Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/OjAkd5gWA-PrE1jjbKjjDCGQbL0.roa
File: OjAkd5gWA-PrE1jjbKjjDCGQbL0.roa (raw, json)
Hash identifier: UjXFuyxGXMb5vi+dVJLS9FN6QOdbO8WEYV6wnrmpcFk=
Subject key identifier: 3A:30:24:77:98:16:03:E3:EB:13:58:E3:6C:A8:E3:0C:21:90:6C:BD
Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial: 01A066CFBA88ADA8F21072E448DA6CF126FF
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/OjAkd5gWA-PrE1jjbKjjDCGQbL0.roa
Signing time: Thu 03 Sep 2026 10:28:04 +0000
ROA not before: Thu 03 Sep 2026 10:28:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 213.193.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:cf:ba:88:ad:a8:f2:10:72:e4:48:da:6c:f1:26:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Validity
Not Before: Sep 3 10:28:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a302477981603e3eb1358e36ca8e30c21906cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:b3:06:e2:12:76:40:fa:d8:b3:96:61:e3:
96:32:cf:3a:7d:f0:97:5d:a1:77:b4:e2:9e:a9:65:
58:93:42:83:dd:9f:72:6f:fa:45:3f:d0:0a:d1:b0:
1e:66:36:1a:b0:ec:17:08:64:53:c0:cd:e2:3a:52:
e5:d5:fe:71:0d:2c:b4:ba:0b:42:55:39:bc:71:fc:
9d:0c:eb:26:7e:32:79:91:49:fd:99:4b:6d:c9:41:
a6:05:4d:dd:ce:2c:23:d7:78:87:c2:6a:88:cd:f9:
74:8a:53:06:f0:b3:3f:00:73:75:5c:1c:00:22:db:
f7:b4:f4:e0:2d:e3:55:be:9e:98:da:c9:db:83:32:
36:de:2b:43:c4:60:71:dd:fa:e1:98:1d:27:95:7c:
65:92:98:5e:81:bc:ff:7f:91:58:e2:15:82:88:f6:
e7:7e:42:09:e6:5c:82:79:4d:73:8a:c1:d0:e6:de:
32:f5:6d:40:17:51:05:9f:0b:2f:90:01:64:cd:52:
ae:94:d6:c5:23:4e:bc:00:4d:d7:57:df:fc:f8:4f:
40:06:af:08:b7:fb:46:a3:74:a3:c9:de:ba:1d:23:
b3:52:53:85:e1:d5:dd:25:ae:11:da:9e:e1:e6:1d:
9d:b8:13:62:c0:02:ac:ae:00:2e:48:4f:80:86:91:
db:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:30:24:77:98:16:03:E3:EB:13:58:E3:6C:A8:E3:0C:21:90:6C:BD
X509v3 Authority Key Identifier:
keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/OjAkd5gWA-PrE1jjbKjjDCGQbL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.193.242.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ee:3d:62:01:fa:d1:fc:cd:22:6a:48:bb:a1:bd:68:1c:0d:
17:58:54:69:e3:ea:68:87:23:68:24:26:64:24:21:74:45:0a:
22:56:ef:69:f0:6a:a6:78:ab:b5:cc:ad:0e:a5:ca:8e:bf:0c:
5f:f4:49:4a:4f:c3:27:71:be:88:3b:7c:7f:61:25:cc:5d:fd:
1d:49:2b:9c:d6:8c:83:1c:02:8d:18:8f:9c:51:7d:b3:13:59:
e9:0c:8c:bb:13:ba:c8:4e:7d:8b:68:f6:bb:5a:dd:05:99:94:
22:69:86:d2:c5:d7:6a:b1:26:b4:9d:c1:3a:93:98:42:af:0f:
ef:e4:04:61:f0:90:3a:cd:60:3b:06:f2:35:46:09:be:b2:6a:
a2:0b:a2:12:e0:cf:04:49:cc:d3:fc:da:25:af:f1:d2:14:6a:
71:3f:7f:2b:68:2c:44:e5:ac:fd:5d:fd:36:1f:cf:79:a9:0b:
c1:cc:00:d0:93:79:8a:20:78:f9:b1:df:79:bd:d9:7e:24:8e:
c3:31:20:a2:0e:1e:d9:e7:ca:a9:c7:5b:ed:49:63:7a:5d:e7:
1e:c7:f7:1e:91:f0:0e:fd:4c:1e:ec:4f:06:1b:a5:40:9e:22:
bc:cd:b4:34:6e:eb:2c:29:cc:1b:22:19:53:56:f7:aa:94:94:
ea:8e:fe:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:21:36 2026 by rpki-client