Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/OziGpC6souOmKReTt5dhC7pogOM.roa
File: OziGpC6souOmKReTt5dhC7pogOM.roa (raw, json)
Hash identifier: xgsI0qjvkbjR73ylGoxPbmV7puhCOm64ceJYIm141LE=
Subject key identifier: 3B:38:86:A4:2E:AC:A2:E3:A6:29:17:93:B7:97:61:0B:BA:68:80:E3
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F23143879AD16A59F1F2B88B3F087D514
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/OziGpC6souOmKReTt5dhC7pogOM.roa
Signing time: Thu 02 Jul 2026 13:45:55 +0000
ROA not before: Thu 02 Jul 2026 13:45:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 273301
IP address blocks: 201.3.122.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:14:38:79:ad:16:a5:9f:1f:2b:88:b3:f0:87:d5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 2 13:45:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b3886a42eaca2e3a6291793b797610bba6880e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:ad:05:aa:b9:6b:68:11:ca:51:44:f0:ff:
f9:5a:9d:17:cf:eb:a4:97:d3:31:ed:88:57:26:bf:
32:fe:63:1d:16:29:dd:06:05:e9:b1:d9:5b:28:b8:
ca:55:9e:9f:4b:61:4a:64:f6:d3:54:77:09:eb:ee:
9c:c9:cd:98:4a:a0:61:2c:a2:93:69:24:10:5d:45:
33:94:9f:67:00:d4:57:d4:0e:e4:dc:97:5c:a3:e2:
8a:fa:01:d1:3d:75:4e:53:5c:bd:a9:f7:99:35:d3:
cf:0e:08:12:07:a5:61:e5:38:6a:09:55:0f:df:db:
bc:2b:b6:79:a6:2c:e3:e0:0c:80:85:12:89:ee:bc:
da:87:8f:f8:88:6b:d1:43:00:a2:a1:0e:a2:90:3a:
47:b0:ce:0e:77:b3:1c:d9:c2:9a:fe:80:16:c8:a7:
99:f5:b8:cd:1d:3d:92:c2:74:35:56:fd:46:6a:9b:
d5:e0:84:f1:52:83:72:5a:35:28:27:d0:e5:dd:cc:
b9:6b:37:79:c9:49:38:50:c1:f9:c9:40:d5:19:90:
dc:b9:25:e2:f8:86:0b:b4:e8:20:97:53:29:0f:6e:
9b:d1:0b:68:c6:a7:dc:c6:04:f2:6a:47:d3:bd:4b:
e3:c4:9b:da:f5:43:77:9d:da:3d:9f:07:25:af:65:
e0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:38:86:A4:2E:AC:A2:E3:A6:29:17:93:B7:97:61:0B:BA:68:80:E3
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/OziGpC6souOmKReTt5dhC7pogOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.122.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:b1:4e:67:d0:33:07:e8:6f:95:14:39:dd:13:22:44:0b:31:
49:17:ed:96:11:d7:2b:a3:9f:48:c1:7a:7a:6e:eb:6b:77:f2:
a3:81:f9:2a:c6:79:a9:1f:09:a4:df:b7:12:5a:5d:5f:15:ce:
0a:64:a6:1e:16:b0:b7:57:d2:16:72:88:94:18:8d:77:2a:1f:
13:26:12:a1:1e:84:57:d8:f3:fe:27:a1:d1:1e:bd:5d:95:58:
a7:31:1c:10:fc:af:c2:06:7d:df:d4:13:c6:e3:7f:00:18:94:
98:e0:e1:3d:02:21:47:63:b6:08:6d:4c:80:87:c1:93:06:0c:
76:3c:33:f7:2b:42:48:f7:b4:4b:c5:45:28:57:98:de:e7:3d:
92:e9:fb:8d:a2:38:c5:b1:71:b0:bd:4f:09:d1:f9:a5:d1:f1:
ea:ef:cd:b0:5f:cf:a4:e8:72:cf:35:26:f9:25:02:fe:a2:11:
42:d4:26:f9:17:de:c7:e0:f4:42:96:41:fc:07:77:12:c0:4f:
9f:bf:6f:93:ca:82:f6:a4:52:97:f2:cf:75:db:47:d1:23:02:
38:67:bb:e9:02:e2:34:66:ce:e4:f9:35:e9:7a:2a:e1:ee:30:
38:e6:19:76:91:06:2a:11:7c:50:40:77:ce:a4:05:59:ee:a6:
72:bd:3c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:29 2026 by rpki-client