Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/OZ-RXTTuxUAZHXAQvfCRlSHfDls.roa
File: OZ-RXTTuxUAZHXAQvfCRlSHfDls.roa (raw, json)
Hash identifier: q3FsGRRoSszpgPnahLLjPcw5cRLh2L/kGpLzq6kCjGc=
Subject key identifier: 39:9F:91:5D:34:EE:C5:40:19:1D:70:10:BD:F0:91:95:21:DF:0E:5B
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368F310B6252084A198A9F94356CFBC
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/OZ-RXTTuxUAZHXAQvfCRlSHfDls.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15398
IP address blocks: 2001:918:ff5d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f3:10:b6:25:20:84:a1:98:a9:f9:43:56:cf:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=399f915d34eec540191d7010bdf0919521df0e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:8a:11:80:62:7c:5f:7a:ea:26:eb:1a:cc:
77:97:b7:f1:1a:07:64:6c:d2:59:d9:9b:c0:12:9c:
c5:43:d7:cf:bf:f0:eb:74:1d:b6:e3:e5:24:ae:ed:
57:80:2a:a6:e8:3d:b0:56:4d:89:72:6b:73:bf:1e:
8a:d1:c6:e8:49:96:d8:be:76:81:68:9c:c2:38:2d:
34:72:c2:fd:91:ca:58:42:b8:a7:6b:b3:ed:0f:4c:
bb:a3:26:cd:de:7a:75:63:ee:81:cd:6c:8f:02:ff:
08:20:28:2c:5b:51:64:47:44:63:91:5f:ea:a3:db:
6a:f6:41:bf:25:c7:1e:6a:1a:a0:5f:97:a1:1a:72:
af:16:10:9b:9f:8e:83:b5:7c:17:1b:55:e7:5d:ec:
20:88:dc:bf:67:b9:a5:70:49:23:2f:61:35:77:b4:
eb:1a:0f:48:3e:0f:e5:a0:18:63:53:7d:c0:b9:b5:
a7:3d:ca:f7:d4:3f:a4:a7:e5:13:a4:c1:c2:41:eb:
19:e0:94:62:1c:32:7f:3d:41:f7:44:6e:ac:74:83:
f7:3a:32:a0:e2:e2:46:ee:c5:7c:20:1c:8c:53:e5:
43:c4:35:89:4e:02:7d:c6:6c:2b:67:63:f1:84:1f:
51:eb:49:37:11:6f:44:c5:b5:fc:c3:70:4f:b5:33:
53:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9F:91:5D:34:EE:C5:40:19:1D:70:10:BD:F0:91:95:21:DF:0E:5B
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/OZ-RXTTuxUAZHXAQvfCRlSHfDls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:918:ff5d::/48
Signature Algorithm: sha256WithRSAEncryption
06:d7:48:a1:10:10:44:e1:5a:a6:1e:8a:c9:fa:87:46:0c:67:
29:28:d0:d1:d5:c8:86:23:89:28:da:84:75:10:91:72:ce:c7:
5d:80:70:b3:d8:de:95:5b:85:f8:ee:09:6a:0a:8e:43:3e:a1:
16:12:59:22:29:3b:6a:79:7b:0b:a8:e3:ca:c4:5f:d7:38:80:
c2:27:78:2a:a5:f3:3c:63:c9:00:68:32:37:d7:24:2a:d4:fb:
8c:83:c7:16:f1:f1:cd:6d:f3:3b:97:5d:5b:6e:c9:3f:5c:d7:
f9:87:7e:94:80:96:5f:bd:fa:f9:9b:fd:98:00:f2:79:9d:5e:
58:49:7a:78:88:05:96:ca:51:f6:44:00:b8:e6:ac:67:1a:26:
bb:a4:b4:1f:64:2f:e1:5d:63:b3:b0:d8:fc:79:e2:92:51:6e:
90:c4:74:b2:1b:7a:85:4a:9e:f9:5f:68:ba:91:11:f8:43:55:
2e:fc:8f:e8:06:75:e9:83:d8:2e:a9:cc:90:ad:ca:5b:1b:49:
0e:21:29:a1:ab:69:d8:c8:64:fb:81:5c:f3:e1:cb:84:99:b2:
d6:1b:ab:ee:3d:fb:f8:19:91:01:b8:be:50:e2:a7:e1:ee:1e:
4f:b6:d3:e8:71:85:cd:1d:09:fd:3c:bf:cc:59:15:b9:bb:28:
b5:e0:6f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:52:42 2026 by rpki-client