Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/O4NMqZLOORFev6MNDuTBAV0i9i0.roa
File: O4NMqZLOORFev6MNDuTBAV0i9i0.roa (raw, json)
Hash identifier: yFb+imFb3YpJlSZCKwhYAdkCmVo6U4X0OVsZzrQhuYc=
Subject key identifier: 3B:83:4C:A9:92:CE:39:11:5E:BF:A3:0D:0E:E4:C1:01:5D:22:F6:2D
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 019F23683AE305CA6498619DAA371B0A0D0D
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/O4NMqZLOORFev6MNDuTBAV0i9i0.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212165
IP address blocks: 2a02:eb00:2::/48 maxlen: 48
2a11:f840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3a:e3:05:ca:64:98:61:9d:aa:37:1b:0a:0d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b834ca992ce39115ebfa30d0ee4c1015d22f62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0f:30:f3:a6:e6:cf:2f:4f:f0:29:0c:1c:0e:
ea:c1:e9:82:fc:69:e8:7e:f2:e9:36:be:7d:43:d2:
0f:3b:d8:66:0e:fe:a7:d7:ec:d3:09:10:3e:88:89:
58:3b:c2:33:ee:ab:e7:9c:79:71:82:76:0e:22:0b:
ff:08:06:83:33:0d:61:eb:24:e5:2c:b0:7f:db:e6:
3d:3e:0e:8d:22:b0:d4:e8:f6:2d:30:46:79:d8:4c:
c1:5a:09:3e:3c:db:d6:3e:14:fd:fa:dc:7b:7c:2f:
5e:ef:ad:39:42:fb:fd:5d:ec:30:0a:6d:4e:88:66:
69:11:0c:38:29:6f:b7:35:0c:c6:be:12:1c:dd:7e:
7a:61:e2:e1:80:a4:31:24:54:90:87:8a:97:2b:7d:
64:e2:52:54:5e:8f:56:f4:73:53:f9:c7:6b:9b:86:
ae:7a:28:06:45:6d:4d:5c:0f:b3:79:a0:e4:df:a0:
ad:2c:74:14:25:08:c1:6c:7d:8d:d3:ac:96:29:2f:
78:dc:da:2a:b3:67:6f:a2:6d:ee:d4:ed:94:79:d6:
e6:f2:d5:42:98:90:94:c5:eb:65:2d:2d:5e:41:a2:
ae:61:6f:70:bb:03:14:8c:85:25:0c:aa:5e:cf:be:
73:ae:f8:12:1c:7c:2a:5a:81:e5:d8:d5:ec:17:f7:
02:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:83:4C:A9:92:CE:39:11:5E:BF:A3:0D:0E:E4:C1:01:5D:22:F6:2D
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/O4NMqZLOORFev6MNDuTBAV0i9i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:eb00:2::/48
2a11:f840::/29
Signature Algorithm: sha256WithRSAEncryption
86:5e:90:9f:24:fe:43:b6:6c:ac:9f:19:fe:ab:20:7a:86:8f:
31:f8:21:4d:17:41:f2:b7:f0:02:a9:dc:ab:e7:25:2d:a4:70:
3a:2c:1e:3a:8d:4a:0a:d6:bc:07:ae:f0:13:7c:cc:ae:0f:10:
62:6d:f2:65:a7:81:81:e2:a1:ab:25:d7:9c:e4:ba:c3:fd:05:
4e:9a:2e:e2:d1:97:95:ed:dd:27:70:7f:1a:ef:7d:6b:e6:73:
b8:56:d2:72:f7:ae:16:ec:ba:a4:84:1a:76:d5:4c:82:15:4b:
36:a5:1f:8d:57:99:3a:e8:0a:df:75:af:0c:ed:9b:53:72:fd:
a3:eb:5d:ea:90:5d:c3:48:ec:bf:f3:c5:d4:11:57:34:23:76:
3c:41:0e:ba:e7:ae:2c:c5:51:b0:69:4b:18:28:60:64:f0:cb:
1f:83:7c:72:7c:e1:6e:cf:18:0f:3f:b6:c0:58:71:7a:99:ac:
25:57:87:90:0c:41:4e:b7:84:14:33:2a:6f:77:38:3d:1b:a2:
01:32:a0:b7:3b:74:d3:2a:82:8b:6e:29:bb:cd:db:3a:21:59:
c4:b6:92:40:03:23:4c:3e:44:cd:46:b9:da:79:10:7d:27:60:
96:74:4d:26:18:7b:14:79:ae:36:ea:e5:dd:3f:51:e7:a8:20:
3b:a2:08:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:05:27 2026 by rpki-client