e:85:
96:ff:1a:4b:81:9c:36:4c:4b:74:46:4b:08:f8:9e:
9a:40:66:e8:49:5d:e3:1e:e8:94:38:95:d3:c5:54:
2b:82:34:3f:a7:59:42:fa:4a:87:92:90:3a:7c:e0:
6e:46:ea:96:d0:7e:88:9e:8c:41:e2:a0:3f:66:6d:
30:6c:88:6f:fa:47:3a:37:cc:90:a2:5b:03:33:2d:
36:40:71:f8:e7:ab:8d:e8:b1:71:a7:db:2a:85:15:
a0:18:d4:ab:a2:89:b7:25:4f:0a:3e:49:55:ab:b2:
c3:0a:3e:93:77:54:c8:49:b0:30:a3:6f:73:e8:df:
f8:ef:cb:90:4e:64:da:99:c3:2c:eb:60:45:6b:82:
dc:9b:8a:34:9f:18:b3:d2:e6:7a:6e:d7:d8:6a:bd:
b8:7d:0b:62:4e:e5:16:1f:08:9b:68:29:5c:a1:49:
dc:11:50:86:8f:bc:15:70:79:2c:8e:a6:7d:a2:f4:
ff:52:08:5b:92:76:e2:40:84:35:a6:21:23:f0:77:
a4:e1:ae:43:c1:28:1e:57:3e:d5:25:d7:ec:cc:e9:
a6:08:54:f5:60:bf:92:73:89:4d:73:f4:f3:d5:f7:
4d:39:43:ec:85:51:fb:23:e9:71:8b:28:f0:cd:0d:
fd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:71:13:91:C6:6A:97:34:83:CE:EE:8B:B7:10:DC:AA:2A:5C:00:21
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/tnETkcZqlzSDzu6LtxDcqipcACE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:130::/44
Signature Algorithm: sha256WithRSAEncryption
b9:2e:2d:a6:39:f9:3e:ea:62:34:fc:9b:98:58:ca:e4:9b:af:
85:38:98:ee:5b:aa:83:62:5e:56:46:c6:d7:58:6d:7e:57:cb:
31:c8:b8:65:71:7c:29:62:f8:50:47:1b:ce:bb:fa:29:4f:44:
bd:96:8f:f1:af:ae:38:4e:3f:8f:d9:06:5c:49:18:ef:e3:43:
4a:0c:b0:2c:38:de:56:1e:97:ab:ba:06:79:9d:7a:f1:8c:13:
09:63:2f:38:30:a5:9c:1b:5b:a4:84:71:bc:37:fb:2a:40:33:
29:82:5e:c3:c3:d8:e8:e0:d3:ef:f0:87:29:54:61:48:99:1f:
73:3a:00:03:10:65:c6:d5:07:88:1d:01:43:47:33:e6:ad:e6:
52:ac:58:d9:2e:6b:b8:4b:28:70:c6:25:41:11:93:ed:57:e2:
49:e9:d4:60:c3:ff:5a:d1:b5:35:2b:cb:dc:19:3f:92:61:54:
08:93:a9:3b:a7:c8:2d:bb:8c:4c:78:8d:57:7b:16:b3:c8:2e:
bd:21:51:c8:86:53:80:24:78:7a:7d:e8:89:bb:1f:94:d1:2f:
2d:94:55:f3:16:ad:4d:89:b9:63:b7:50:ad:54:34:75:2c:3a:
3e:fa:6f:0a:bd:01:76:96:85:24:ff:91:a8:f0:8b:22:45:09:
f2:00:09:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:41 2026 by rpki-client