Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/oe_EDtclx2PYOjjt6p14PQvkHVU.roa
File: oe_EDtclx2PYOjjt6p14PQvkHVU.roa (raw, json)
Hash identifier: f9S6PmhMujGIulF8NtJi4QGmujd3tw4Oh+5oXA+NYvE=
Subject key identifier: A1:EF:C4:0E:D7:25:C7:63:D8:3A:38:ED:EA:9D:78:3D:0B:E4:1D:55
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 01A13BBD71D4D9C3D6A7C9D4A1E719A292D0
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/oe_EDtclx2PYOjjt6p14PQvkHVU.roa
Signing time: Wed 14 Oct 2026 18:47:13 +0000
ROA not before: Wed 14 Oct 2026 18:47:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219100
IP address blocks: 2a14:1c40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:bd:71:d4:d9:c3:d6:a7:c9:d4:a1:e7:19:a2:92:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: Oct 14 18:47:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1efc40ed725c763d83a38edea9d783d0be41d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0a:ed:56:81:da:43:e3:9a:ce:ff:61:af:8b:
12:44:f2:77:2f:53:ce:30:51:44:fd:9c:38:1e:d1:
6b:f9:35:48:90:3c:44:1f:c7:58:67:28:a0:b9:8a:
a8:89:9f:89:13:75:59:87:18:e4:df:86:eb:34:d7:
4e:cb:fb:13:c0:ce:18:4b:c8:76:72:76:d4:e9:c9:
53:07:75:89:ae:c0:bb:a6:df:cd:b3:60:44:4b:a2:
80:91:ca:fd:5f:57:50:1c:ad:d8:37:e5:42:b1:16:
46:f6:59:d4:76:df:90:56:12:35:03:92:69:a5:bd:
9e:b5:a6:46:5b:fa:2b:d5:a1:00:aa:22:23:9b:54:
ea:16:50:51:9e:14:6f:69:0c:47:0e:c4:db:35:f9:
3c:7d:e5:63:25:33:b0:d3:43:cd:47:ba:b8:f4:e5:
75:2e:93:ae:b1:0a:ea:99:e1:81:26:c3:82:b2:cb:
e6:42:bb:d6:26:61:f0:83:c4:d1:08:87:d3:01:6c:
63:16:ce:ad:75:f2:a6:7f:3d:54:b6:0f:cc:14:9f:
70:49:7f:8f:2a:4b:29:1b:b0:3b:18:d1:b2:d3:12:
63:4b:c4:bd:65:41:95:33:a9:c7:41:0b:76:ea:b1:
a0:07:3f:96:10:7c:f4:40:ad:05:4f:06:a1:94:19:
26:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EF:C4:0E:D7:25:C7:63:D8:3A:38:ED:EA:9D:78:3D:0B:E4:1D:55
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/oe_EDtclx2PYOjjt6p14PQvkHVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
64:ec:be:92:be:8c:69:c9:cf:fb:98:87:62:ca:46:49:42:da:
f2:ee:1a:9c:ec:4b:80:35:16:9e:52:0d:06:fb:2a:ea:2b:a4:
9d:9e:32:f6:da:1b:20:a5:ce:97:f5:e2:78:6a:92:1e:3a:8f:
dd:05:22:20:98:6d:de:1b:49:9a:05:8e:c8:3e:37:28:ca:3e:
6b:27:c8:bc:06:16:ab:9f:f8:3f:86:1e:15:26:77:6b:18:6d:
e1:33:d1:09:0e:65:45:29:21:93:6a:b1:1c:2b:da:aa:66:a5:
28:d8:ee:c2:76:e2:dd:31:86:e8:e2:a5:f4:a7:43:a2:03:ef:
0f:3f:b2:db:77:16:b7:71:05:fd:95:ea:03:c3:97:0f:c0:65:
9b:ca:f7:a0:2b:49:28:ea:02:f7:78:26:fd:08:1c:00:96:b6:
ca:a1:f0:95:99:b2:18:5e:a9:48:4c:80:92:15:d8:4d:48:b0:
ae:b3:ed:9c:29:06:2d:59:0b:b3:21:2d:36:88:19:c1:52:92:
fe:cc:ee:58:0f:5f:1d:81:db:98:81:33:8b:fc:dc:36:8c:21:
1c:ec:fb:83:91:60:c7:82:d1:cf:87:8e:d7:d2:be:b1:e1:2a:
4f:5e:e7:ec:ac:4d:c8:2f:c4:8b:e5:ed:32:bf:8a:3b:d6:87:
82:24:1a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:48 2026 by rpki-client