Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/ac7b34-93eb-44f0-8816-c96eb9acbd3b/1/oVC2WjCo5L8WluqUyHGn8Ti5Wnc.roa
File: oVC2WjCo5L8WluqUyHGn8Ti5Wnc.roa (raw, json)
Hash identifier: wi1CkB7FNq7klnJrL/W9uocGj6fqQ3/gZDNcfh9S8go=
Subject key identifier: A1:50:B6:5A:30:A8:E4:BF:16:96:EA:94:C8:71:A7:F1:38:B9:5A:77
Certificate issuer: /CN=239c3277955d2129f37d95b3387af01f94285aba
Certificate serial: 01A111DC334A02E35119FBE24AA0A1D859DF
Authority key identifier: 23:9C:32:77:95:5D:21:29:F3:7D:95:B3:38:7A:F0:1F:94:28:5A:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5wyd5VdISnzfZWzOHrwH5QoWro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ac7b34-93eb-44f0-8816-c96eb9acbd3b/1/oVC2WjCo5L8WluqUyHGn8Ti5Wnc.roa
Signing time: Tue 06 Oct 2026 15:36:45 +0000
ROA not before: Tue 06 Oct 2026 15:36:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 94.101.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ac7b34-93eb-44f0-8816-c96eb9acbd3b/1/I5wyd5VdISnzfZWzOHrwH5QoWro.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ac7b34-93eb-44f0-8816-c96eb9acbd3b/1/I5wyd5VdISnzfZWzOHrwH5QoWro.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5wyd5VdISnzfZWzOHrwH5QoWro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:dc:33:4a:02:e3:51:19:fb:e2:4a:a0:a1:d8:59:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c3277955d2129f37d95b3387af01f94285aba
Validity
Not Before: Oct 6 15:36:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a150b65a30a8e4bf1696ea94c871a7f138b95a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:77:d1:e7:6c:b7:b6:49:ac:05:2d:0b:32:
ba:9f:0d:cd:fc:85:be:d5:97:3b:b7:b1:f5:60:9b:
ac:ad:a4:4b:55:b8:93:db:0d:01:11:f0:dc:9a:6f:
52:f2:55:32:ed:97:42:c0:bb:65:5b:ab:23:cf:f4:
c0:6e:fc:33:6e:52:c8:d8:51:e5:98:b5:c0:9d:5a:
5e:53:52:58:9d:99:7f:26:1b:33:72:17:f1:c3:7a:
3e:1d:ef:0b:9e:f6:85:45:6f:29:de:43:02:a4:17:
f5:83:9b:8c:c9:90:ed:c0:55:aa:00:9e:31:9a:37:
15:84:5d:0e:53:6e:30:1b:c1:d8:fc:c7:58:98:11:
83:b9:4b:83:8a:c8:67:07:fc:99:71:01:52:7b:ed:
25:dd:7f:ad:6f:aa:f9:3c:4e:cc:00:89:04:f7:3d:
3e:4c:58:45:8a:b7:1b:2f:68:61:b8:59:0b:17:12:
dc:6e:6c:7a:8a:1e:67:2f:d4:0f:43:fe:39:17:06:
96:07:04:aa:f0:48:82:3e:6a:a7:43:05:e1:39:1b:
a0:60:12:6e:3e:76:60:e0:bb:2d:8d:7a:a7:7e:eb:
3b:7c:79:3c:a5:36:3c:20:12:15:ae:a3:d8:ab:89:
d0:51:45:06:b5:51:53:06:85:56:09:61:e8:83:5d:
3d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:50:B6:5A:30:A8:E4:BF:16:96:EA:94:C8:71:A7:F1:38:B9:5A:77
X509v3 Authority Key Identifier:
keyid:23:9C:32:77:95:5D:21:29:F3:7D:95:B3:38:7A:F0:1F:94:28:5A:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5wyd5VdISnzfZWzOHrwH5QoWro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ac7b34-93eb-44f0-8816-c96eb9acbd3b/1/oVC2WjCo5L8WluqUyHGn8Ti5Wnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ac7b34-93eb-44f0-8816-c96eb9acbd3b/1/I5wyd5VdISnzfZWzOHrwH5QoWro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.172.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:af:3e:b9:60:ec:5a:a1:28:ef:e2:b5:f6:49:44:a9:2a:cc:
6a:67:ec:99:2e:cf:0a:dd:a5:39:6d:62:db:de:2d:ff:c6:e6:
e5:03:46:e9:5d:d9:8b:17:6b:12:78:b7:de:af:2a:87:2e:69:
8d:72:96:0d:41:86:49:32:19:b2:f9:6d:2d:67:13:13:2e:84:
4c:06:cd:d1:31:67:ba:95:d8:fa:07:83:c0:48:18:5a:c5:0c:
8d:26:e8:17:9f:a3:f3:4a:a3:23:d2:62:e4:51:52:20:70:d8:
70:e3:79:88:6e:2c:9d:d1:61:36:f3:8d:09:20:15:de:e4:14:
b8:ba:d9:db:20:e6:5f:87:3f:75:ba:c1:74:25:25:4d:5e:d0:
a0:5d:18:f6:26:ff:7f:14:cb:ab:32:db:a9:5b:d1:80:a5:f4:
d7:54:16:fe:50:6c:38:8a:bf:a9:51:39:1a:27:51:bb:12:da:
dd:7c:6d:3e:b9:2b:e5:34:ae:49:d0:3b:85:62:bc:eb:ba:40:
28:73:4c:c5:19:ba:f6:4a:13:df:fc:6c:96:31:40:ce:8f:54:
67:73:dc:88:4f:63:01:ec:5b:d4:34:4c:1b:58:3d:e0:37:20:
66:ab:31:32:a9:ed:8a:c8:e5:0e:01:4e:9e:a7:ae:dc:b3:b3:
98:da:02:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:40:00 2026 by rpki-client