Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/0GIAyoNkRGBvIj0Pu7OBeKqwlY4.roa
File: 0GIAyoNkRGBvIj0Pu7OBeKqwlY4.roa (raw, json)
Hash identifier: EgINy64Inm6Cenl3DNOs60YuoYcAzP39W57E9wAyI3Y=
Subject key identifier: D0:62:00:CA:83:64:44:60:6F:22:3D:0F:BB:B3:81:78:AA:B0:95:8E
Certificate issuer: /CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Certificate serial: 019DF32E45D859970E5F5C256AC9275511B6
Authority key identifier: 6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/0GIAyoNkRGBvIj0Pu7OBeKqwlY4.roa
Signing time: Mon 04 May 2026 13:29:49 +0000
ROA not before: Mon 04 May 2026 13:29:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44066
IP address blocks: 109.232.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f3:2e:45:d8:59:97:0e:5f:5c:25:6a:c9:27:55:11:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Validity
Not Before: May 4 13:29:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d06200ca836444606f223d0fbbb38178aab0958e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:62:2c:02:50:f8:da:10:81:1a:76:6e:36:5f:
70:a9:14:e1:6b:dd:90:d3:34:9d:2b:43:99:03:ec:
b1:12:3c:b1:1e:46:4d:5b:1e:4e:bd:c4:a1:ca:2c:
9b:85:4e:93:15:da:c8:91:41:9c:63:98:76:9f:f7:
7b:5b:f0:dc:2d:3d:ba:17:9d:f9:11:f2:05:19:08:
22:e1:8b:52:10:f3:e8:88:cb:2b:19:02:b7:57:53:
9d:d8:90:08:21:36:e2:84:21:95:b6:ab:04:a8:5c:
95:a4:3e:94:fd:b3:b5:99:e5:4e:b7:45:1e:76:f6:
45:65:16:af:e5:d1:d4:b5:1f:7f:9c:27:96:6c:f3:
90:35:c2:a3:35:38:36:73:8b:f7:7f:68:3b:69:9f:
a3:79:00:e1:00:22:99:a1:72:c4:75:1d:1e:5b:f5:
ba:63:e0:cb:50:d7:ab:a7:86:5d:aa:f3:af:f9:b9:
dc:97:5e:37:12:02:86:90:63:a8:50:87:ba:bd:8f:
c6:4d:4d:bc:bf:4b:42:3e:fc:19:92:f1:fd:99:47:
ed:a7:95:b3:0d:1b:09:e6:b5:5d:26:c6:6c:b5:05:
25:5d:d6:19:ae:76:f4:c6:77:7d:90:a7:cc:8f:25:
d0:ef:74:a4:99:8f:30:9c:90:25:cd:74:2b:50:0f:
01:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:62:00:CA:83:64:44:60:6F:22:3D:0F:BB:B3:81:78:AA:B0:95:8E
X509v3 Authority Key Identifier:
keyid:6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/0GIAyoNkRGBvIj0Pu7OBeKqwlY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.120.0/22
Signature Algorithm: sha256WithRSAEncryption
34:aa:33:2d:1e:80:b0:f4:7c:b4:9f:04:96:56:2e:2e:c3:ff:
d0:ab:dd:d6:82:d8:4d:64:4a:6c:e8:da:3a:0e:9f:43:eb:2b:
96:53:aa:5d:94:e9:78:65:06:16:50:b2:ba:92:3a:4b:99:5f:
d4:5a:5b:67:dd:ea:10:41:67:3d:0f:b1:50:05:b8:43:39:39:
a4:f2:c8:f6:4e:59:ec:f6:49:39:b2:11:66:6f:8a:f4:e2:6e:
9e:89:22:0e:79:92:0b:82:1f:28:aa:27:a0:df:17:6e:51:1e:
93:47:aa:32:f9:73:a8:e0:dc:93:0b:a5:b7:55:9e:2e:7e:73:
09:74:01:e1:e5:d2:dd:ec:a8:22:60:fb:8d:1b:d1:c4:f9:69:
95:88:4d:90:f7:3f:02:38:90:19:6f:7c:48:ec:15:d3:85:b0:
58:79:7c:db:58:ca:ae:d3:50:f0:46:0c:34:86:82:9a:36:9a:
09:26:c4:ec:73:c0:2b:94:12:fe:58:f3:f1:eb:25:3b:dc:4c:
2a:c2:ab:56:94:d2:4f:ae:89:67:74:db:2f:8a:7f:ea:84:9c:
f9:4a:bf:57:63:d5:07:69:d0:4f:49:9b:c5:6d:82:64:bb:1f:
63:94:ea:1f:ed:08:65:10:09:89:37:84:92:61:a8:68:06:bd:
42:1e:12:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:14 2026 by rpki-client