Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Ooxilc_Uz0HMZQKU1p8pTvuqjS8.roa
File: Ooxilc_Uz0HMZQKU1p8pTvuqjS8.roa (raw, json)
Hash identifier: wqI361oopBusUmevXR3kXn4Y2eJ4eVc8ittOw+jwj20=
Subject key identifier: 3A:8C:62:95:CF:D4:CF:41:CC:65:02:94:D6:9F:29:4E:FB:AA:8D:2F
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A10201BCDA1D91107384C6B55B28E69728
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Ooxilc_Uz0HMZQKU1p8pTvuqjS8.roa
Signing time: Sat 03 Oct 2026 13:43:50 +0000
ROA not before: Sat 03 Oct 2026 13:43:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 212.102.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:01:bc:da:1d:91:10:73:84:c6:b5:5b:28:e6:97:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Oct 3 13:43:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a8c6295cfd4cf41cc650294d69f294efbaa8d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:5c:d3:b0:fb:c9:3a:ce:c9:6a:a7:a0:bf:
de:b6:d7:ce:a3:be:f1:1e:ff:4b:a3:13:5b:cc:90:
6a:37:4e:e7:e6:c1:66:83:5f:9a:54:d5:52:b4:10:
de:07:13:73:29:1e:81:c4:7d:10:fd:26:e8:50:73:
ca:2d:79:11:5e:db:7b:b4:82:bb:31:f4:a3:95:16:
52:50:2d:56:4b:2e:a1:ba:f5:67:2a:fd:44:af:fd:
dd:c9:60:8c:89:fe:a8:bb:ce:f2:6a:a7:7a:20:e0:
3a:78:cb:d5:c5:a0:7b:4b:b8:84:32:1f:56:f1:6c:
97:8a:f8:2b:f7:fb:2b:59:21:96:c6:9e:93:7f:c0:
72:c5:63:ef:05:cf:0b:fe:33:98:78:5a:59:c9:f5:
e0:00:97:82:32:64:54:f6:81:1b:fd:5a:50:00:43:
09:03:0c:35:2b:6e:09:ee:ba:04:02:1c:4c:36:3c:
98:d1:ae:65:73:8f:5c:5f:e8:6e:88:12:af:78:7c:
6d:25:52:d8:ff:13:e4:15:a3:8a:24:60:e9:50:41:
2f:02:a3:f6:58:25:11:12:0c:a1:5a:77:51:14:e4:
5e:34:0e:5b:af:5c:79:ad:75:59:36:89:07:d5:97:
b7:b2:93:7b:34:80:d7:a1:bd:8f:ef:11:3f:8d:d2:
39:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8C:62:95:CF:D4:CF:41:CC:65:02:94:D6:9F:29:4E:FB:AA:8D:2F
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Ooxilc_Uz0HMZQKU1p8pTvuqjS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.113.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:b6:4d:49:45:ff:d7:b1:ec:4b:8c:a0:10:67:1f:ba:bf:3c:
2f:c3:48:95:80:f6:4c:9f:29:f7:03:48:e8:3f:ed:79:25:da:
e3:bf:5e:e9:10:8b:36:f0:84:54:2c:dc:18:6d:dd:99:1e:21:
91:b2:53:9e:8d:2d:c4:8d:57:90:59:e4:73:e8:3e:22:8b:ca:
ba:db:29:b3:58:fe:3a:55:09:73:2d:44:89:39:3b:ec:d3:b1:
f3:b4:25:ba:10:73:a3:76:de:63:36:a3:75:4f:e4:6d:3f:ab:
38:1e:81:33:56:24:a5:cb:6f:d9:59:ba:4d:b9:6c:50:48:ab:
0f:d9:a5:e7:10:56:74:fc:7a:3c:18:8a:89:78:ad:3b:8d:26:
11:10:af:3a:8c:e4:09:e5:77:dd:fe:89:28:f4:e9:da:14:84:
33:c5:25:67:88:80:cc:48:5b:a3:0a:5e:16:c1:0f:b7:8e:60:
11:85:97:19:30:e9:c7:3f:f4:72:e1:72:e2:17:c9:7e:0a:da:
a2:4e:17:45:01:38:68:11:9a:2d:67:34:d5:32:63:d0:ed:34:
86:76:ee:31:28:5e:4b:5e:85:00:d0:14:e9:34:64:1d:e2:29:
b6:86:0e:05:f7:d5:ef:b4:51:55:f2:33:d2:54:fd:aa:5b:3c:
d2:c7:6e:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaECAbzaHZEQc4TGtVso5pcoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy
ODRkMGYwHhcNMjYxMDAzMTM0MzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYThjNjI5NWNmZDRjZjQxY2M2NTAyOTRkNjlmMjk0ZWZiYWE4ZDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR9c07D7yTrOyWqnoL/ettfOo77x
Hv9LoxNbzJBqN07n5sFmg1+aVNVStBDeBxNzKR6BxH0Q/SboUHPKLXkRXtt7tIK7
MfSjlRZSUC1WSy6huvVnKv1Er/3dyWCMif6ou87yaqd6IOA6eMvVxaB7S7iEMh9W
8WyXivgr9/srWSGWxp6Tf8ByxWPvBc8L/jOYeFpZyfXgAJeCMmRU9oEb/VpQAEMJ
Aww1K24J7roEAhxMNjyY0a5lc49cX+huiBKveHxtJVLY/xPkFaOKJGDpUEEvAqP2
WCUREgyhWndRFOReNA5br1x5rXVZNokH1Ze3spN7NIDXob2P7xE/jdI5TwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDqMYpXP1M9BzGUClNafKU77qo0vMB8GA1UdIwQY
MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt
NGY1N2Q5Y2Y1Y2FhLzEvT294aWxjX1V6MEhNWlFLVTFwOHBUdnVxalM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh
LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GZxMA0G
CSqGSIb3DQEBCwUAA4IBAQC5tk1JRf/XsexLjKAQZx+6vzwvw0iVgPZMnyn3A0jo
P+15Jdrjv17pEIs28IRULNwYbd2ZHiGRslOejS3EjVeQWeRz6D4ii8q62ymzWP46
VQlzLUSJOTvs07HztCW6EHOjdt5jNqN1T+RtP6s4HoEzViSly2/ZWbpNuWxQSKsP
2aXnEFZ0/Ho8GIqJeK07jSYREK86jOQJ5Xfd/oko9OnaFIQzxSVniIDMSFujCl4W
wQ+3jmARhZcZMOnHP/Ry4XLiF8l+CtqiThdFAThoEZotZzTVMmPQ7TSGdu4xKF5L
XoUA0BTpNGQd4im2hg4F99XvtFFV8jPSVP2qWzzSx27G
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:47:33 2026 by rpki-client