Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/OUtPfO239eOKAL1v2OICjdSsREk.roa
File: OUtPfO239eOKAL1v2OICjdSsREk.roa (raw, json)
Hash identifier: nR3PAe9dwLBCz7xkPvJq6dqBcgiVtx1BvYVmAbmR0PA=
Subject key identifier: 39:4B:4F:7C:ED:B7:F5:E3:8A:00:BD:6F:D8:E2:02:8D:D4:AC:44:49
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 019E26C2BCD00EDEF050D07A0DAD332D0101
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/OUtPfO239eOKAL1v2OICjdSsREk.roa
Signing time: Thu 14 May 2026 13:52:36 +0000
ROA not before: Thu 14 May 2026 13:52:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 109.111.34.0/23 maxlen: 24
109.111.48.0/20 maxlen: 20
109.111.50.0/23 maxlen: 24
109.111.54.0/23 maxlen: 24
109.111.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:26:c2:bc:d0:0e:de:f0:50:d0:7a:0d:ad:33:2d:01:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: May 14 13:52:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=394b4f7cedb7f5e38a00bd6fd8e2028dd4ac4449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:c5:7f:52:c2:9f:a4:b2:41:fc:b5:64:71:
75:46:f8:ab:07:7f:fa:f6:c3:c7:e0:19:8f:c5:10:
0b:48:e5:54:33:7e:7c:68:d6:f3:c7:b5:c6:8b:bf:
43:62:60:94:9a:fb:63:7e:f7:ac:c3:5c:40:2d:37:
cf:8f:50:0d:b8:85:7b:c8:21:b4:1a:5d:ab:f5:e7:
06:b7:f3:3c:ce:f1:54:58:2c:01:c5:1b:06:e6:3d:
e4:63:90:a7:56:95:5a:6f:43:2d:b6:28:d4:ef:c4:
23:3b:4d:2e:c8:b0:52:30:07:c8:6c:fb:e3:11:a9:
93:8d:51:d4:97:86:93:86:f2:15:7e:4f:e9:12:ba:
6d:f8:e2:3a:17:fb:4d:95:a5:6f:0b:44:4e:fc:4d:
a0:a2:9f:7c:bf:c1:fd:2e:6c:a5:e8:a2:21:3e:5d:
f0:be:64:8b:f8:d9:f1:65:6f:6c:57:98:4c:73:86:
c0:25:97:ed:10:7e:84:68:8c:35:ef:80:d1:3d:4c:
a7:b1:5f:83:8d:7a:75:9f:e6:2d:03:60:f8:14:cc:
68:08:33:35:f2:5c:c4:0a:01:a5:bf:5c:b8:3d:f7:
07:12:a0:19:3b:39:ee:e9:f8:7f:0c:be:0e:43:ce:
0a:4b:67:14:2b:48:4b:e7:08:a4:16:05:d2:74:58:
0a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4B:4F:7C:ED:B7:F5:E3:8A:00:BD:6F:D8:E2:02:8D:D4:AC:44:49
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/OUtPfO239eOKAL1v2OICjdSsREk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.34.0/23
109.111.48.0/20
Signature Algorithm: sha256WithRSAEncryption
19:95:8e:0a:29:36:74:f5:09:ea:47:cb:c0:dd:23:bc:e0:94:
11:7a:a7:ab:c5:5b:16:9b:e1:ce:27:e4:92:77:8d:61:1e:e2:
94:b1:c1:ac:6f:ae:59:5b:9f:61:d1:13:76:b0:26:1e:fc:fe:
e8:90:32:73:6b:3e:4e:2e:6e:ae:43:b7:00:a9:58:a7:30:f8:
93:ca:14:f4:85:68:b0:32:fe:9e:d1:50:10:d9:0a:9a:3d:5e:
13:47:7c:44:69:ee:05:6c:30:e9:65:cb:83:e4:ac:13:4a:65:
5b:19:8e:7e:1a:03:d2:63:a0:02:a3:f5:a8:3c:80:74:02:2a:
ad:9e:82:d9:f7:5c:35:73:68:09:e4:25:00:7c:a3:42:ed:af:
45:0c:14:25:47:fe:c8:12:fc:e4:95:f5:23:36:89:09:83:8e:
e6:37:e9:64:9d:54:39:74:53:0b:a4:71:7b:74:7a:93:ec:46:
6b:4d:6b:b3:93:9f:12:65:3b:6e:0f:4a:d1:08:07:f4:3d:a4:
43:56:de:8d:9f:7d:23:ed:66:9c:9f:0c:94:01:3c:17:dc:6f:
31:96:c0:ee:79:9e:4a:a1:95:8f:37:30:52:71:21:9b:6e:31:
91:ad:10:b7:3b:85:11:74:3d:f6:3f:bd:b0:eb:60:46:ac:38:
e0:49:75:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 08:17:31 2026 by rpki-client