Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/OyyTDHpH678IMfI8U7SIJJSt36w.roa
File: OyyTDHpH678IMfI8U7SIJJSt36w.roa (raw, json)
Hash identifier: 5nEsWaq7A4A7lJJLWVqnX+6AAAiWeFPitp6fpMgNEWA=
Subject key identifier: 3B:2C:93:0C:7A:47:EB:BF:08:31:F2:3C:53:B4:88:24:94:AD:DF:AC
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A1A6386BE63D7F1261D6FB79907F65D7B4
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/OyyTDHpH678IMfI8U7SIJJSt36w.roa
Signing time: Wed 04 Nov 2026 11:01:17 +0000
ROA not before: Wed 04 Nov 2026 11:01:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402904
IP address blocks: 212.102.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:38:6b:e6:3d:7f:12:61:d6:fb:79:90:7f:65:d7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Nov 4 11:01:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b2c930c7a47ebbf0831f23c53b4882494addfac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:58:28:7a:e9:3d:48:13:1e:76:38:0e:c6:b0:
5d:7e:e2:69:e2:0f:0f:13:e3:59:73:5f:6e:17:e7:
1e:a6:53:40:f7:c8:13:25:44:2b:3f:da:d9:a1:a7:
7f:f9:dd:ae:38:cf:a7:6c:26:1a:bf:b9:62:4d:fd:
1b:8b:7c:87:d7:e6:69:64:9c:ce:88:f8:1f:75:37:
d5:81:fb:d7:58:f7:8f:5d:8a:7f:d0:26:82:22:a6:
ab:7a:e2:be:d4:98:26:c1:d5:08:06:e4:1d:fe:49:
68:a8:81:8b:56:ee:8b:b6:8e:ef:ee:11:c6:76:5e:
1b:d1:8e:41:7e:d8:7d:1a:0a:7d:2c:ad:95:a8:86:
d0:b8:45:be:3e:2a:e3:2d:03:3f:31:ba:67:3f:28:
96:8d:88:29:0b:42:a5:ec:27:ab:f9:53:02:81:3e:
c3:fa:38:dc:74:a3:90:06:d7:95:be:04:87:55:e2:
6f:24:fd:18:41:ca:36:61:5a:1a:19:d9:a1:09:08:
6c:f2:96:65:67:95:42:b1:32:05:ba:fd:d0:3d:12:
08:40:1e:7c:48:0a:20:31:ee:48:d7:0e:dd:16:96:
16:e1:d0:7d:82:07:db:ba:1b:2e:68:e9:b2:01:9a:
c8:60:54:30:03:ae:81:98:6e:9e:c1:4f:98:80:e1:
a6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2C:93:0C:7A:47:EB:BF:08:31:F2:3C:53:B4:88:24:94:AD:DF:AC
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/OyyTDHpH678IMfI8U7SIJJSt36w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.113.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f3:a8:75:fe:1e:9e:1f:49:97:6d:6a:f0:d8:1b:12:96:2c:
4a:1f:38:0e:72:68:f7:be:a5:21:3e:ee:20:5c:b9:8d:c1:78:
51:66:fa:b1:5c:dd:df:bd:39:6e:be:67:cf:0f:b5:1c:fb:6a:
ce:3e:3c:fa:98:ea:94:3e:df:ab:22:e1:df:c5:0b:85:a4:b5:
f7:f4:d5:03:45:be:7a:d0:5e:b8:09:54:80:50:01:e2:09:a5:
12:d4:2e:c6:54:a0:e5:6c:69:ca:11:9c:1c:da:44:64:82:bb:
76:9f:bc:30:80:12:a8:c9:ab:73:19:8f:a6:69:e8:2a:8c:8b:
5f:90:e4:cd:42:cc:d6:42:d3:4c:38:86:39:85:23:9a:a6:a8:
cd:e8:05:f6:d6:40:b6:40:93:42:61:e7:24:1a:c7:72:2e:7e:
e1:2c:c2:8f:0b:ee:c8:dc:e9:90:d4:60:b7:36:84:0c:ba:70:
3f:d0:ab:86:88:41:2e:83:33:3e:0a:3c:63:fa:ea:94:ee:3e:
69:fb:b6:f6:9c:7c:e9:19:ce:67:b1:aa:66:49:a6:b2:0f:a8:
62:2f:2f:c7:cb:82:24:3a:73:3b:ed:b7:ca:0e:0d:ab:d1:40:
26:e8:da:d5:d6:04:dd:b2:e1:78:8d:ba:ad:1a:95:73:39:6d:
78:4b:3a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 19:35:04 2026 by rpki-client