Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/Ohc6TMrfIiPJ4ErWPA9teiL8Bxg.roa
File: Ohc6TMrfIiPJ4ErWPA9teiL8Bxg.roa (raw, json)
Hash identifier: ZmsiFeokh9Efn9q+oOnIlyEHBkq+kGV8l2AeZdXM848=
Subject key identifier: 3A:17:3A:4C:CA:DF:22:23:C9:E0:4A:D6:3C:0F:6D:7A:22:FC:07:18
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A125E4D2C4416653F6E5D3CDAD42DB4F12
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/Ohc6TMrfIiPJ4ErWPA9teiL8Bxg.roa
Signing time: Sat 10 Oct 2026 12:58:35 +0000
ROA not before: Sat 10 Oct 2026 12:58:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219378
IP address blocks: 2a0e:4005:ff00::/40 maxlen: 48
2a0e:4005:ff10::/48 maxlen: 48
2a0e:4005:ff20::/48 maxlen: 48
2a0e:4005:ffdd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 09:20:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:e4:d2:c4:41:66:53:f6:e5:d3:cd:ad:42:db:4f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Oct 10 12:58:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a173a4ccadf2223c9e04ad63c0f6d7a22fc0718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9b:56:4d:5c:56:b0:c6:53:c1:20:9d:f4:e5:
c9:80:47:09:d9:66:70:c7:3a:9d:e1:c7:50:d4:10:
fa:bf:48:33:59:d6:7b:d0:8f:91:e9:d3:c6:c8:49:
e0:51:1c:61:b6:49:dc:f3:50:b8:4e:3d:5f:94:33:
65:b1:ef:2d:64:a1:f5:90:4c:bf:98:c0:71:22:22:
8b:68:67:93:68:ef:38:1a:95:77:a8:6d:8a:db:94:
aa:1f:ea:c8:43:a9:a0:53:1d:a0:05:75:87:71:65:
4f:44:58:01:bd:ca:29:8e:c0:93:6a:12:bc:13:e0:
c4:f9:3d:02:a8:2d:cc:17:a1:08:e9:bf:8c:1b:1b:
56:10:df:d4:7a:e9:dc:2c:f2:c7:2a:de:47:55:2d:
e7:2a:69:f1:a3:55:47:af:50:9f:cf:fa:c1:84:87:
38:5d:5e:12:ae:cb:46:e1:97:d8:5e:2d:92:7b:8d:
70:c3:50:67:4e:58:5c:dc:57:bd:c8:fa:b5:00:31:
5a:28:64:90:1f:a4:8f:1d:e9:07:75:99:51:fb:33:
63:76:43:6f:51:4e:62:e4:f2:f3:c8:67:53:c8:4f:
ca:4b:aa:48:d6:76:6e:4a:fe:19:20:41:7e:e9:c8:
ea:fb:0c:a5:18:8b:72:d7:4c:16:8e:3c:82:22:6e:
5f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:17:3A:4C:CA:DF:22:23:C9:E0:4A:D6:3C:0F:6D:7A:22:FC:07:18
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/Ohc6TMrfIiPJ4ErWPA9teiL8Bxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4005:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
d3:34:1c:56:12:ee:8b:96:ee:dd:0f:71:3e:b7:bc:27:45:8b:
0b:74:c9:c0:d1:89:53:60:68:9d:7b:d7:fa:68:48:4e:4a:56:
8f:22:ed:15:5c:84:ec:b0:7a:ab:6d:11:b6:41:df:59:02:c4:
5e:c0:ae:e9:07:80:70:d5:3c:2a:32:56:68:40:5d:2f:15:81:
0e:c5:fe:7b:33:8f:a3:53:0a:7c:24:28:90:68:56:77:73:70:
46:2f:56:d7:72:4d:ac:b2:eb:81:12:7f:f7:82:4d:15:fe:a1:
8c:d5:82:e6:94:9f:23:3a:e0:bf:d9:fa:7e:66:c9:17:49:0b:
ee:b3:4c:c4:55:94:5d:d7:28:b3:ce:0f:b9:73:42:02:ac:4b:
dc:34:48:07:4a:db:56:75:ea:84:19:1a:9e:44:63:10:a9:9b:
71:a5:16:65:65:11:11:ca:f4:4c:29:23:b1:1f:78:48:70:5a:
73:ab:42:9f:b6:13:3c:19:5c:75:7e:85:0b:88:24:bb:91:eb:
4d:c0:65:8e:af:95:98:9e:3c:5c:f5:68:6a:5c:93:45:37:7d:
51:b6:64:91:c1:47:0b:a5:6b:71:81:68:5f:c0:fd:c9:df:c9:
97:6b:05:4a:81:92:0e:13:24:8a:7e:c7:91:7b:e0:3d:03:cd:
1b:80:1e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:11:29 2026 by rpki-client