Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/OBBBpbRLtAoopWvDF4V0_36vRjc.roa
File: OBBBpbRLtAoopWvDF4V0_36vRjc.roa (raw, json)
Hash identifier: rORQCAXSnhZhLeVmf7l/rxG4Y1xlgxBiqBOAQvHavUw=
Subject key identifier: 38:10:41:A5:B4:4B:B4:0A:28:A5:6B:C3:17:85:74:FF:7E:AF:46:37
Certificate issuer: /CN=841e8821d01a9688b9ee7af2aebb959cbbed072b
Certificate serial: 019F664503A1CDFCDFC3E521F69883E9763B
Authority key identifier: 84:1E:88:21:D0:1A:96:88:B9:EE:7A:F2:AE:BB:95:9C:BB:ED:07:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/OBBBpbRLtAoopWvDF4V0_36vRjc.roa
Signing time: Wed 15 Jul 2026 14:53:46 +0000
ROA not before: Wed 15 Jul 2026 14:53:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 987
IP address blocks: 2a07:5900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:45:03:a1:cd:fc:df:c3:e5:21:f6:98:83:e9:76:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=841e8821d01a9688b9ee7af2aebb959cbbed072b
Validity
Not Before: Jul 15 14:53:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=381041a5b44bb40a28a56bc3178574ff7eaf4637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:92:d0:ec:ee:b7:7c:00:8c:c7:23:b2:c5:
53:2c:7c:c9:85:51:d8:d7:43:61:21:31:3e:9c:f0:
f5:4d:ad:03:6c:0f:b1:09:21:48:f4:b6:66:2e:61:
65:b7:90:08:7d:b8:cb:1f:b7:95:54:e9:7e:a5:6e:
95:a5:ea:85:1f:a6:09:ba:5c:08:a3:ed:e7:f2:2b:
da:da:5c:63:bf:72:7d:e8:c6:c1:a5:d9:26:39:50:
de:57:10:b3:96:a6:19:6d:46:dd:36:e6:a3:ec:c3:
9e:2e:57:e8:85:d4:2e:98:c6:e1:e6:20:c2:b7:a2:
1c:25:88:cf:5d:2c:f9:1a:c6:f0:1f:94:f6:e4:14:
13:8b:db:b5:29:29:64:d7:55:16:f3:b5:f9:17:92:
f9:b9:70:cd:7c:c5:5a:da:6d:ef:d2:17:64:b2:0a:
1f:86:3c:4b:2d:50:7f:a6:e2:76:28:95:d3:ba:a8:
56:4a:49:04:00:78:42:8c:3c:f9:30:94:52:bb:4e:
39:48:e8:c3:cc:b7:ca:7f:25:6b:7d:82:98:9f:90:
92:0d:aa:9a:38:8e:29:ca:f6:56:db:34:0b:ee:c7:
db:59:ad:97:f1:3b:5a:23:54:b3:4b:98:67:f7:91:
9a:3d:eb:1d:cf:c0:8f:34:5e:c9:f3:63:11:d6:83:
96:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:10:41:A5:B4:4B:B4:0A:28:A5:6B:C3:17:85:74:FF:7E:AF:46:37
X509v3 Authority Key Identifier:
keyid:84:1E:88:21:D0:1A:96:88:B9:EE:7A:F2:AE:BB:95:9C:BB:ED:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/OBBBpbRLtAoopWvDF4V0_36vRjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:5900::/32
Signature Algorithm: sha256WithRSAEncryption
22:1a:6d:e0:81:fd:0b:89:33:27:92:3b:db:b0:57:57:04:64:
ca:33:03:02:b2:d1:1c:11:0a:4a:3c:f4:f4:f0:c4:2d:73:0d:
6b:9d:d9:63:72:72:70:5d:00:f4:58:5c:d7:ec:03:dc:0c:f2:
69:69:78:ab:c2:49:75:84:c0:3a:52:db:ca:6f:d0:98:82:ab:
fc:2f:67:f4:56:14:2e:e4:75:a1:9f:97:99:dd:08:41:77:fa:
6d:51:89:58:e9:86:6b:53:e8:f6:71:c1:6e:15:b9:4b:17:1a:
3c:8c:bd:50:7b:0d:f3:1e:0e:18:30:0e:bd:64:ea:d6:e2:22:
57:a4:ae:ec:ee:54:a1:e4:8d:c9:e2:45:a9:c9:b1:58:c2:e7:
9e:20:f5:a6:bb:c0:77:1d:74:92:9b:59:ab:75:d7:b6:13:ea:
63:a2:67:62:87:b8:a4:eb:34:ad:db:b8:ce:cb:82:fe:8c:e1:
c2:29:1e:db:c0:ca:fb:05:68:6e:b8:e5:ee:d8:73:4b:c5:fc:
42:79:39:0f:cb:02:35:36:5b:f9:33:d1:8e:0a:92:ac:df:32:
4a:ce:37:8d:ef:db:6b:7b:64:c2:c8:ba:e9:2e:32:ee:b8:f8:
29:38:02:30:ca:29:39:0e:ab:3a:04:e9:1c:0a:04:49:da:27:
49:e2:f4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:20 2026 by rpki-client