Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/oKVOqQA6UGqPIFsUmepzUdfYzrk.roa
File: oKVOqQA6UGqPIFsUmepzUdfYzrk.roa (raw, json)
Hash identifier: 3v+jM0GTSnwcjYqsJkc95SBgnL9KE8VAvuMWkXcZg0o=
Subject key identifier: A0:A5:4E:A9:00:3A:50:6A:8F:20:5B:14:99:EA:73:51:D7:D8:CE:B9
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A04F51BFC6D28535A231C422B59F7B298E
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/oKVOqQA6UGqPIFsUmepzUdfYzrk.roa
Signing time: Sat 29 Aug 2026 20:59:12 +0000
ROA not before: Sat 29 Aug 2026 20:59:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219173
IP address blocks: 201.3.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4f:51:bf:c6:d2:85:35:a2:31:c4:22:b5:9f:7b:29:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 29 20:59:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0a54ea9003a506a8f205b1499ea7351d7d8ceb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3e:35:4c:34:1d:bd:3c:19:71:6e:80:07:c4:
60:47:5f:10:b0:22:58:d1:04:7a:f3:4c:9b:a4:d6:
2d:a8:88:03:a6:e4:42:12:91:19:0c:81:ba:33:fc:
32:63:8d:15:ac:31:31:0a:36:ee:cf:ad:a7:cf:b2:
4a:88:d3:ed:56:de:f4:e4:12:b2:37:99:71:6f:54:
05:0a:6f:7f:fb:66:c4:2f:17:30:e6:1b:de:53:d2:
ed:b4:37:1b:d2:b6:2a:67:83:13:1b:cb:36:a7:4f:
90:39:95:d7:09:69:3c:25:49:38:1f:20:d1:ff:29:
3d:21:54:9e:73:f0:3d:d4:1b:5f:5f:00:6e:75:76:
73:30:26:97:61:9a:65:bc:04:f6:07:fb:1d:5b:f1:
e9:be:c8:57:db:e3:88:ca:59:fc:ae:5d:0f:68:d0:
a2:0d:ef:2f:c8:d0:fd:8f:8f:d7:77:1b:3a:73:f7:
5a:06:32:7a:c5:01:45:d4:14:2b:f0:ef:a4:4b:94:
a9:71:e5:c9:28:ca:e4:c7:09:2a:87:eb:02:05:97:
ce:98:90:54:53:3c:97:6d:ed:a5:a5:fd:1d:e2:13:
9f:08:f7:71:f0:73:a7:a6:35:06:9b:e2:c2:3f:9e:
88:d7:94:53:93:6d:0c:38:67:6d:95:45:ca:1d:e3:
8d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A5:4E:A9:00:3A:50:6A:8F:20:5B:14:99:EA:73:51:D7:D8:CE:B9
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/oKVOqQA6UGqPIFsUmepzUdfYzrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.238.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:cc:13:6f:41:4c:6f:a5:69:4d:ed:4c:f8:1b:4e:79:c3:08:
5c:ab:9f:a9:4d:8d:a2:ee:2d:29:52:2f:53:b7:a3:2e:f9:3e:
2a:e6:44:0d:ac:35:2b:a1:3c:ea:d6:14:bb:52:10:be:61:bc:
d4:a2:ef:a5:09:88:08:c3:83:dc:e7:7f:e2:80:0b:e8:c2:21:
58:ce:f8:7f:13:d0:40:37:4e:f5:38:54:13:7c:1a:18:b1:bb:
e0:4e:0e:1e:92:31:ea:e5:26:3c:15:a7:fc:cb:2f:76:6a:28:
0b:c1:17:68:e7:e4:07:f4:96:a9:e1:a4:1d:8d:11:2e:3b:fd:
32:b6:3c:26:16:01:3a:62:ee:d5:1d:77:64:a2:d9:19:57:00:
8b:55:12:30:02:98:f6:09:5c:37:31:6b:54:95:33:5f:a2:8d:
a4:b7:43:a1:a2:cf:95:fc:a0:8e:f0:7a:fc:4b:1d:b6:27:18:
79:53:fa:00:23:c6:f9:c4:f8:0d:dd:8e:26:34:66:6d:bf:d3:
02:85:cf:5b:07:af:d5:4e:e9:82:ba:0d:28:8c:10:81:4b:70:
ca:7f:e2:7a:aa:a7:36:2b:dd:a7:0b:1f:05:2e:b7:9f:fd:f4:
73:dc:c1:ae:d1:58:5a:c2:06:0b:df:1b:cb:ea:a9:19:72:22:
54:23:49:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:40:22 2026 by rpki-client