Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/th4OhWBAlpfypv7EWqlt69eEruk.roa
File: th4OhWBAlpfypv7EWqlt69eEruk.roa (raw, json)
Hash identifier: 9y+RjbFHCYdSplLlHYCKvi36/3xYTcRr+DN5EKnC7XQ=
Subject key identifier: B6:1E:0E:85:60:40:96:97:F2:A6:FE:C4:5A:A9:6D:EB:D7:84:AE:E9
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 01A0C88076C0BE4286400A6E15F66DBA1654
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/th4OhWBAlpfypv7EWqlt69eEruk.roa
Signing time: Tue 22 Sep 2026 09:44:17 +0000
ROA not before: Tue 22 Sep 2026 09:44:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132337
IP address blocks: 2a0a:ca40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:80:76:c0:be:42:86:40:0a:6e:15:f6:6d:ba:16:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Sep 22 09:44:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b61e0e8560409697f2a6fec45aa96debd784aee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d3:17:1e:1e:a6:ca:cc:e8:3c:88:bb:cf:01:
f3:21:b4:d5:65:c1:94:6b:a2:3f:36:1f:0e:30:24:
17:86:ee:76:3c:f0:70:f3:f2:a5:94:b1:3c:f5:83:
40:ef:ee:03:b3:75:e6:45:7d:48:a0:9a:40:70:36:
d2:59:e3:db:2b:a0:d4:3f:fd:1b:2f:0f:a8:84:df:
74:29:ea:79:27:f7:48:44:81:9a:12:0a:1a:47:92:
44:fe:41:04:95:ce:52:e1:c5:6c:f0:90:f8:0c:5f:
f3:da:26:d3:c4:35:34:e7:00:5e:df:0c:4d:01:67:
22:a9:2e:89:c0:65:cc:ad:64:2e:de:fd:4b:b6:15:
00:f8:ed:13:5f:9b:73:53:00:a7:95:f1:32:35:46:
28:05:ac:ae:6e:18:62:81:68:c2:c2:55:84:f2:de:
45:94:74:66:2f:c9:0e:c8:4c:48:6f:77:37:be:a0:
33:52:e1:0e:72:2c:9d:4d:22:21:4d:e8:de:8e:89:
08:07:7c:64:ec:7e:e4:f8:50:f0:b8:17:06:86:d8:
27:d7:ac:ee:de:89:dc:f9:57:8a:33:82:f8:3d:67:
6c:4c:be:0c:e4:80:3e:85:17:3e:a2:57:91:68:6d:
94:52:90:39:1e:b1:4f:f5:7e:6d:b2:0f:4a:2f:38:
1c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1E:0E:85:60:40:96:97:F2:A6:FE:C4:5A:A9:6D:EB:D7:84:AE:E9
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/th4OhWBAlpfypv7EWqlt69eEruk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:ca40::/29
Signature Algorithm: sha256WithRSAEncryption
7c:b1:8d:76:d9:6e:97:39:6f:66:55:dd:46:ad:8b:c5:e5:b6:
5c:c2:33:f4:17:f2:a7:ba:e5:fa:21:a5:c2:72:6a:f9:ce:5d:
65:f2:9a:6f:d9:4c:55:39:6e:53:63:e4:f5:5b:a0:cf:ff:7f:
a0:87:c5:bc:29:62:42:32:b5:2e:57:f0:17:74:ce:f8:a5:69:
37:81:85:7a:8b:f9:18:cc:9c:4b:50:91:67:25:ec:ee:f5:50:
7e:a2:26:79:3d:63:78:d0:23:6c:c6:2c:52:7d:d1:d7:4d:a2:
9c:e0:55:19:e1:6b:23:48:1b:35:4a:1a:a1:78:b0:3e:d6:62:
9f:09:35:be:57:17:ab:7c:3a:6a:38:51:f0:f6:d7:42:19:bb:
e8:71:fa:95:82:57:fd:fa:b2:63:ad:50:28:aa:23:27:69:02:
de:52:19:d3:e1:19:57:2b:06:a3:34:c9:2e:7b:42:3a:9c:8f:
a6:00:05:83:3e:a5:1d:87:94:f1:f9:6c:35:fd:7f:9c:da:d0:
ed:21:73:e8:d2:fb:8b:ce:0d:6e:be:2a:94:7f:4a:0a:c7:16:
62:69:3a:f4:eb:88:36:c6:91:e8:98:29:b0:41:56:36:98:e4:
7a:4b:24:04:2d:a3:12:ad:41:3d:7f:85:bb:19:9f:56:93:48:
0d:dc:31:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:09:48 2026 by rpki-client