Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/OcxvnonenQfta5WpYFobE4QIa0k.roa
File: OcxvnonenQfta5WpYFobE4QIa0k.roa (raw, json)
Hash identifier: 0ozMCe2eON1KLMOQVbin5EZBygzHaSeYNUFHtC6sv6Q=
Subject key identifier: 39:CC:6F:9E:89:DE:9D:07:ED:6B:95:A9:60:5A:1B:13:84:08:6B:49
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019E6E3FFB0CD2F73C1B42A3F75BF5EE779C
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/OcxvnonenQfta5WpYFobE4QIa0k.roa
Signing time: Thu 28 May 2026 11:02:27 +0000
ROA not before: Thu 28 May 2026 11:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197194
IP address blocks: 2a06:9801:74f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:3f:fb:0c:d2:f7:3c:1b:42:a3:f7:5b:f5:ee:77:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: May 28 11:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39cc6f9e89de9d07ed6b95a9605a1b1384086b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d8:09:68:66:6d:c5:0a:51:07:78:8b:7d:db:
0f:28:6c:cf:14:68:c3:08:0f:6a:6d:58:e3:82:8c:
fc:51:f7:05:b9:02:5e:21:31:1e:c9:d3:40:25:ab:
a0:67:40:26:1b:af:8a:68:40:b0:7b:91:84:b0:3a:
41:fe:70:48:53:33:b9:b7:4e:3e:0c:40:b8:51:cf:
b9:0e:1c:31:86:6e:24:53:34:de:04:38:cf:90:be:
75:1b:6d:a9:bf:44:c0:2c:9f:f1:0a:e4:7f:c3:a8:
b0:af:cc:8f:c3:ee:4f:19:b3:94:c3:bf:40:bd:41:
6d:ff:00:6d:07:0f:ca:ce:ee:81:0f:2f:6c:02:d4:
4e:17:15:29:8a:e8:09:05:44:50:9d:42:e6:8d:be:
a4:30:28:59:2b:05:3a:e5:a6:37:9c:62:b6:3f:9c:
86:38:7e:7e:2f:9e:22:da:69:93:d7:7c:d8:7a:bf:
f5:9e:db:6e:9d:85:2f:43:04:34:93:13:b1:9c:4f:
70:91:46:0a:e6:4b:71:62:67:b5:e6:b0:9a:2f:cb:
67:9f:24:1b:1a:6e:b0:c2:35:d7:90:cc:d5:06:a3:
26:64:d7:78:d9:d9:5f:01:3c:f0:b6:b0:1e:96:09:
87:b5:12:65:22:da:71:1e:12:1d:08:55:a2:3e:91:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CC:6F:9E:89:DE:9D:07:ED:6B:95:A9:60:5A:1B:13:84:08:6B:49
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/OcxvnonenQfta5WpYFobE4QIa0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:74f::/48
Signature Algorithm: sha256WithRSAEncryption
ab:e0:f3:fe:58:2a:a6:48:cc:64:28:a9:4c:95:99:61:9c:83:
34:30:d1:52:f3:55:ad:19:cd:ef:a5:92:eb:b5:a4:b0:c4:da:
12:d4:61:2b:fd:b4:b3:ba:9a:90:3e:b5:33:92:15:39:fb:f4:
c6:86:b7:7a:56:74:93:c7:c6:00:30:6a:33:1f:7d:2c:cc:63:
0c:06:53:0c:76:46:ae:ff:1e:65:64:55:db:c2:49:fb:1c:e2:
c6:08:ba:61:fc:5e:5b:3e:48:e0:4a:39:cf:b4:99:4a:25:7d:
0a:37:51:3d:5e:a4:4f:d9:62:7f:97:b2:ef:2d:ed:ae:07:38:
a9:d6:4d:9a:e4:6f:34:d1:d7:b9:07:a3:41:b7:f9:7e:8c:3e:
21:a1:4e:db:95:b1:82:6e:aa:ff:ee:07:a4:d0:ae:8e:9c:6e:
c8:26:d9:4f:81:aa:b8:5c:d2:64:0b:e5:6a:44:ce:45:78:7e:
0e:12:2b:48:de:8d:1f:2f:06:07:05:33:68:50:b7:ed:b5:8e:
3b:c5:5c:a6:33:23:fa:9d:e6:3d:5f:54:aa:21:a3:63:bb:71:
9b:69:19:30:da:67:bc:e4:d9:c9:be:c2:01:13:2c:3d:67:89:
88:4b:ec:bf:dd:7a:fe:6c:f3:95:25:42:bc:99:da:54:31:6b:
c4:40:f4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:51 2026 by rpki-client