Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/OozFPShE_rUv8maj5s2holLOnSw.roa
File: OozFPShE_rUv8maj5s2holLOnSw.roa (raw, json)
Hash identifier: of1t6N552m6r7FO0Rv3cPatKyevbOunkRNR2iRx3MR8=
Subject key identifier: 3A:8C:C5:3D:28:44:FE:B5:2F:F2:66:A3:E6:CD:A1:A2:52:CE:9D:2C
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 01A0E7E8478A5EB0F339C12CEE95ABB6DD6F
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/OozFPShE_rUv8maj5s2holLOnSw.roa
Signing time: Mon 28 Sep 2026 12:05:54 +0000
ROA not before: Mon 28 Sep 2026 12:05:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54103
IP address blocks: 212.124.68.0/24 maxlen: 24
212.124.80.0/22 maxlen: 24
212.124.84.0/24 maxlen: 24
212.124.85.0/24 maxlen: 24
212.124.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e8:47:8a:5e:b0:f3:39:c1:2c:ee:95:ab:b6:dd:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Sep 28 12:05:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a8cc53d2844feb52ff266a3e6cda1a252ce9d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:c7:b7:59:c2:3b:2c:60:4c:36:90:a3:55:ef:
2c:ec:2d:e8:7b:7b:16:20:bf:f1:4f:cb:f0:a1:5c:
89:ca:6b:9a:7a:1e:98:b8:99:72:94:e1:15:c9:92:
1f:9f:4c:a3:2c:2f:d5:63:22:4e:8f:07:69:ef:11:
45:77:dc:ec:23:2c:cb:c4:b9:70:f9:fc:6d:e5:23:
13:56:72:33:9e:bd:59:37:4a:dd:73:f3:26:e1:66:
17:7d:5f:21:52:c8:66:5d:29:40:53:9a:6d:2a:61:
ec:8b:60:99:72:6b:5f:d8:e7:8d:0e:38:7b:0d:0d:
2e:bc:aa:9f:95:a3:de:9a:b4:dc:68:38:88:20:c7:
2a:fd:34:7b:06:a3:ae:87:f6:67:5b:a6:de:ce:4a:
3a:57:e7:eb:b6:f8:b6:3f:11:39:52:f8:4e:7f:fd:
91:f0:e0:73:cd:26:38:6d:7d:71:04:c4:83:f3:ec:
14:35:47:51:e8:a1:45:df:74:a2:6c:f3:09:45:c5:
00:5f:95:4d:8d:6a:d0:e6:e8:12:ee:3c:94:ed:8a:
9e:28:d7:54:e2:11:25:d1:79:36:c3:cb:57:da:e7:
b7:b9:93:8a:59:28:97:2f:66:ff:af:e7:6f:79:fd:
ef:67:a9:2c:e8:3c:c6:2c:0c:97:43:b8:c1:10:69:
98:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8C:C5:3D:28:44:FE:B5:2F:F2:66:A3:E6:CD:A1:A2:52:CE:9D:2C
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/OozFPShE_rUv8maj5s2holLOnSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.68.0/24
212.124.80.0-212.124.85.255
212.124.87.0/24
Signature Algorithm: sha256WithRSAEncryption
87:0d:d7:ed:4e:8d:b3:3e:52:a7:41:7d:a8:0b:5e:fd:52:a6:
db:b1:ef:10:12:c7:d2:0e:36:b7:1c:79:7a:ef:a5:28:ab:b5:
ff:07:29:ed:34:51:49:36:9d:1b:08:06:d1:e2:1d:9c:f0:24:
53:25:30:d3:32:f7:25:b3:21:70:54:30:fa:55:99:11:f4:62:
8d:d8:87:22:d1:17:4b:04:78:a3:ea:f6:dd:7c:ef:6b:5e:85:
f7:76:c2:3a:e5:69:89:63:c6:e7:c0:43:4c:a1:18:26:b4:18:
09:3c:b6:d2:2d:f0:b9:0f:67:c7:a1:cc:6d:2e:35:c6:30:2a:
70:8e:64:84:31:42:f1:ef:b8:6f:37:b4:fb:58:03:6d:2d:99:
ee:92:d4:1d:97:b9:bf:3d:e0:11:d4:5e:2c:bb:e1:c1:2d:17:
b8:d2:da:f3:bd:18:e8:87:54:2e:ea:69:38:11:76:b6:6c:a9:
ef:16:d5:c9:d8:50:ab:8a:01:44:f1:43:3c:b8:14:c4:b1:07:
9c:6f:49:66:18:a2:93:57:57:53:31:c3:bd:c1:ba:79:54:ba:
40:37:d3:8c:c5:c0:0b:0e:68:67:c7:27:ac:b1:bb:c6:cd:53:
5d:89:86:c4:b4:98:2c:a6:06:17:73:92:e3:96:5a:9c:ed:36:
7e:08:42:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:52:29 2026 by rpki-client