Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OzjLKL-loYBsW9tVAgL6poBRUvQ.roa
File: OzjLKL-loYBsW9tVAgL6poBRUvQ.roa (raw, json)
Hash identifier: zoNng2x/kXk6t/cpt+kEWdV/vl14H5f3hPXpNp7HGeU=
Subject key identifier: 3B:38:CB:28:BF:A5:A1:80:6C:5B:DB:55:02:02:FA:A6:80:51:52:F4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09A0BF625C446B7B4B2D06EDFB55623CB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OzjLKL-loYBsW9tVAgL6poBRUvQ.roa
Signing time: Sun 13 Sep 2026 09:14:29 +0000
ROA not before: Sun 13 Sep 2026 09:14:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58087
IP address blocks: 2a0e:97c0:3e3::/48 maxlen: 48
2a0e:97c0:711::/48 maxlen: 48
2a0e:97c0:712::/48 maxlen: 48
2a0e:97c0:713::/48 maxlen: 48
2a0e:97c0:714::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 09:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:0b:f6:25:c4:46:b7:b4:b2:d0:6e:df:b5:56:23:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 13 09:14:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b38cb28bfa5a1806c5bdb550202faa6805152f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:43:fa:11:f1:99:c6:d0:c9:56:37:35:0e:7e:
4a:e4:68:17:b5:d7:20:f0:f5:08:80:94:a1:ff:2b:
26:5f:44:67:23:4d:78:3a:04:e8:04:c0:af:f7:80:
99:26:da:ba:82:92:97:fc:28:1b:72:3c:94:f3:60:
53:dc:92:a6:74:be:b4:fd:d7:95:ae:e3:04:ad:dc:
4e:6a:06:0e:7d:60:00:c3:b5:e0:48:28:42:5c:de:
a5:18:15:af:67:ee:5f:25:53:e6:13:b3:f6:35:96:
17:9e:53:dd:ad:d1:a9:63:d3:b7:28:e6:ab:9a:70:
68:5e:c8:d9:5f:7e:54:21:61:02:45:73:18:1d:6b:
cf:92:c3:f7:db:86:2c:27:63:88:a0:63:c4:b5:28:
4e:23:e4:79:77:54:ba:dc:c3:87:36:1b:bb:1a:95:
9e:7c:48:5a:f0:43:bd:b5:de:b9:36:60:64:de:95:
59:7d:d0:b5:c3:24:0e:ae:60:e0:0b:9b:34:9f:4a:
96:b4:ce:0e:f5:58:e6:27:3c:30:b1:6f:aa:3b:99:
1a:43:d6:43:f3:c0:9f:dd:bb:4d:54:ee:2a:2e:05:
de:78:b9:29:2e:79:c4:0e:74:d3:b5:a0:5a:b3:d4:
70:76:16:0d:ff:46:50:d2:45:ff:89:72:d1:4a:ba:
ca:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:38:CB:28:BF:A5:A1:80:6C:5B:DB:55:02:02:FA:A6:80:51:52:F4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OzjLKL-loYBsW9tVAgL6poBRUvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3e3::/48
2a0e:97c0:711::-2a0e:97c0:714:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0e:33:90:ce:53:de:fd:ac:f4:ec:34:39:70:96:77:98:80:bc:
b6:79:02:fc:1c:97:9f:80:3d:24:49:d6:4b:b5:52:a1:b0:8a:
a5:dd:ac:53:5a:64:ed:80:94:89:0d:31:53:93:20:74:2c:34:
8d:0d:e7:38:54:97:8c:1a:4f:96:06:16:32:a4:f0:21:72:a0:
2d:69:18:9e:ab:6e:80:9a:b4:d6:f6:da:fb:5c:19:65:d3:9e:
93:5e:3d:b8:8f:7f:d1:a0:e1:67:21:9f:04:c2:1f:22:ea:92:
98:60:ca:9e:34:21:45:01:b9:0a:6e:82:fa:b8:46:50:34:d5:
18:3f:e4:fe:c1:ab:29:36:86:5b:44:48:58:e6:b8:ac:36:12:
06:c2:db:e9:76:16:31:91:2f:f0:c3:99:5a:88:8e:02:5f:57:
03:3f:34:78:0c:a1:5e:a2:8d:91:84:c0:22:d4:32:40:ac:f2:
fb:d0:78:67:f3:17:a9:ca:c2:f6:2a:ce:31:e2:61:e6:50:0e:
45:d4:79:8d:af:14:11:fa:6b:30:48:27:6f:13:5c:7e:cc:ae:
c0:e2:1c:77:bc:ed:61:5b:cc:4a:53:b2:5e:33:d4:66:d9:c7:
2c:3c:3f:60:6e:28:1c:39:b0:f0:b0:c5:49:40:30:57:0e:9a:
89:2c:44:11
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAaCaC/YlxEa3tLLQbt+1ViPLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwOTEzMDkxNDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjM4Y2IyOGJmYTVhMTgwNmM1YmRiNTUwMjAyZmFhNjgwNTE1MmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kP6EfGZxtDJVjc1Dn5K5GgXtdcg
8PUIgJSh/ysmX0RnI014OgToBMCv94CZJtq6gpKX/CgbcjyU82BT3JKmdL60/deV
ruMErdxOagYOfWAAw7XgSChCXN6lGBWvZ+5fJVPmE7P2NZYXnlPdrdGpY9O3KOar
mnBoXsjZX35UIWECRXMYHWvPksP324YsJ2OIoGPEtShOI+R5d1S63MOHNhu7GpWe
fEha8EO9td65NmBk3pVZfdC1wyQOrmDgC5s0n0qWtM4O9VjmJzwwsW+qO5kaQ9ZD
88Cf3btNVO4qLgXeeLkpLnnEDnTTtaBas9RwdhYN/0ZQ0kX/iXLRSrrK9wIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFDs4yyi/paGAbFvbVQIC+qaAUVL0MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvT3pqTEtMLWxvWUJzVzl0VkFnTDZwb0JSVXZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwcAKg6XwAPj
MBIDBwAqDpfABxEDBwAqDpfABxQwDQYJKoZIhvcNAQELBQADggEBAA4zkM5T3v2s
9Ow0OXCWd5iAvLZ5Avwcl5+APSRJ1ku1UqGwiqXdrFNaZO2AlIkNMVOTIHQsNI0N
5zhUl4waT5YGFjKk8CFyoC1pGJ6rboCatNb22vtcGWXTnpNePbiPf9Gg4WchnwTC
HyLqkphgyp40IUUBuQpugvq4RlA01Rg/5P7Bqyk2hltESFjmuKw2EgbC2+l2FjGR
L/DDmVqIjgJfVwM/NHgMoV6ijZGEwCLUMkCs8vvQeGfzF6nKwvYqzjHiYeZQDkXU
eY2vFBH6azBIJ28TXH7MrsDiHHe87WFbzEpTsl4z1GbZxyw8P2BuKBw5sPCwxUlA
MFcOmoksRBE=
-----END CERTIFICATE-----
Generated at Sun Sep 13 20:31:35 2026 by rpki-client