Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/0djyrJfxDAwyuroUOqwsdaaF9rs.roa
File: 0djyrJfxDAwyuroUOqwsdaaF9rs.roa (raw, json)
Hash identifier: OqlwQtnBGSvpQaJNOXUms/JpY/RPXbEQLs6MqENv65k=
Subject key identifier: D1:D8:F2:AC:97:F1:0C:0C:32:BA:BA:14:3A:AC:2C:75:A6:85:F6:BB
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019DDD5BBA91C7BD87832B3ACD0CECF0D07F
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/0djyrJfxDAwyuroUOqwsdaaF9rs.roa
Signing time: Thu 30 Apr 2026 07:47:49 +0000
ROA not before: Thu 30 Apr 2026 07:47:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205486
IP address blocks: 2a09:6282::/32 maxlen: 32
2a0e:b140::/29 maxlen: 29
2a11:b1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:5b:ba:91:c7:bd:87:83:2b:3a:cd:0c:ec:f0:d0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Apr 30 07:47:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1d8f2ac97f10c0c32baba143aac2c75a685f6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:11:07:99:0b:41:d7:a0:2a:7c:1c:7e:6b:ca:
ec:0d:60:f9:78:c7:d6:a5:ce:5a:08:af:a2:e8:c1:
64:f7:89:d8:eb:d0:34:70:fd:83:e8:d8:90:ff:1f:
bd:68:66:b4:31:5c:cb:a3:03:1f:9f:fa:35:31:fa:
f6:0f:3d:2e:b8:80:ed:92:d9:fc:61:42:32:e5:96:
30:75:4f:35:b3:1e:10:4c:b6:2d:be:da:a9:13:3f:
bd:c2:d4:03:ee:e6:c9:55:1b:ff:0d:a9:b1:39:03:
d3:11:ee:73:81:cf:26:34:7f:51:70:d6:e1:16:a5:
d7:f6:27:c5:48:2f:ec:ab:de:5f:c2:1a:29:33:67:
97:d6:09:59:e0:d1:bd:03:6e:e9:94:23:64:70:24:
89:8e:14:d7:f2:17:df:f0:54:4b:00:e0:f1:60:6d:
af:ad:4d:4b:20:6b:53:0d:b3:06:05:d7:58:c8:38:
7d:79:a7:d1:75:fb:f9:80:b8:ba:73:b4:84:24:a2:
57:08:4b:a2:53:70:b1:35:1a:28:8d:51:4b:ae:c3:
54:e9:81:3b:e4:23:3d:71:e0:c7:e1:6a:1b:be:b3:
7f:8c:85:6f:40:31:d0:fd:79:52:9f:0c:d2:13:a9:
94:58:6a:61:f6:00:7f:98:04:08:27:74:b2:6a:be:
66:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D8:F2:AC:97:F1:0C:0C:32:BA:BA:14:3A:AC:2C:75:A6:85:F6:BB
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/0djyrJfxDAwyuroUOqwsdaaF9rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6282::/32
2a0e:b140::/29
2a11:b1c0::/29
Signature Algorithm: sha256WithRSAEncryption
28:fb:dd:7a:5e:b4:b8:64:be:fb:49:89:2f:f4:18:bc:a4:74:
f2:08:2c:c8:37:e7:05:3a:72:e2:e2:98:53:99:ac:6c:ca:96:
a3:2d:fa:b8:93:cd:d8:3e:d3:6d:36:4b:61:18:16:6c:f1:92:
d6:51:e2:49:de:79:96:24:66:c2:e0:74:ad:49:b6:bc:f5:e5:
71:06:62:75:09:7c:f2:f1:08:fd:92:31:66:6b:b3:25:c4:ce:
80:29:5d:48:1f:3c:a3:ed:ec:54:b3:ce:ed:de:38:5f:e5:c6:
a7:f7:44:ed:69:e8:4a:6f:e6:a1:4e:f0:2d:95:45:f5:a2:de:
c1:1c:ec:4f:83:b4:da:49:7f:31:8f:ec:98:4a:50:a0:ed:c3:
f2:39:e0:26:b4:e6:6b:e8:1a:a5:e8:3f:5e:f6:b5:67:06:8f:
ed:35:39:33:48:20:19:89:70:c3:15:03:4a:03:b0:c8:b2:1c:
95:dc:36:31:60:94:10:b9:a2:69:66:f6:7d:75:ce:20:e4:67:
f5:8a:cb:cd:db:db:f9:70:a4:77:70:89:f9:8f:5d:67:4a:6b:
67:72:a4:5a:67:4c:7b:01:e3:de:57:b4:93:db:5d:91:9d:f8:
f7:46:d0:26:b4:61:92:25:6f:3c:c4:7e:d4:e0:28:ef:df:31:
e2:a2:82:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:02 2026 by rpki-client