Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/oaCnhGMhdbVCFdLv5FOSrT3I9tQ.roa
File: oaCnhGMhdbVCFdLv5FOSrT3I9tQ.roa (raw, json)
Hash identifier: KkAhvipDUPcdct9NVtT6rFLK2Q9jqY4swc/w5BOh69w=
Subject key identifier: A1:A0:A7:84:63:21:75:B5:42:15:D2:EF:E4:53:92:AD:3D:C8:F6:D4
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01A060D92D1E6375F1CCB67432FC01FE75DF
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/oaCnhGMhdbVCFdLv5FOSrT3I9tQ.roa
Signing time: Wed 02 Sep 2026 06:40:40 +0000
ROA not before: Wed 02 Sep 2026 06:40:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 212.116.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:d9:2d:1e:63:75:f1:cc:b6:74:32:fc:01:fe:75:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Sep 2 06:40:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1a0a784632175b54215d2efe45392ad3dc8f6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:70:8c:d8:6c:71:1e:a4:31:1f:8c:26:0b:0c:
6a:ac:2b:f2:0c:27:1e:da:4b:38:dd:cd:a4:13:f0:
0a:a7:bb:c1:1f:c8:ad:d9:dc:a0:03:35:66:ec:a1:
ab:8c:df:57:48:34:6e:41:3b:23:68:79:c1:5b:2e:
3a:cf:8a:08:9c:94:58:3c:aa:4f:4c:1f:db:99:ba:
60:31:1c:3d:d7:7a:0f:8a:61:0a:0d:23:1e:3f:df:
52:bf:f7:1e:c2:c0:9c:1a:5f:6a:22:87:09:c5:7e:
7a:90:b4:20:3c:a7:97:de:8b:33:93:0b:4b:5c:ed:
d5:ae:1b:31:a4:62:54:b1:73:6d:bd:24:56:ec:44:
87:84:35:fc:37:05:73:8d:dc:64:b2:d2:80:80:57:
ab:62:ac:0c:19:e4:5d:d6:1c:63:be:88:5f:1a:4e:
ff:40:72:66:87:b5:0d:c6:4e:7a:dc:f7:47:93:43:
ef:b5:e7:5c:64:1f:09:ad:a5:af:00:77:f0:a9:99:
6b:38:8a:46:31:1e:70:67:99:a3:26:61:58:fb:5d:
24:32:19:40:a1:fc:a2:1b:b7:7f:7b:d8:4e:d9:49:
2a:bd:16:3f:a2:94:9b:d8:e7:ba:71:f8:1a:58:a5:
90:e8:07:22:39:e7:55:63:21:a2:37:36:ca:93:b3:
d7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A0:A7:84:63:21:75:B5:42:15:D2:EF:E4:53:92:AD:3D:C8:F6:D4
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/oaCnhGMhdbVCFdLv5FOSrT3I9tQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.243.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:08:6f:1b:42:4f:ab:fa:8b:bb:25:4f:cd:1f:b9:87:33:6c:
27:d9:d9:eb:d7:f9:2c:78:48:c8:fd:c2:c7:49:02:71:d4:b5:
98:3d:e1:3b:2c:7a:5b:81:cf:66:79:2d:95:2e:33:58:38:c5:
7c:44:4b:85:5e:6d:62:e0:64:16:de:49:1f:03:42:89:fd:dd:
f9:65:ef:f6:5f:9b:8f:9a:b4:81:cc:df:ea:76:26:37:06:58:
e9:72:91:eb:a4:61:7a:e6:d6:67:ad:be:9e:05:e8:b0:36:ba:
63:e5:73:fd:bc:7f:ab:ef:cd:13:76:10:bc:39:f0:53:ad:f0:
9d:68:7b:e2:43:b5:57:d1:02:d8:04:82:46:ea:b0:ba:cc:9f:
d2:42:66:00:37:9d:7c:4e:1e:dc:4f:61:a5:e6:06:00:17:d9:
75:88:6a:7a:2f:9e:06:65:da:c1:31:2f:53:96:60:c2:c2:65:
6e:fb:f9:7f:b6:fd:74:91:4e:c1:b8:17:b6:3a:bc:49:0c:db:
5b:04:0e:7d:86:92:c4:5c:39:08:c4:b6:cf:e1:1e:ce:93:98:
b4:f1:3e:cc:9a:2b:54:1a:f1:2d:ca:53:c1:8b:9c:b7:69:92:
d7:f9:24:d2:f0:94:b8:a9:31:fa:be:0f:96:b6:dc:a2:d1:71:
1a:be:50:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 05:37:23 2026 by rpki-client