Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/OQmMIMjDOQN06C6KMmTj90x5Jn4.roa
File: OQmMIMjDOQN06C6KMmTj90x5Jn4.roa (raw, json)
Hash identifier: rSRTdka0k9dWxPdjRHeOyCCKpvyUvfBxfDJ/hCjcRGU=
Subject key identifier: 39:09:8C:20:C8:C3:39:03:74:E8:2E:8A:32:64:E3:F7:4C:79:26:7E
Certificate issuer: /CN=8829792e3ff21fc35827f68a78c8050015c66a72
Certificate serial: 01A0DE78337FA4DBDE1F0AE5BF1F5C24FEB9
Authority key identifier: 88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/OQmMIMjDOQN06C6KMmTj90x5Jn4.roa
Signing time: Sat 26 Sep 2026 16:06:54 +0000
ROA not before: Sat 26 Sep 2026 16:06:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 2a0f:cac0:4::/48 maxlen: 48
2a0f:cac0:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:78:33:7f:a4:db:de:1f:0a:e5:bf:1f:5c:24:fe:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8829792e3ff21fc35827f68a78c8050015c66a72
Validity
Not Before: Sep 26 16:06:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39098c20c8c3390374e82e8a3264e3f74c79267e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1a:fa:55:ba:6b:e4:04:ef:94:79:4d:d7:54:
86:16:cb:8a:02:d5:5d:5a:34:32:93:2f:e7:45:20:
74:2a:57:12:0f:bc:9f:ad:18:a8:94:88:69:54:bd:
b3:e9:50:9d:74:5c:65:19:6d:29:32:e6:a8:db:93:
5e:2d:47:d2:c4:82:a9:d7:84:83:08:a6:eb:0d:27:
1d:91:c3:38:0e:c1:36:2a:2e:4b:a5:18:1c:02:67:
0f:c2:59:18:9b:fd:ee:bf:84:44:c2:59:14:3e:27:
66:4f:f1:eb:ab:64:1d:59:52:d2:c2:5d:e0:62:7d:
c3:75:04:68:e4:39:a5:1d:d3:00:f2:4f:65:31:bb:
56:18:05:60:c6:0f:3d:93:42:8d:2d:65:c3:05:7f:
11:6b:6f:a6:23:23:6c:48:00:a2:7a:4b:22:8e:22:
dc:50:a8:db:ae:52:ad:31:c7:ab:12:d5:01:1d:13:
f9:22:52:7b:68:d8:b2:e5:59:3a:e6:63:19:b1:33:
0b:c9:0f:d4:8d:4e:ab:f5:26:b9:8a:a6:65:51:8c:
c2:83:d5:43:24:54:c6:8d:d8:88:7f:56:59:11:c2:
e3:92:33:03:08:a3:90:d8:5a:d0:9f:bd:63:af:c6:
04:47:8c:65:b4:34:88:3a:0e:ff:2e:0c:d1:2d:64:
80:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:09:8C:20:C8:C3:39:03:74:E8:2E:8A:32:64:E3:F7:4C:79:26:7E
X509v3 Authority Key Identifier:
keyid:88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/OQmMIMjDOQN06C6KMmTj90x5Jn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:cac0:4::/47
Signature Algorithm: sha256WithRSAEncryption
96:7f:c4:e1:7f:12:5e:b2:f2:16:3e:a2:0f:c8:ef:7c:3f:58:
2f:d3:36:a1:ac:33:1e:3d:61:93:ec:39:dc:be:77:80:bc:03:
a8:bc:67:ec:0d:33:d4:11:d4:e1:4a:bf:ac:9a:45:78:9a:eb:
ac:1f:66:ee:95:9f:ae:45:12:15:0f:1e:af:8b:8d:b4:d4:29:
74:39:d1:32:e3:5f:55:20:7a:d9:06:1f:b5:a2:86:06:19:1f:
05:60:0d:94:40:ae:ab:b7:ce:c6:2b:f7:57:b5:d1:41:0a:b0:
fc:a2:e5:c3:8f:80:52:47:c6:4c:78:7f:9f:99:ac:ea:32:19:
e6:3b:c2:ef:dc:a4:6a:9c:6e:05:11:d2:c3:23:07:6e:b1:4a:
f5:ff:43:7f:10:9e:78:f1:e5:1d:70:ba:19:fa:ad:fe:08:dd:
93:d4:0f:cc:1f:36:4e:33:39:2f:9f:96:e6:6b:cb:c7:b4:f0:
96:22:2b:ee:d8:7d:fd:2d:e5:cf:f5:cc:6f:66:ff:c0:96:03:
f6:3a:eb:a6:1a:84:ff:2b:87:44:29:1f:99:fe:12:85:bf:ac:
52:07:89:0b:39:1f:81:a3:3d:c1:4a:19:f3:e5:3d:37:d6:e9:
ae:4e:bd:76:6b:62:bf:64:39:46:14:03:f3:ee:0e:b9:5f:93:
4c:b3:32:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:07:56 2026 by rpki-client