Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/1-OzicR5kzd1Ow7p9pVk0SBB2HZs.roa
File: 1-OzicR5kzd1Ow7p9pVk0SBB2HZs.roa (raw, json)
Hash identifier: WyH53JIWlzDtSzteiBRYQxZUpstzNJjn2NRysD5+PVY=
Subject key identifier: F8:EC:E2:71:1E:64:CD:DD:4E:C3:BA:7D:A5:59:34:48:10:76:1D:9B
Certificate issuer: /CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
Certificate serial: 019F3DD6EEC12B455CCC6303C0639A4F2D83
Authority key identifier: 07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/1-OzicR5kzd1Ow7p9pVk0SBB2HZs.roa
Signing time: Tue 07 Jul 2026 18:28:43 +0000
ROA not before: Tue 07 Jul 2026 18:28:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49600
IP address blocks: 2a12:c7c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jul 2026 16:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:d6:ee:c1:2b:45:5c:cc:63:03:c0:63:9a:4f:2d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
Validity
Not Before: Jul 7 18:28:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8ece2711e64cddd4ec3ba7da559344810761d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:87:24:96:09:3b:9a:4d:53:66:73:29:9d:
61:76:39:56:39:0a:6c:69:f4:30:39:f2:9d:54:7f:
0f:26:ec:4f:eb:79:72:30:0f:82:98:34:32:82:f1:
2d:5e:7f:11:94:75:69:49:97:a5:45:31:b1:95:3c:
92:c7:16:5e:13:c8:49:a8:5b:24:af:cf:bb:8b:f2:
55:fb:1e:68:8b:5c:15:99:a5:11:bd:fc:c2:f7:20:
c9:18:31:62:35:de:90:91:74:fb:c7:04:9b:6b:0f:
d5:fb:a7:6d:a7:71:23:92:df:5b:c8:b7:97:83:4d:
9b:fd:a4:02:6b:d1:05:20:14:46:db:ae:af:5d:fe:
18:f6:4a:84:fb:a2:cb:c3:69:e4:ed:f4:68:ed:6d:
92:b2:34:ba:fd:51:2a:dc:d4:57:9b:24:5a:66:4c:
1e:d9:9e:35:8e:44:3d:4f:3f:67:8a:b2:cf:51:ec:
31:c6:73:ba:23:77:67:db:db:e5:2d:5d:83:f2:79:
4d:0d:81:c5:44:31:bc:4f:56:33:af:7e:90:d1:5f:
c6:fc:17:30:69:a4:1b:9c:fb:91:94:68:c8:d4:4a:
15:4d:08:cb:2e:e8:aa:8f:92:ef:0e:31:c9:5a:51:
5f:65:af:91:80:8c:c0:98:29:a3:27:70:4b:df:52:
d3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EC:E2:71:1E:64:CD:DD:4E:C3:BA:7D:A5:59:34:48:10:76:1D:9B
X509v3 Authority Key Identifier:
keyid:07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/1-OzicR5kzd1Ow7p9pVk0SBB2HZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:c7c0::/29
Signature Algorithm: sha256WithRSAEncryption
64:6d:07:8f:b9:4f:78:b5:a8:4f:c4:1f:25:aa:77:d2:77:c3:
d1:66:a5:81:33:ad:7c:dd:a4:3f:c5:7d:b4:0b:d6:54:88:70:
37:60:0c:3f:8f:bb:bc:4c:67:d1:93:e7:ad:55:54:56:a2:e5:
65:16:c7:9d:b8:a9:6b:44:39:e1:b1:0b:4b:aa:c2:38:db:e3:
44:9f:cd:77:a6:ef:d8:52:1d:ec:cb:ff:28:0b:30:d6:c2:34:
9c:e5:e7:88:d7:e8:01:76:a4:56:d3:06:56:9c:aa:bb:d8:d1:
14:23:2c:4f:a4:f2:58:34:c7:19:35:73:51:c7:28:d6:96:21:
0d:5d:14:05:5d:62:1e:38:92:98:cf:91:bd:64:c4:3c:6c:07:
67:06:b8:55:cc:91:bc:79:25:54:37:2b:08:a3:a2:6b:94:03:
9b:b9:88:19:e8:a1:3b:a0:7f:46:cc:45:db:22:ab:01:ec:7e:
6b:d3:95:a6:c9:ac:06:6a:ff:c0:1f:d9:7f:2a:b9:04:15:15:
3c:22:97:e2:5a:04:ff:fa:43:c3:36:93:d7:bf:47:9c:e1:e1:
4a:f3:94:ed:13:7b:2c:4e:e3:ca:1d:e5:d9:d9:99:27:e2:fd:
a7:ba:cd:8c:5f:55:d4:58:8d:71:77:1c:48:02:14:cd:90:21:
b9:ae:ff:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 00:49:09 2026 by rpki-client