Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Otl6zv4C9IzRoP34B8NTw7VHUvs.roa
File: Otl6zv4C9IzRoP34B8NTw7VHUvs.roa (raw, json)
Hash identifier: 44e7VxmXESQwyULMD5kxal0zYCljTk0lGOj/sjbr9RE=
Subject key identifier: 3A:D9:7A:CE:FE:02:F4:8C:D1:A0:FD:F8:07:C3:53:C3:B5:47:52:FB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019EDEC84AFDE8B5131EC9A1D9D7D47094E9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Otl6zv4C9IzRoP34B8NTw7VHUvs.roa
Signing time: Fri 19 Jun 2026 07:28:48 +0000
ROA not before: Fri 19 Jun 2026 07:28:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 193.124.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:de:c8:4a:fd:e8:b5:13:1e:c9:a1:d9:d7:d4:70:94:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 19 07:28:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ad97acefe02f48cd1a0fdf807c353c3b54752fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:80:61:8a:a9:2b:87:34:6a:ec:9a:8b:32:
47:7d:71:8b:0a:cd:5d:37:b4:74:31:a7:10:35:c6:
14:16:d7:3c:5c:38:d1:89:4a:a8:fe:47:50:72:bf:
bf:91:74:00:ba:be:97:07:1f:9e:70:4d:e2:72:e2:
53:8c:da:e1:c6:d8:f0:2b:0d:3e:2c:a2:62:6f:5c:
9f:5e:58:b6:aa:4d:5d:53:d9:f6:d6:23:8e:af:31:
47:a8:ee:0e:3e:43:60:ea:63:61:d0:1e:d2:66:14:
f0:e4:90:84:88:db:99:42:92:be:36:fc:c9:dd:d9:
2e:12:ce:55:e8:c7:1a:e6:28:70:9b:17:01:26:ff:
e9:b8:e3:29:67:24:89:c5:b5:fc:2d:f7:e4:14:f2:
11:35:6d:5b:81:be:62:14:7e:79:75:09:cc:7c:de:
e0:a9:9d:3f:0d:bb:d3:41:ce:5c:c7:71:56:bd:86:
cb:aa:e5:07:4e:3c:19:23:d2:71:42:ab:9c:03:1c:
a4:d0:f8:26:1e:d9:52:f3:56:e5:83:30:c0:09:91:
26:7f:7b:15:16:fc:74:c4:53:85:57:ec:1f:95:d1:
f9:57:95:8e:b8:e7:4a:47:81:45:fa:31:c4:d2:54:
17:aa:f2:9e:aa:a9:e9:32:7b:15:0b:6b:20:65:a0:
21:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D9:7A:CE:FE:02:F4:8C:D1:A0:FD:F8:07:C3:53:C3:B5:47:52:FB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Otl6zv4C9IzRoP34B8NTw7VHUvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.6.0/24
Signature Algorithm: sha256WithRSAEncryption
33:5a:00:a0:c8:e4:3a:07:29:7b:72:d1:bf:6d:ca:8e:45:13:
60:c6:ae:48:a4:4d:e5:42:c7:36:4c:df:eb:4a:a3:65:03:82:
da:32:b1:dd:26:8f:16:14:bd:c9:cb:0f:61:9e:7f:d7:c1:e6:
18:0b:da:c3:aa:7d:0c:02:45:15:8f:2a:58:de:14:d4:fb:d7:
25:07:fc:33:32:7b:30:89:57:33:d3:dd:15:d9:ba:cb:57:75:
6a:24:ef:48:fc:eb:4a:81:a1:5f:3e:d9:89:11:2f:a7:66:f7:
17:02:84:0d:1b:54:d4:99:09:57:42:fd:a9:16:7f:a4:d2:bf:
73:58:a4:ad:59:3d:19:0e:4a:ee:68:c8:ba:4c:bc:7a:16:8b:
4d:7d:b9:da:17:80:66:88:8a:54:a6:6d:8f:1b:29:b3:97:3e:
e3:10:76:6a:83:d5:6d:8d:fa:41:0c:9f:ce:3e:e1:3d:3b:be:
1f:a0:70:eb:cf:5a:f9:1c:f7:ae:b1:ae:b8:0b:c5:92:0b:83:
53:b6:63:76:ad:e2:1c:3f:ae:4b:77:c7:aa:79:09:41:28:db:
a3:54:7c:34:38:9d:1f:78:79:eb:2a:a0:35:16:6b:f0:12:b6:
32:35:ea:a8:f4:db:dc:be:26:46:be:ac:86:3e:41:a6:38:bf:
88:32:6b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:53 2026 by rpki-client