Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/OJgOARYMPxRB72yCPkk6JUbwQB8.roa
File: OJgOARYMPxRB72yCPkk6JUbwQB8.roa (raw, json)
Hash identifier: 3UwM7rZhqWCROq+sb6eb0MpPbxYHZiGojiOHooeJ2KU=
Subject key identifier: 38:98:0E:01:16:0C:3F:14:41:EF:6C:82:3E:49:3A:25:46:F0:40:1F
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 01A13BBB9E3BB9A180ABB8087DCF0119764F
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/OJgOARYMPxRB72yCPkk6JUbwQB8.roa
Signing time: Wed 14 Oct 2026 18:45:13 +0000
ROA not before: Wed 14 Oct 2026 18:45:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197210
IP address blocks: 2a14:1d40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:bb:9e:3b:b9:a1:80:ab:b8:08:7d:cf:01:19:76:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Oct 14 18:45:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38980e01160c3f1441ef6c823e493a2546f0401f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:9d:ff:b1:5d:07:b1:e6:eb:aa:08:6a:3c:
97:f5:14:0d:de:9f:9f:91:2c:cf:16:ee:24:55:32:
23:bb:70:f6:c8:00:14:9e:77:d3:99:f4:2b:d6:d1:
7b:53:56:9f:5f:26:02:79:5a:7a:24:5d:d9:a5:35:
89:3f:15:ca:59:54:b2:91:8f:6a:a8:b1:7c:0e:60:
29:dd:27:e6:0f:c2:61:bf:3c:a0:f5:28:b0:e8:f0:
23:86:7f:f8:e6:62:4d:f1:75:7e:c8:35:01:ab:e6:
f1:9c:de:c0:25:54:13:5b:a5:05:a9:ce:2c:e5:ff:
c5:ce:32:18:22:f9:b3:c4:aa:7b:ca:70:b4:73:45:
ea:26:60:97:e5:d9:1b:eb:46:59:e4:6f:f2:b9:25:
9b:4e:64:69:e5:a6:6c:ac:ec:c0:2d:fa:50:2f:11:
c1:d5:eb:8b:0a:b5:d4:b4:cf:ec:f8:da:ca:1a:74:
17:53:f0:8d:12:f6:0e:1f:1e:a0:74:a7:23:a4:be:
fa:5d:18:9b:bf:b3:69:b0:b3:0a:fd:8f:60:26:d8:
e0:7c:90:41:de:0a:77:f5:fd:b5:37:6d:b6:9a:c5:
db:3d:b2:3e:2c:57:07:44:1a:04:79:05:7c:19:89:
4d:14:ec:c6:89:0e:ec:3e:d8:48:04:cf:0a:85:a0:
ef:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:98:0E:01:16:0C:3F:14:41:EF:6C:82:3E:49:3A:25:46:F0:40:1F
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/OJgOARYMPxRB72yCPkk6JUbwQB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
36:cb:a0:09:48:88:d7:1e:0e:1f:49:43:81:56:ae:5f:c4:c2:
92:37:a1:cb:cc:44:ae:a8:39:f2:14:33:f0:2e:50:b3:b0:87:
b5:3e:a2:75:5e:46:31:5e:ce:ee:97:63:92:74:23:78:1e:04:
d0:cb:46:23:b4:c9:5a:77:9a:29:39:f1:4a:9c:dc:1c:a9:ac:
82:56:70:ae:8e:f5:ba:57:03:28:05:9a:e3:6e:f1:87:ee:59:
28:09:be:3b:a3:1e:33:5e:81:e3:e9:d7:a5:c6:1e:31:07:54:
2c:0a:8f:fe:7b:06:1d:ab:de:b5:82:2e:27:e8:2e:8f:7e:b5:
7c:7c:b8:98:d9:24:00:c3:f8:ae:9a:ab:be:03:80:c3:5a:93:
de:32:b3:f4:32:f3:f9:55:f3:bb:a1:d1:11:c7:18:2b:e3:6a:
bb:b1:20:3c:31:eb:fd:cc:31:50:2a:24:b6:da:92:89:72:87:
7c:a2:b6:4f:06:8e:1d:6a:83:67:9a:04:ac:f9:ae:7c:6b:1e:
79:34:d1:0d:67:ea:b6:a3:6a:ff:27:d6:2c:c0:78:9f:ab:9c:
ea:45:a9:4d:47:18:e7:bc:ec:16:a1:0b:77:fe:b5:bf:5e:89:
20:19:e0:c8:21:21:b1:5a:47:77:e8:ed:11:ef:5e:46:04:1a:
8c:58:cb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:48:14 2026 by rpki-client