Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/Olv6LJNY9--jk7Z4zsGLgF8cOqQ.roa
File: Olv6LJNY9--jk7Z4zsGLgF8cOqQ.roa (raw, json)
Hash identifier: Y+xcg8pb9fawoZIv9oQkXj/C2Ip7behg0aES9y4Lr60=
Subject key identifier: 3A:5B:FA:2C:93:58:F7:EF:A3:93:B6:78:CE:C1:8B:80:5F:1C:3A:A4
Certificate issuer: /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
Certificate serial: 019DF865C5C1BA1451C7AD55E975B860A2C0
Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/Olv6LJNY9--jk7Z4zsGLgF8cOqQ.roa
Signing time: Tue 05 May 2026 13:48:32 +0000
ROA not before: Tue 05 May 2026 13:48:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210546
IP address blocks: 213.165.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:65:c5:c1:ba:14:51:c7:ad:55:e9:75:b8:60:a2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
Validity
Not Before: May 5 13:48:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a5bfa2c9358f7efa393b678cec18b805f1c3aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c5:10:db:59:0a:c6:70:53:7f:9f:2a:3d:4c:
7a:f1:0e:96:e9:e8:ac:2a:24:61:50:4b:e7:56:b2:
17:14:0c:a0:88:22:fd:1b:7c:84:05:6e:67:75:c9:
44:dd:1f:fb:ed:4c:d6:b5:20:8e:79:54:14:f5:45:
f5:ae:d0:08:38:e1:3b:87:02:0c:dd:96:1d:4b:10:
4c:d9:cf:52:91:0b:2a:fe:83:0d:35:e0:a3:87:60:
f4:10:6d:61:06:6c:3f:46:25:10:b3:b4:6f:6e:61:
4d:3b:2b:b7:d1:ab:6e:6e:58:1d:20:cf:87:eb:3d:
03:ec:e6:0f:85:5b:65:c0:57:1f:90:93:3f:7b:1a:
44:a3:e3:7f:37:1b:d7:9d:04:3f:8e:82:54:5d:f4:
a9:46:7f:18:a3:22:b1:83:b3:2c:54:2c:94:db:32:
07:72:bd:fc:b4:79:22:b6:10:0c:b3:d0:54:98:ab:
4c:e1:30:03:fc:7d:01:9e:d4:8a:ee:d6:22:6c:4f:
57:8b:bc:d9:8b:57:6a:81:b8:06:2c:76:6b:c3:e9:
21:9b:cc:d7:aa:66:c5:6a:13:67:52:59:0d:27:e0:
2f:93:69:14:31:a0:0a:86:d9:45:6f:4f:95:81:e8:
c8:a4:ac:57:33:a7:25:b4:ba:8c:66:b2:db:48:b4:
39:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5B:FA:2C:93:58:F7:EF:A3:93:B6:78:CE:C1:8B:80:5F:1C:3A:A4
X509v3 Authority Key Identifier:
keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/Olv6LJNY9--jk7Z4zsGLgF8cOqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.165.52.0/24
Signature Algorithm: sha256WithRSAEncryption
00:5b:4c:50:3d:7c:ec:2e:86:8c:fc:68:d3:5f:89:b5:a6:bc:
2b:f1:35:19:4a:c5:80:b3:55:02:f7:16:32:f9:54:47:02:3d:
05:89:27:9c:5c:8a:7d:04:4f:4d:cb:94:fc:47:1d:c2:f1:35:
5f:b9:cb:56:fd:80:37:d1:5a:92:0f:bc:01:54:89:2f:d7:bb:
2a:eb:63:a6:13:7a:ff:1b:6b:91:3c:aa:f8:f2:2f:07:4d:1b:
7c:5e:91:f0:b0:de:1a:8a:ab:13:f4:84:4d:23:00:a4:8f:79:
ac:d5:15:a5:39:11:54:5c:aa:1c:62:9b:2d:cb:c9:fd:b6:5a:
41:a1:c7:21:b8:0a:cf:cf:c1:5a:4c:70:05:da:84:9b:f5:38:
ee:5f:44:2f:04:6f:39:d3:30:d1:60:86:78:7a:ef:c4:a5:7d:
a1:2d:89:f5:52:3b:be:de:32:3a:65:64:aa:b8:05:e2:fc:00:
16:79:a3:4e:a4:4c:f1:9a:d4:d0:57:fa:79:e4:5f:06:64:b5:
6f:22:98:3a:fc:df:ef:03:9a:5d:ad:4b:77:de:30:fe:98:61:
cf:22:20:93:ed:32:fc:8f:ce:66:b3:4f:d9:e4:d0:04:27:6d:
20:f4:85:57:ea:62:c0:a7:54:af:8a:88:76:4b:7c:6f:6a:d0:
d6:69:1b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 21:21:08 2026 by rpki-client