Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/oxa1T3tefNI8jMcNXAHuBuIsmNQ.roa
File: oxa1T3tefNI8jMcNXAHuBuIsmNQ.roa (raw, json)
Hash identifier: 3LG78LsL4OHFaotsrUyC2y2Fn6pTRZyKnP3sITHsEI4=
Subject key identifier: A3:16:B5:4F:7B:5E:7C:D2:3C:8C:C7:0D:5C:01:EE:06:E2:2C:98:D4
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F7519A62E56A0C41CB67E6B4B19812F6D
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/oxa1T3tefNI8jMcNXAHuBuIsmNQ.roa
Signing time: Sat 18 Jul 2026 12:00:42 +0000
ROA not before: Sat 18 Jul 2026 12:00:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198550
IP address blocks: 191.44.108.0/23 maxlen: 23
191.44.112.0/24 maxlen: 24
191.44.113.0/24 maxlen: 24
191.44.114.0/24 maxlen: 24
201.3.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:19:a6:2e:56:a0:c4:1c:b6:7e:6b:4b:19:81:2f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 18 12:00:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a316b54f7b5e7cd23c8cc70d5c01ee06e22c98d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:76:c0:ad:39:7e:41:21:d0:6d:8c:04:16:b3:
df:6a:ed:05:3d:d0:e8:78:b6:17:f7:c2:b8:64:1a:
b4:e5:2a:53:b9:a0:97:bc:17:af:e5:e0:a6:fc:e4:
c0:aa:ff:3c:69:fb:66:7f:c3:9d:72:82:08:61:de:
c7:4a:50:39:04:4e:78:51:67:81:60:7c:eb:11:72:
00:b1:98:01:fb:6a:e4:b0:01:b7:4f:b4:d1:52:eb:
a0:d4:78:38:44:0c:33:59:13:b3:7b:1d:b6:a1:c7:
0f:9c:c6:32:c7:15:d2:c5:56:08:ee:ad:13:eb:32:
b0:45:26:84:99:1b:ce:10:19:bb:1a:9a:b2:99:be:
63:40:c2:d4:70:2b:26:f8:36:a1:cb:32:61:ac:77:
32:fe:5d:16:0b:5e:31:f5:1b:5d:bd:5b:59:37:ad:
67:6b:20:cd:d4:f8:ca:22:d8:c0:80:3a:fc:9d:3b:
3d:d7:5c:7a:8e:ad:39:50:81:55:1b:d6:cc:93:0d:
ad:68:c0:b3:33:08:26:55:a8:67:01:fb:e2:33:07:
00:3c:97:f9:8a:ea:86:fa:47:ae:40:3f:85:28:e7:
36:d3:86:1b:73:59:09:f1:80:13:22:60:13:4e:0f:
ed:21:f9:27:37:18:ce:8d:f7:b4:c7:72:6f:fa:32:
ae:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:16:B5:4F:7B:5E:7C:D2:3C:8C:C7:0D:5C:01:EE:06:E2:2C:98:D4
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/oxa1T3tefNI8jMcNXAHuBuIsmNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.108.0/23
191.44.112.0-191.44.114.255
201.3.228.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ab:18:a6:aa:94:1c:cc:29:95:a6:84:a6:83:29:1a:96:f8:
86:bd:0a:db:a1:1b:13:c3:7a:e1:b0:8c:a8:8a:30:30:ff:ef:
74:12:66:1d:1f:80:4d:7e:3a:b9:46:bf:79:49:db:74:14:46:
dd:24:1c:ed:cb:22:1a:88:66:a3:c2:61:d5:05:23:d6:97:b2:
03:af:d8:05:a0:7e:2f:1a:00:d4:94:15:71:8c:4b:14:e3:f9:
cc:f4:5f:ad:02:64:0a:c8:bf:f2:2c:84:d6:87:77:27:23:fc:
fc:96:da:ba:d8:91:aa:29:c3:fb:63:b4:99:0a:60:a1:37:5b:
33:52:91:3e:33:bd:4a:17:06:c1:bf:3d:d3:53:82:a6:4e:d1:
ec:cf:89:56:9b:59:e4:4a:18:27:12:90:b6:a6:11:4a:4f:be:
e4:b3:b4:2e:c0:27:d1:0b:1e:e0:84:96:5c:f4:d5:cc:5c:98:
b5:a6:89:cd:71:8f:33:11:04:d3:f0:84:2a:d7:e5:7f:f1:dc:
f1:cc:70:94:82:83:e5:ab:47:bc:07:6f:56:1d:c0:9c:25:1c:
ff:c5:d6:8d:ed:94:cb:d2:85:51:25:d8:05:f8:4b:84:81:0f:
71:87:9c:da:b9:1e:94:8c:41:db:74:9f:07:cf:d1:55:5a:31:
c3:e6:84:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:28 2026 by rpki-client