Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/ondT0lA34VONX208YudOD0r79Fo.roa
File: ondT0lA34VONX208YudOD0r79Fo.roa (raw, json)
Hash identifier: Q5xYjBiSMcwIIASL37DpTBEnCFikNHHBxM8KVMbJfYU=
Subject key identifier: A2:77:53:D2:50:37:E1:53:8D:5F:6D:3C:62:E7:4E:0F:4A:FB:F4:5A
Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
Certificate serial: 019D172C9011E5956AAB2C12384764024F20
Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/ondT0lA34VONX208YudOD0r79Fo.roa
Signing time: Sun 22 Mar 2026 20:11:29 +0000
ROA not before: Sun 22 Mar 2026 20:11:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 2a13:aac7:900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:17:2c:90:11:e5:95:6a:ab:2c:12:38:47:64:02:4f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
Validity
Not Before: Mar 22 20:11:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a27753d25037e1538d5f6d3c62e74e0f4afbf45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:c5:77:b6:07:19:2b:69:b5:0a:3d:7d:55:
91:fb:42:95:b0:a9:4d:86:09:5a:79:cd:4f:4f:8b:
47:5c:d7:56:dc:76:e0:98:89:5a:2b:01:3e:c2:10:
1c:cd:30:ab:0d:8d:8c:a3:c7:44:ba:d5:2f:04:0c:
49:61:e4:63:c7:90:df:68:9f:78:82:e4:d7:6b:cb:
28:4b:86:50:81:6f:87:ac:9b:73:85:38:61:9d:aa:
43:9e:eb:58:ee:7a:9a:76:b4:c9:38:86:79:31:81:
14:59:04:61:e9:98:e2:b9:ab:f0:d3:04:c3:3b:50:
7d:11:33:1d:73:64:d1:e6:09:f7:9f:13:e7:82:02:
13:fc:de:95:3d:2e:95:af:ac:40:f9:fe:21:41:c8:
a3:58:52:db:65:9e:11:c3:ef:1c:5b:bd:80:84:5e:
62:1f:1f:22:43:01:df:43:9a:29:48:1b:96:f1:26:
bf:60:69:bc:cf:79:1c:a9:97:f5:fd:ff:bf:0c:e6:
83:74:48:34:84:26:2c:fe:0f:92:f1:46:ae:6e:e0:
75:5e:92:86:53:e3:cf:51:c8:11:21:2f:c2:ef:a3:
4d:cd:22:55:dd:2e:d9:13:c2:2e:95:62:7f:67:4b:
1c:64:c6:78:21:53:8f:b4:b9:5c:b0:77:71:97:a7:
40:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:77:53:D2:50:37:E1:53:8D:5F:6D:3C:62:E7:4E:0F:4A:FB:F4:5A
X509v3 Authority Key Identifier:
keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/ondT0lA34VONX208YudOD0r79Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:aac7:900::/40
Signature Algorithm: sha256WithRSAEncryption
5e:c3:ff:18:64:11:3a:78:42:54:ad:f8:f2:62:6e:3c:1d:22:
c7:ef:92:62:0f:1f:d8:3c:55:7c:53:a9:ef:76:fa:39:38:ca:
de:ec:e7:81:b1:8f:49:99:bd:4d:d5:a0:a6:64:ec:30:75:60:
6b:10:d0:15:9f:2c:5e:7d:44:77:ae:92:32:a5:d2:58:c6:56:
83:26:d5:87:09:3a:b6:3a:6e:70:d8:d6:68:ec:c6:fb:73:d2:
f7:6b:1f:f5:e8:6a:27:e8:94:3d:f0:48:bf:f8:52:25:d5:53:
26:5d:ed:5d:3b:50:5f:8f:80:72:66:47:a2:ac:05:52:dc:d6:
ac:d6:71:f8:04:32:48:00:ab:64:61:b9:02:33:2f:00:d5:ed:
13:79:8b:8e:c3:0d:0e:bc:9e:f1:31:85:1d:86:57:a1:6e:c2:
23:50:5b:3d:7d:ef:86:5c:94:da:64:25:d2:c5:fd:ca:8b:42:
3f:63:0d:9d:b6:08:56:27:1b:c5:53:72:d4:32:75:04:a5:63:
7c:bf:2d:e4:e8:81:1d:cf:01:6d:59:d5:f3:ad:cf:81:da:a3:
11:d8:72:0a:99:98:da:7e:1f:f7:4a:ed:9b:7b:67:bd:bf:79:
47:93:9e:d5:47:9b:75:98:a9:ad:dc:bb:b5:bc:d4:0b:5a:5a:
de:cc:9c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:02:50 2026 by rpki-client