Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/oeQyPd9AMc3ND0YKXa7FC28wYdA.roa
File: oeQyPd9AMc3ND0YKXa7FC28wYdA.roa (raw, json)
Hash identifier: GkDx2Or7sJjEpoxRbqBwnVrawwVjahI1B4EI7eTt01c=
Subject key identifier: A1:E4:32:3D:DF:40:31:CD:CD:0F:46:0A:5D:AE:C5:0B:6F:30:61:D0
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019FC800AEC03ACAD7FD2CA92E721B69BB2E
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/oeQyPd9AMc3ND0YKXa7FC28wYdA.roa
Signing time: Mon 03 Aug 2026 14:21:55 +0000
ROA not before: Mon 03 Aug 2026 14:21:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212112
IP address blocks: 2a0d:d940:10b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:00:ae:c0:3a:ca:d7:fd:2c:a9:2e:72:1b:69:bb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Aug 3 14:21:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1e4323ddf4031cdcd0f460a5daec50b6f3061d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:b5:61:58:73:c8:fe:6a:a8:f2:4f:f2:63:
5c:1b:ee:32:51:bb:ff:75:2a:56:db:8b:bc:79:a3:
10:98:e3:e5:0d:bc:32:f3:63:e9:74:90:ec:16:91:
a5:34:72:ec:b8:63:b5:34:74:d3:64:38:bd:34:8a:
60:89:73:a4:d2:58:27:2f:ac:91:6a:fa:c1:40:af:
72:22:54:7b:86:7c:6a:6d:8c:c0:bf:6d:62:f6:43:
2f:44:c0:52:2c:b4:8c:f3:34:a5:c0:0c:8b:1b:0b:
99:07:f7:8f:30:d8:74:f3:53:82:4c:8f:04:c6:3c:
8d:69:09:db:c0:28:2c:d6:08:8d:3c:cc:49:85:d1:
0a:36:9f:d5:77:d5:ea:97:4a:b3:9a:05:f8:dd:f4:
50:c7:07:4d:3d:c2:69:88:4d:59:fc:d8:ce:6e:52:
14:c4:43:9a:d9:43:17:99:3a:12:f1:37:4e:e0:77:
d5:36:ca:b0:20:61:2e:d0:fb:18:d4:00:ec:e3:21:
10:c3:66:91:aa:70:66:cc:db:e3:ec:77:11:e8:e0:
6d:26:de:21:ea:d3:34:4e:f7:1d:9d:71:0e:7e:bb:
5f:f4:8f:06:31:28:4e:ef:79:fe:49:79:0c:72:1b:
a8:c3:6b:b0:b0:57:d1:43:3b:2d:3e:f1:b0:77:43:
9d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E4:32:3D:DF:40:31:CD:CD:0F:46:0A:5D:AE:C5:0B:6F:30:61:D0
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/oeQyPd9AMc3ND0YKXa7FC28wYdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:10b::/48
Signature Algorithm: sha256WithRSAEncryption
a0:38:aa:8d:e1:8e:94:54:04:92:80:88:4f:08:7c:3e:e4:4d:
fb:be:4a:8e:ed:c7:ad:11:52:16:a8:86:e5:a5:88:65:3f:e2:
af:8f:60:4d:7c:4b:4e:57:51:5f:bc:1d:87:70:b4:b3:26:07:
63:4b:af:a1:64:5c:78:ca:9a:e3:5b:a1:9a:aa:55:ee:eb:8a:
c4:1f:e9:9a:61:24:7d:0c:5b:7f:47:f6:b9:b0:ad:12:18:9b:
5e:1b:2e:f6:c4:1b:cf:f0:06:51:34:f4:cb:c2:97:d8:1a:75:
35:13:6f:75:66:49:04:f8:82:e1:0a:24:8d:92:3a:60:8a:58:
a1:aa:fc:25:15:42:6d:4b:eb:50:b4:35:76:57:75:cb:7c:eb:
84:79:3c:6a:1a:aa:98:39:f9:c8:6a:a5:1d:aa:26:f1:4b:a7:
f9:c2:da:a6:8a:b7:c7:78:66:26:dd:9a:c6:55:21:7a:88:77:
9c:ae:6c:e2:f8:a1:8d:7e:ed:5b:d6:30:68:81:3f:75:a6:45:
55:92:b8:84:50:f3:e7:a9:f1:95:38:46:7a:a1:6b:85:48:99:
ab:62:4c:6c:1a:d8:8f:3e:db:8d:00:98:78:f9:94:28:65:b1:
c9:b6:68:0e:4b:aa:30:5b:93:74:37:56:4c:2e:b4:40:0a:74:
ec:80:6d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:35 2026 by rpki-client