Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/obcRivu1HhvfNKCkOhw7LiU240o.roa
File: obcRivu1HhvfNKCkOhw7LiU240o.roa (raw, json)
Hash identifier: nv7GGc79nMAv6p/WulvBkefiC5b6qKMqvGIDQeKSTOk=
Subject key identifier: A1:B7:11:8A:FB:B5:1E:1B:DF:34:A0:A4:3A:1C:3B:2E:25:36:E3:4A
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 01A13BBB9E9387F0908C9D04A99CBD1DD772
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/obcRivu1HhvfNKCkOhw7LiU240o.roa
Signing time: Wed 14 Oct 2026 18:45:13 +0000
ROA not before: Wed 14 Oct 2026 18:45:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219100
IP address blocks: 2a14:1d40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:bb:9e:93:87:f0:90:8c:9d:04:a9:9c:bd:1d:d7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Oct 14 18:45:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1b7118afbb51e1bdf34a0a43a1c3b2e2536e34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:dd:d1:1f:3e:6f:e7:76:bc:3f:e4:41:a6:
db:90:33:3e:48:29:7a:29:06:1b:a7:0a:a2:61:23:
3d:34:b3:90:2f:d8:28:69:23:d9:a9:1f:75:b5:70:
4d:fa:96:50:dd:0f:67:d8:fd:71:07:3c:ae:52:bc:
bb:1e:69:c6:ef:ef:72:81:c4:69:c0:b6:14:ad:34:
40:2e:5e:cb:3a:c4:b5:22:9c:a5:51:ac:59:05:8a:
f4:53:3d:2f:0d:75:db:88:84:34:94:49:51:1b:10:
67:32:b6:53:00:81:e2:6d:e5:4f:47:89:3c:07:92:
21:fb:08:f0:91:e4:71:ef:e8:b2:e4:6a:4f:fb:d4:
01:45:c9:47:2f:58:56:d9:b6:86:09:52:52:90:ac:
e8:32:25:94:19:cd:3d:3d:9e:d7:90:3b:54:2b:49:
40:ce:52:7f:bd:38:da:52:c7:34:45:ca:4a:23:0a:
a0:8f:d5:c4:c8:4a:39:3e:0f:d5:5f:88:f7:bf:5e:
27:e3:3e:b8:c7:3b:46:a5:ff:82:18:bc:af:99:ae:
dc:c8:b2:ac:1b:6f:7a:80:b7:ae:bb:af:7c:70:f7:
dc:16:ea:c8:cf:03:81:62:51:b7:62:0b:d9:03:df:
77:1e:ee:08:85:f2:56:4f:7d:7d:a7:48:ba:33:3d:
99:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B7:11:8A:FB:B5:1E:1B:DF:34:A0:A4:3A:1C:3B:2E:25:36:E3:4A
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/obcRivu1HhvfNKCkOhw7LiU240o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
6b:2f:81:13:f5:87:69:22:a8:f0:4f:cf:2b:66:46:9b:2f:4e:
c1:34:e9:b5:0b:76:45:1d:a0:63:cf:69:31:43:99:54:98:8a:
b6:49:c4:53:52:2f:b4:cf:e9:01:3c:e1:64:a2:61:fd:0e:2d:
d4:41:52:3b:21:df:22:10:90:a0:68:75:22:0f:0c:b2:03:96:
c0:c3:5b:49:f4:82:32:bb:2c:d4:cc:38:09:87:98:ee:ae:e8:
68:48:ca:e3:b9:89:f3:a7:c5:a1:14:6e:89:ed:12:11:e5:d1:
a6:5c:a3:e0:d8:ea:7d:e2:e7:ef:8d:cd:7c:85:cc:cc:65:72:
73:aa:dd:f8:37:10:ab:72:64:77:c5:0c:cb:4a:de:12:dc:3d:
3b:23:70:21:ad:e9:2f:7f:b6:96:72:56:83:a4:8a:f3:e9:24:
3a:ce:f9:d5:d8:f7:47:97:88:51:fa:0f:4f:31:67:cf:e5:bb:
0f:4e:78:e4:2c:54:87:e3:69:fa:79:3a:20:ef:93:9b:b3:7a:
92:0e:e3:04:e7:c7:e4:40:fe:b3:b6:1b:fa:b3:d8:f6:9d:f5:
f5:47:86:ef:f9:09:48:bd:3d:04:c3:8a:29:a0:a1:dd:72:77:
11:62:d9:8a:73:5e:ee:89:ec:4d:ca:d2:af:51:e1:14:70:17:
32:3c:9b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:58:47 2026 by rpki-client