Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/oVD_dVqY96Rae8qlPSjzu1nbP2A.roa
File: oVD_dVqY96Rae8qlPSjzu1nbP2A.roa (raw, json)
Hash identifier: hMwSc/t+zdpyL3GPyUyGW/FYHdZ8kxNPn94rYv1mr6s=
Subject key identifier: A1:50:FF:75:5A:98:F7:A4:5A:7B:CA:A5:3D:28:F3:BB:59:DB:3F:60
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A0E7B32DFDC7582EDC8243D7F658B4C353
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/oVD_dVqY96Rae8qlPSjzu1nbP2A.roa
Signing time: Mon 28 Sep 2026 11:07:54 +0000
ROA not before: Mon 28 Sep 2026 11:07:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44894
IP address blocks: 130.0.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:b3:2d:fd:c7:58:2e:dc:82:43:d7:f6:58:b4:c3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Sep 28 11:07:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a150ff755a98f7a45a7bcaa53d28f3bb59db3f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bf:49:96:a9:70:d1:f9:92:f9:36:0e:fe:8e:
fd:9d:3d:4d:68:d2:72:12:83:82:a9:e9:30:4f:08:
9f:40:99:17:ae:e2:e8:b9:91:15:c9:e0:00:35:03:
1c:48:43:52:f4:11:a3:ec:85:f1:94:1f:64:14:37:
84:8d:fe:0a:93:9d:4a:ef:67:37:4f:f4:12:3c:fa:
c6:a0:ec:1f:88:03:2b:f4:f6:c3:2f:a9:bc:58:b6:
59:a0:34:1b:0c:e6:43:f9:05:d5:08:b8:f2:e5:37:
d3:3e:2d:ff:ca:d5:1e:7b:10:7c:9c:2d:9c:6e:55:
db:73:3d:a9:2f:3d:77:7f:e8:43:bd:5f:4a:96:ef:
46:63:21:84:d8:71:08:16:b3:18:45:ae:00:88:14:
69:7f:7a:9c:6e:aa:64:4b:c3:12:4f:a4:36:3d:50:
9c:36:87:e4:1d:9e:2d:2d:d5:19:10:2b:35:2f:f0:
4e:8b:13:25:80:fd:c5:04:9e:db:ef:47:87:b3:1b:
3c:fe:2d:2f:6e:2b:be:03:c5:f5:f3:01:85:1b:b6:
98:d5:68:f4:f9:0f:45:db:1c:ff:0c:d9:31:88:91:
b9:06:0a:3f:ca:19:82:0c:2a:fa:2f:cb:f2:ff:76:
33:30:e8:d9:75:91:f1:df:f9:5d:63:b3:24:57:ff:
56:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:50:FF:75:5A:98:F7:A4:5A:7B:CA:A5:3D:28:F3:BB:59:DB:3F:60
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/oVD_dVqY96Rae8qlPSjzu1nbP2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.0.232.0/21
Signature Algorithm: sha256WithRSAEncryption
a8:f2:07:44:9b:35:37:04:2d:8c:44:07:75:9e:9b:64:d8:fe:
95:b0:91:2b:ac:0e:b6:11:41:e0:b5:45:65:9f:1d:9f:03:e8:
f3:62:45:c8:94:6c:8c:52:a7:5a:65:84:53:1a:eb:c1:b7:34:
bf:3e:32:03:0b:4f:2c:f3:06:c6:31:49:8e:63:61:1a:fc:97:
42:26:14:55:f1:6a:34:d8:67:ee:39:8b:31:20:1a:ed:25:87:
cf:ea:a1:76:da:f2:68:3a:ce:b0:e9:2f:0e:7f:cf:a3:d0:3b:
b2:aa:22:c4:f7:52:92:1d:ed:a7:0d:da:b8:09:f2:80:9b:03:
be:06:52:5d:1a:69:2c:ec:1d:df:a8:48:cb:fc:84:2b:0d:04:
aa:23:07:51:ec:db:82:a3:38:34:c5:70:91:70:ed:1c:6e:e9:
6c:5f:11:b0:6c:b2:bc:fa:ac:d9:61:33:7b:88:ff:5c:16:d1:
15:ca:0e:69:9e:4a:b9:44:11:a2:42:22:11:26:24:d6:2c:be:
da:25:0d:74:2e:c6:1c:7e:db:04:ce:14:64:f0:7c:27:87:f2:
c5:e6:5e:27:4b:4b:98:6b:04:25:3a:3b:4e:0b:1f:f5:0b:13:
97:cc:56:a3:16:4b:6d:1b:af:2a:ca:b3:0a:48:b3:a3:6a:f4:
72:e7:56:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:18:13 2026 by rpki-client