Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/oOuq9szBVVXp_8OsgCZ3pu28ddg.roa
File: oOuq9szBVVXp_8OsgCZ3pu28ddg.roa (raw, json)
Hash identifier: 7GdmHYyxJ/9UYfdFEu9F0OgfiQh0ULa76jQWllePHj4=
Subject key identifier: A0:EB:AA:F6:CC:C1:55:55:E9:FF:C3:AC:80:26:77:A6:ED:BC:75:D8
Certificate issuer: /CN=47f0b860e1350e087a06793181074f47b7953fa1
Certificate serial: 01A06D010D60C731CF3E58E4C53A3017BA06
Authority key identifier: 47:F0:B8:60:E1:35:0E:08:7A:06:79:31:81:07:4F:47:B7:95:3F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/oOuq9szBVVXp_8OsgCZ3pu28ddg.roa
Signing time: Fri 04 Sep 2026 15:19:40 +0000
ROA not before: Fri 04 Sep 2026 15:19:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23736
IP address blocks: 153.76.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:01:0d:60:c7:31:cf:3e:58:e4:c5:3a:30:17:ba:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f0b860e1350e087a06793181074f47b7953fa1
Validity
Not Before: Sep 4 15:19:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0ebaaf6ccc15555e9ffc3ac802677a6edbc75d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:1a:02:d8:8e:d7:33:75:d9:fd:e8:6e:ff:
5e:c3:c8:c4:d5:0e:c8:fe:46:a4:51:98:d7:45:85:
05:f4:12:de:a5:97:cc:38:09:55:34:bf:97:23:a8:
a9:50:c0:e4:1b:b2:6d:5f:38:9c:d3:7e:f9:93:ce:
cf:48:90:ff:80:0a:9a:73:7f:b4:db:a9:49:f1:45:
99:b4:63:89:3a:19:09:b8:68:0a:36:80:b9:bc:2a:
61:80:e9:7a:ca:29:de:4a:c2:fa:24:9f:55:1b:8c:
f0:26:73:72:b8:07:78:33:c6:8d:27:44:dd:7b:7c:
f7:3f:db:e3:78:64:63:46:e9:92:51:44:02:58:1f:
8a:4e:1a:e0:4b:4d:22:94:94:4c:76:45:96:8c:89:
c5:67:61:15:f7:ea:c0:f5:f5:76:fb:74:eb:5f:48:
ae:66:6d:e4:00:fb:7c:81:de:bc:35:a5:51:15:7b:
70:aa:3b:1b:38:3a:b5:02:f0:da:10:7d:87:99:5c:
32:99:f6:0d:3b:cb:7e:79:dd:dc:1f:bc:af:64:be:
b6:02:55:10:14:8c:56:0d:e4:b4:6b:e1:de:7d:e4:
9c:90:de:e9:50:6c:84:5f:bd:7a:ce:e7:bf:38:0e:
51:e7:af:7b:25:1f:c6:62:a5:16:7e:0e:c7:b1:33:
85:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EB:AA:F6:CC:C1:55:55:E9:FF:C3:AC:80:26:77:A6:ED:BC:75:D8
X509v3 Authority Key Identifier:
keyid:47:F0:B8:60:E1:35:0E:08:7A:06:79:31:81:07:4F:47:B7:95:3F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/oOuq9szBVVXp_8OsgCZ3pu28ddg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.232.0/21
Signature Algorithm: sha256WithRSAEncryption
86:ac:de:86:92:f5:6a:9f:c3:ef:f0:ef:c0:33:8a:7b:58:0e:
90:e9:86:cc:2f:ab:0f:1c:f6:71:f8:35:ce:41:3d:2b:21:2c:
49:7a:10:ab:ff:d1:ba:20:c6:44:52:a1:21:0d:ec:12:30:42:
eb:b0:ee:3f:6f:b7:b9:76:45:b6:b6:80:dc:1c:c3:45:18:e6:
d1:68:63:0f:85:44:58:83:43:c3:8d:ca:20:a2:0c:70:7d:5e:
d5:52:06:07:c4:cb:51:64:0f:b6:6a:eb:aa:0b:c5:89:06:e5:
bf:4a:77:9f:f5:d1:c9:cd:11:f4:e1:b1:c6:e7:9e:8c:79:45:
b0:8a:82:ec:7f:f8:74:d1:fa:ff:1f:d7:68:80:00:ce:47:94:
1c:15:3d:15:a6:63:c5:cb:7e:e2:74:97:3e:7e:d3:9b:0e:e7:
77:0a:1d:23:51:c6:8d:3c:8a:b4:b4:2c:66:5c:6f:86:85:58:
8a:b7:1b:8e:3b:a9:0d:84:c3:3f:e0:57:f1:19:04:85:8e:5f:
26:65:2f:72:1b:fd:4f:ff:93:9d:3e:24:7e:a7:a2:72:11:04:
0d:99:a8:d1:74:31:4f:c9:6c:d0:48:cc:8b:71:f5:0e:ba:af:
fd:db:b4:78:c0:fb:2d:87:ea:61:db:c7:1d:e7:c6:25:77:1b:
e4:6e:5c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:55:40 2026 by rpki-client