Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/fgoOHYnJmSjYSEonOQESsO60k78.roa
File: fgoOHYnJmSjYSEonOQESsO60k78.roa (raw, json)
Hash identifier: OvXkWdN1JqShIZQixEbLbSnoo1cDvxwCI9lguHaXQA4=
Subject key identifier: 7E:0A:0E:1D:89:C9:99:28:D8:48:4A:27:39:01:12:B0:EE:B4:93:BF
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 01A038883DE9D52937B3DE4DBC17999DDFDB
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/fgoOHYnJmSjYSEonOQESsO60k78.roa
Signing time: Tue 25 Aug 2026 10:47:27 +0000
ROA not before: Tue 25 Aug 2026 10:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23470
IP address blocks: 2a12:a800:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:88:3d:e9:d5:29:37:b3:de:4d:bc:17:99:9d:df:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: Aug 25 10:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e0a0e1d89c99928d8484a27390112b0eeb493bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:80:37:a3:d5:7f:40:fa:cb:57:64:c4:b8:
0f:22:f6:28:ab:df:73:be:0e:97:21:5d:a1:fa:bd:
f9:a6:ff:0b:e5:d4:8e:cb:a6:6d:47:d6:92:5f:d0:
a6:95:94:fe:1c:05:cc:05:1a:75:38:ee:45:08:aa:
ec:49:72:7a:90:a3:17:98:37:4e:e9:ec:c8:8a:06:
29:3b:74:ce:cc:f6:0b:98:ee:b7:94:f2:d9:90:91:
3e:e6:fa:18:ca:62:f0:40:be:00:dc:47:e3:62:33:
f3:fe:97:6f:0d:02:a3:46:28:97:8d:bd:3e:2e:07:
df:3a:eb:ae:66:53:17:ff:cc:ce:dc:90:b0:c0:41:
a9:ad:bd:f2:80:8e:4d:1d:5f:ce:aa:08:68:36:d3:
65:07:5a:1b:70:1e:54:9d:1e:0f:73:1a:13:6c:14:
85:eb:70:e9:5b:e8:de:ea:d5:60:6a:98:4f:ca:6b:
21:3d:4d:4e:42:db:cd:9c:66:1a:55:4f:f0:8a:3f:
ee:45:76:3d:c3:ef:be:dd:e6:c7:49:83:b7:26:91:
b8:a8:0a:0b:39:90:33:be:f4:ef:cc:59:54:73:4c:
ff:65:b7:b9:b5:7e:a6:12:b9:c4:87:fa:b7:66:11:
78:86:41:4f:77:9b:1c:b0:f1:27:bf:cd:c6:b5:0b:
78:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0A:0E:1D:89:C9:99:28:D8:48:4A:27:39:01:12:B0:EE:B4:93:BF
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/fgoOHYnJmSjYSEonOQESsO60k78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a800:9::/48
Signature Algorithm: sha256WithRSAEncryption
0b:77:b2:2d:52:03:72:c4:23:c6:70:08:d0:e9:4c:4d:d8:9c:
46:77:8e:dd:ae:58:a5:f6:ad:d9:c7:bf:e1:d6:98:ae:46:ac:
db:fa:5b:2a:ce:fd:2e:08:f8:0d:c5:2f:d5:7a:d8:85:61:f7:
ce:f2:04:d4:11:56:bb:38:a3:3c:37:f5:82:81:a9:00:e8:11:
23:62:ee:d3:fb:f7:36:14:f7:f6:c6:1b:5c:40:bd:ad:5a:62:
8f:18:cc:86:de:75:93:66:72:8e:48:5f:4d:37:d8:f9:eb:fc:
f9:13:03:51:f4:0d:8c:05:32:74:5d:f7:5a:0b:e1:ca:03:d7:
00:56:0f:a1:ba:27:08:45:dc:22:2e:a3:c3:e9:c9:82:0b:c1:
f9:01:a2:13:dd:cb:f8:66:5e:f4:80:b7:2f:ef:ac:2c:80:34:
f6:4c:af:36:89:ee:e8:3f:ea:12:88:cb:18:f6:bb:e1:7a:04:
3e:e2:ab:1a:85:7d:fe:45:f5:7b:5c:8c:ed:ef:62:b8:f7:aa:
72:83:1b:2a:b5:77:b1:ee:ca:cc:6c:9d:6b:ba:ec:bb:69:23:
ca:03:ba:79:93:fc:3d:90:1c:8c:a9:56:7f:b8:93:98:7f:c2:
d3:82:68:e0:cd:be:eb:34:c8:3a:33:1a:25:e2:48:55:ad:15:
cf:35:3e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:04:30 2026 by rpki-client