Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/OHdafJl28ELb_JFGqWsFld9J3Uo.roa
File: OHdafJl28ELb_JFGqWsFld9J3Uo.roa (raw, json)
Hash identifier: VsqiZ9N4KUb9yh2lhHSsRkN6LRdYoMiLCj737ycK2pw=
Subject key identifier: 38:77:5A:7C:99:76:F0:42:DB:FC:91:46:A9:6B:05:95:DF:49:DD:4A
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A17355824DF4838950F36D9DDDBD4EABDC
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/OHdafJl28ELb_JFGqWsFld9J3Uo.roa
Signing time: Sun 25 Oct 2026 13:52:26 +0000
ROA not before: Sun 25 Oct 2026 13:52:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a0c:9a40:8a90::/48 maxlen: 48
2a0c:9a40:8b50::/48 maxlen: 48
2a0c:9a40:e1a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:55:82:4d:f4:83:89:50:f3:6d:9d:dd:bd:4e:ab:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Oct 25 13:52:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38775a7c9976f042dbfc9146a96b0595df49dd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:ad:10:37:af:c9:b6:d8:34:4f:78:e6:7d:
c0:da:c0:c0:86:24:a0:28:01:75:e9:f7:de:c1:0e:
eb:86:4c:75:1e:db:86:6e:77:01:86:d6:3c:1a:d8:
af:59:68:3f:c3:15:7c:d1:3e:2c:00:a1:3e:04:73:
12:31:92:4d:61:39:75:b3:0f:bc:fd:a1:7f:e5:f0:
14:bc:07:ee:a2:9b:f3:cf:56:e4:23:d8:ec:b5:83:
50:5c:1c:a1:5b:0c:a8:02:26:00:bf:dd:d6:61:c4:
13:dc:78:d6:37:1d:6e:fa:39:41:c8:2c:dd:f9:ec:
86:4f:e0:10:38:ef:f9:e8:d8:b7:eb:2e:95:7b:e7:
48:3b:ab:0c:82:25:ee:49:ee:3b:cc:3a:25:6d:34:
fa:cc:18:09:e7:ae:dc:de:69:93:56:11:e8:15:bf:
30:4f:a7:43:93:0e:91:3a:79:20:14:d2:ac:bd:db:
cc:79:48:e2:14:2d:d2:b0:3f:62:a7:32:98:17:30:
d4:28:0d:09:30:2e:ff:38:a8:af:04:07:f6:6a:a6:
05:7d:83:50:4c:ff:40:c7:53:00:6e:3c:6f:82:2b:
89:a3:b4:6c:13:4a:b6:03:03:99:54:f5:a2:a6:9e:
e1:9b:7b:ee:32:78:8a:a0:81:2d:62:83:cb:80:e4:
d6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:77:5A:7C:99:76:F0:42:DB:FC:91:46:A9:6B:05:95:DF:49:DD:4A
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/OHdafJl28ELb_JFGqWsFld9J3Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8a90::/48
2a0c:9a40:8b50::/48
2a0c:9a40:e1a0::/48
Signature Algorithm: sha256WithRSAEncryption
c7:42:a4:98:94:98:62:d8:6f:ec:24:09:e9:fa:5d:fe:ca:04:
9a:b2:d7:e5:64:9e:f4:bf:70:f2:3a:34:43:29:c1:6d:44:13:
9c:42:87:fa:11:64:9f:4b:0b:01:17:4a:96:97:71:85:12:13:
d7:d5:00:59:8d:c2:d6:b4:d8:ba:2e:da:91:9d:90:62:21:fa:
70:70:11:7f:6d:31:c3:19:ef:70:e5:63:73:27:62:44:c3:18:
88:ae:de:fb:0c:e1:de:90:a8:94:c4:67:12:05:f6:a8:86:12:
44:b7:d2:4f:b8:53:9b:1b:e0:b1:91:a9:25:65:16:2f:27:ad:
2a:bf:02:d5:e4:3a:0f:c7:86:24:9d:6d:82:4b:84:8a:3a:b7:
b4:66:d0:82:8b:50:8c:e5:e9:1c:64:80:5a:5b:cb:6c:86:1e:
9c:2e:08:7f:52:70:3f:42:78:94:81:05:5d:c2:b9:63:e4:f0:
30:49:a0:d0:77:43:11:f6:1a:2b:5c:42:13:e3:2d:27:16:59:
38:91:5d:17:10:8a:65:b7:a6:1c:f5:76:58:4c:d6:c0:34:52:
53:a5:3e:b7:8d:ee:fd:47:0e:e4:80:87:f7:f6:6b:c7:c0:ac:
6e:6f:29:19:86:0a:5f:6f:ee:17:cc:70:b5:c7:80:ee:b5:2c:
2c:8d:13:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:56:35 2026 by rpki-client