Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/obphPXG2D3I6E1hC3qS9cZsWY3E.roa
File: obphPXG2D3I6E1hC3qS9cZsWY3E.roa (raw, json)
Hash identifier: /1avtEUsWsRbN0rQQOzanwcKSDqgqDgY+UwQ8BZo+vc=
Subject key identifier: A1:BA:61:3D:71:B6:0F:72:3A:13:58:42:DE:A4:BD:71:9B:16:63:71
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019DBFD873B61F25D8D22F48D226A29AA7C6
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/obphPXG2D3I6E1hC3qS9cZsWY3E.roa
Signing time: Fri 24 Apr 2026 14:15:26 +0000
ROA not before: Fri 24 Apr 2026 14:15:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205502
IP address blocks: 87.232.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bf:d8:73:b6:1f:25:d8:d2:2f:48:d2:26:a2:9a:a7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Apr 24 14:15:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1ba613d71b60f723a135842dea4bd719b166371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:1d:e1:1b:4b:d9:66:bc:eb:de:b9:0f:df:
4c:b4:ec:ad:1f:82:c5:26:03:06:14:f5:7d:eb:86:
54:71:cc:49:09:82:68:22:9f:f4:66:4b:d9:b6:f1:
81:dd:be:1c:8b:08:9e:5f:46:d5:20:c1:06:59:77:
43:b8:64:ce:58:b0:97:30:27:06:a1:5c:ea:b1:c9:
d9:b5:1f:15:d3:a1:52:46:11:a1:05:9c:cd:ec:94:
8e:2c:3a:53:3f:6d:79:11:c4:67:c4:8e:0b:86:6c:
52:ee:5f:94:20:af:60:15:16:fd:f3:b2:a9:28:99:
01:2a:51:18:14:9d:67:7b:6f:48:8f:b2:f5:73:09:
89:cd:7b:d3:f9:2e:0c:5c:db:05:d6:22:e3:5d:5e:
55:89:f5:75:cf:f1:ba:03:a3:bf:f6:00:ee:9a:ae:
8a:84:c1:cd:86:8f:e5:95:37:21:aa:51:a3:88:46:
b9:e1:10:04:18:80:dc:72:7e:42:71:df:a8:59:ba:
93:37:a4:f4:1a:e9:bc:d8:b4:3e:1e:f6:df:56:cc:
ae:3b:c2:92:72:c8:b4:b8:70:04:10:cb:52:cb:04:
05:b5:41:b5:ec:4a:c4:9d:8f:3a:f2:df:92:03:f1:
a8:37:0d:c5:b7:b3:73:53:8e:6f:7f:71:f1:2d:ee:
5a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BA:61:3D:71:B6:0F:72:3A:13:58:42:DE:A4:BD:71:9B:16:63:71
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/obphPXG2D3I6E1hC3qS9cZsWY3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.108.0/24
Signature Algorithm: sha256WithRSAEncryption
79:07:3c:24:ea:69:be:2f:a6:81:94:4a:b5:27:25:3c:30:42:
2d:4a:e1:46:04:6b:ec:d0:fb:c3:f9:40:a4:a7:3b:71:db:40:
98:5d:4d:92:70:9f:d0:d2:2e:de:a5:8a:30:96:e6:df:6c:50:
21:f0:6d:80:41:82:19:8f:ec:cf:00:47:95:38:4c:31:9f:3f:
bb:09:33:c2:9b:c2:c0:8f:24:c9:97:9a:a6:1b:38:a1:05:a9:
3e:80:a4:46:cb:66:3c:59:a2:fe:8b:63:e6:19:00:6d:ff:14:
42:1d:b6:52:c7:a9:2f:89:6a:3c:62:cb:00:7b:fd:25:67:f5:
2c:4b:7b:b8:67:04:0d:12:61:ba:de:56:0f:2d:fd:b0:fb:a0:
89:d1:0b:e9:a3:e8:cc:84:ef:67:ef:14:f2:a5:ac:97:7d:65:
7c:e0:f1:a4:99:cd:38:cd:75:af:50:24:76:79:51:8c:41:d1:
9f:9b:1d:5a:04:95:b5:9a:18:5e:0f:89:c6:04:11:b9:a8:c8:
3c:28:c3:f5:60:6a:17:0d:4a:0c:4c:05:62:68:93:86:5d:e0:
97:3e:a3:93:53:44:25:32:0a:50:fc:a9:b0:6b:eb:de:6e:77:
33:7c:00:d7:ac:6e:48:b9:b7:0c:6f:8b:79:68:4f:8b:a4:52:
5e:31:6a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:18:47 2026 by rpki-client