Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/o_w_tt83Ip_Og6aDkqID9OkYI0Q.roa
File: o_w_tt83Ip_Og6aDkqID9OkYI0Q.roa (raw, json)
Hash identifier: tbC/lAu7gp5/nD60oWO521aRfIJ6J89imn/xlAkfLeQ=
Subject key identifier: A3:FC:3F:B6:DF:37:22:9F:CE:83:A6:83:92:A2:03:F4:E9:18:23:44
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019FD946A8DF4529395FB84050F068D4DA6C
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/o_w_tt83Ip_Og6aDkqID9OkYI0Q.roa
Signing time: Thu 06 Aug 2026 22:51:54 +0000
ROA not before: Thu 06 Aug 2026 22:51:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204115
IP address blocks: 62.106.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d9:46:a8:df:45:29:39:5f:b8:40:50:f0:68:d4:da:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 6 22:51:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3fc3fb6df37229fce83a68392a203f4e9182344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:cb:5c:d6:c0:7d:d0:53:d4:9f:6d:af:03:
98:e4:ac:16:18:72:76:2c:88:7a:5a:07:50:ea:d7:
6b:7b:62:17:dd:d2:72:dc:88:87:c1:78:38:4c:37:
64:53:7f:ff:ba:f1:24:ee:17:2f:9e:c1:d1:ad:8b:
5b:68:fc:bc:0e:f9:ed:6a:5c:cf:ea:96:18:6c:c2:
6f:ef:ac:75:28:07:21:7c:9c:84:31:29:aa:5f:64:
24:3a:d9:d7:4d:f8:d4:cb:7d:5d:3f:fd:a4:7b:59:
0b:67:86:2c:ae:a1:08:4f:48:c7:28:54:d6:e5:bb:
8c:3b:c6:ed:88:10:f2:d2:b4:b5:72:51:00:08:2f:
ff:0b:a5:46:ce:4e:e6:ff:81:bf:e1:fc:8d:c8:1d:
73:58:91:69:ec:a9:91:b2:a5:3c:b4:5a:50:65:fd:
5f:0f:94:b8:14:e2:aa:a5:94:13:5b:f3:ca:2d:57:
03:39:0a:55:5d:de:14:88:9d:13:f8:f5:db:02:12:
7c:f6:6f:c9:80:c4:fd:28:8d:0a:74:da:86:13:28:
e0:d0:56:22:8f:50:f2:9e:35:05:62:3e:5c:df:33:
c5:6b:21:03:be:0c:aa:62:2a:c6:75:31:e3:82:8b:
fa:15:1d:f8:4e:08:fc:d3:e1:f8:fe:4f:81:71:cf:
e4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FC:3F:B6:DF:37:22:9F:CE:83:A6:83:92:A2:03:F4:E9:18:23:44
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/o_w_tt83Ip_Og6aDkqID9OkYI0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.84.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:72:21:04:1e:a5:6e:3c:1d:8b:ad:65:39:ad:ac:7c:6e:7f:
74:1b:08:06:c5:bf:54:72:17:48:67:a2:80:2a:22:22:7b:97:
a7:9b:c7:b9:3d:7e:ef:fb:ce:31:dd:b9:3c:19:71:84:ff:0c:
49:1f:cf:76:00:73:e8:bd:6a:ec:aa:be:69:be:59:5e:1f:ae:
3a:5e:40:ec:29:1d:d3:40:da:46:1d:86:5b:24:9c:38:28:ae:
82:3e:95:f3:84:bc:6c:7f:56:3e:a1:8d:9d:7c:be:78:c5:0b:
54:1f:19:72:0c:3b:5a:8d:4e:02:80:8e:b9:63:76:f7:36:37:
20:1f:b3:cc:c4:e5:94:4d:5f:41:f4:a5:a7:85:f1:51:c0:c3:
e8:fd:77:08:04:d1:bd:ca:b2:1a:a4:26:b3:22:40:86:ca:33:
a6:33:31:86:3f:8c:fe:ff:33:99:55:73:3b:1b:fc:c5:50:15:
75:f7:14:ba:a4:67:4f:ea:00:fd:32:ae:63:5f:f7:35:32:ea:
d7:2e:65:7c:72:d9:df:a9:aa:9e:06:7f:ec:d4:58:55:9e:b5:
2b:57:1a:23:38:ff:77:b8:54:7f:92:7d:4a:d3:fb:3b:5b:03:
51:23:bb:87:69:79:f6:a5:43:50:2a:d8:00:ec:1d:ef:74:08:
cf:bc:c2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:44 2026 by rpki-client