Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oHw4lkHo0PksnaEWuj66QoS-7z4.roa
File: oHw4lkHo0PksnaEWuj66QoS-7z4.roa (raw, json)
Hash identifier: 7QsR5jZYddn0+tWciMSuc9wvQ4cPLJvnt1Osn/zxcj0=
Subject key identifier: A0:7C:38:96:41:E8:D0:F9:2C:9D:A1:16:BA:3E:BA:42:84:BE:EF:3E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09A0BF82C9A4AAE99E14ACA478B4A8271
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oHw4lkHo0PksnaEWuj66QoS-7z4.roa
Signing time: Sun 13 Sep 2026 09:14:30 +0000
ROA not before: Sun 13 Sep 2026 09:14:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142130
IP address blocks: 2a0e:b107:1204::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:0b:f8:2c:9a:4a:ae:99:e1:4a:ca:47:8b:4a:82:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 13 09:14:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a07c389641e8d0f92c9da116ba3eba4284beef3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:05:82:e1:b7:f7:bc:b3:5d:4e:d7:ce:82:
9c:6c:a5:f8:71:e0:c7:f2:63:7b:8d:e2:8e:c9:a9:
b9:e9:df:58:70:ca:b8:2b:49:59:f0:e0:61:73:28:
5b:a7:37:d2:26:cf:ba:7a:63:7c:40:b7:93:73:11:
d3:b0:b7:11:d0:d9:af:db:06:5f:9c:7a:2f:f0:a9:
0c:56:52:ce:e5:b4:df:e8:db:fd:5c:ec:4d:09:eb:
9d:15:d6:37:cd:96:f8:45:5a:5e:7d:ae:64:93:4e:
5a:2e:53:07:4b:fa:c4:74:9d:a6:1a:8e:b8:96:4b:
ac:07:71:a0:98:74:a7:06:3d:de:e7:3f:89:1a:8c:
8b:0a:a5:05:9f:c2:66:6e:fb:dc:ec:d1:91:d4:d3:
b6:99:f8:d3:92:5a:c2:da:42:04:94:a3:98:a2:5b:
da:d1:02:99:04:84:78:95:65:b3:d6:4f:49:1c:1b:
14:0f:7b:96:99:56:8e:a9:b4:44:18:09:05:0c:c8:
3f:a2:e0:a2:da:27:b7:02:6b:0f:23:0a:c0:ff:93:
66:ab:f1:01:1d:97:b0:8d:03:51:b0:18:87:86:0f:
ba:26:ef:82:e8:73:d2:22:35:3f:fa:02:b4:0f:8c:
c9:39:d8:a2:f0:ec:fa:b6:59:bf:34:9b:a9:55:3d:
14:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7C:38:96:41:E8:D0:F9:2C:9D:A1:16:BA:3E:BA:42:84:BE:EF:3E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oHw4lkHo0PksnaEWuj66QoS-7z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1204::/48
Signature Algorithm: sha256WithRSAEncryption
83:43:c1:e8:7d:3b:65:a0:55:ad:60:da:b4:e2:52:33:93:73:
5a:b3:18:2c:2e:18:55:fd:c2:b3:74:50:1f:da:aa:57:b2:ea:
c6:3e:23:bc:a0:17:b8:49:cc:9c:79:3a:8a:86:de:78:f9:1b:
dd:2d:80:fc:c8:c4:55:be:5d:29:75:a1:0f:ce:d9:60:16:6d:
74:f8:3a:28:84:f1:41:77:e9:40:6a:a7:d4:42:b1:b5:66:09:
07:65:44:a1:21:17:85:0d:17:8a:cf:f4:3f:88:7a:64:93:ba:
2e:ff:08:c1:2d:74:61:c1:85:8b:a1:62:89:95:8d:52:c1:5a:
22:f4:91:dd:e5:33:7c:98:ed:e4:5b:77:0b:6e:d0:91:7f:08:
4e:31:15:9e:81:a0:ad:f9:43:2a:ed:2b:95:9c:31:30:b0:88:
6d:71:1e:01:11:24:ee:2a:09:2f:66:dc:5e:ed:b2:19:98:88:
ca:5f:de:d9:14:82:4e:91:99:86:7c:3d:12:3c:7b:7c:c7:39:
1c:36:3b:dc:70:4d:7c:e1:f7:83:07:36:6f:ab:5a:91:47:63:
0d:d5:2c:03:eb:09:6f:61:1c:6f:74:63:3b:31:4c:98:f2:b6:
a1:ee:69:5e:a9:0c:0c:b4:c7:71:93:b4:c6:2b:3d:d9:d5:2c:
c0:67:63:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 20:30:31 2026 by rpki-client