Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/2OGl3RCHPSMYDaPLyiX-7atVnHA.roa
File: 2OGl3RCHPSMYDaPLyiX-7atVnHA.roa (raw, json)
Hash identifier: j+Iyf8wkK2cBu5Og06/JmFKJWx2zFeCWu03ZiA8aniI=
Subject key identifier: D8:E1:A5:DD:10:87:3D:23:18:0D:A3:CB:CA:25:FE:ED:AB:55:9C:70
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019BFA9CFB2E180A45A40E4EEA29CABBC8E1
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/2OGl3RCHPSMYDaPLyiX-7atVnHA.roa
Signing time: Mon 26 Jan 2026 14:02:30 +0000
ROA not before: Mon 26 Jan 2026 14:02:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202420
IP address blocks: 2a03:5840:13c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:9c:fb:2e:18:0a:45:a4:0e:4e:ea:29:ca:bb:c8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 26 14:02:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8e1a5dd10873d23180da3cbca25feedab559c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:94:2e:f2:51:d7:f3:24:80:d6:d4:fe:4b:0d:
b1:b8:01:72:aa:49:e1:8d:b7:78:4b:b9:a0:e8:0d:
35:5c:bd:b1:f5:07:49:ed:45:b6:ea:5d:17:8c:26:
c9:0d:2a:86:1c:3e:26:c8:bc:5c:d7:70:5a:d6:44:
64:57:9d:e5:19:02:ca:08:f2:b5:02:f9:be:96:1c:
eb:f0:75:d7:7e:75:85:fd:4c:fc:fa:fc:47:67:45:
a7:9a:42:3e:a1:05:01:6f:32:76:d9:c3:ce:38:52:
2e:95:b8:b3:90:f8:9c:00:76:46:c1:36:21:1e:c8:
94:d5:5f:18:73:22:c3:83:d3:be:bc:7f:41:e1:2d:
79:70:73:67:35:66:db:63:6f:b5:6e:cc:cb:7f:d6:
e4:ac:eb:bb:2b:22:d0:24:e5:aa:2b:4c:e9:1e:df:
95:c9:52:0e:3c:ce:a5:11:fb:a9:e2:03:90:a3:b0:
c4:39:e8:9e:21:ab:18:eb:9d:83:11:c3:01:85:de:
c0:e4:37:c5:bc:ec:8c:ae:d9:6b:d1:f9:38:22:17:
f2:90:07:79:d7:02:95:03:9c:d4:c6:b6:ce:10:d4:
0c:21:0f:b5:be:0d:5c:6c:e2:ab:7d:d2:72:99:37:
5f:e5:56:95:8d:c0:0f:35:21:c8:ef:06:e6:9a:80:
19:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E1:A5:DD:10:87:3D:23:18:0D:A3:CB:CA:25:FE:ED:AB:55:9C:70
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/2OGl3RCHPSMYDaPLyiX-7atVnHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:13c::/48
Signature Algorithm: sha256WithRSAEncryption
3a:72:56:7e:d9:30:28:2a:82:3e:59:c6:45:43:6f:c5:94:f7:
6c:6f:13:8d:ad:f5:1d:2b:ec:de:59:b4:64:c1:40:7e:ab:7c:
50:50:63:f1:31:79:bc:30:53:b3:37:6f:d1:97:c0:fe:9c:18:
59:c6:7d:85:93:4b:f8:a3:e0:3c:82:49:82:4b:d8:1a:ed:45:
57:19:c9:ae:5c:a5:65:8b:2e:0c:27:2c:ef:4e:01:16:e9:a5:
9b:b1:a1:52:b0:d8:6e:9d:86:07:9b:02:cd:bb:87:b3:68:c1:
a2:92:a1:26:5f:e3:33:51:f9:3d:42:43:d6:1c:a1:26:14:66:
24:8c:7a:2a:bc:06:80:87:ae:c4:c4:f4:34:55:88:8b:65:13:
1e:fe:92:d4:e0:32:16:ed:0d:68:b1:72:50:54:b5:de:2c:12:
09:27:71:93:35:79:f3:20:08:25:d0:b4:30:21:11:cb:6d:f8:
0e:56:e9:92:11:b7:1f:c2:a8:48:4f:69:2b:52:ad:cc:9e:da:
7f:e7:a9:7a:34:77:8a:42:5b:53:da:26:16:9f:ef:ac:7a:8d:
f0:17:fc:42:53:d0:d3:fe:c0:3c:ca:e3:bf:50:0e:70:0c:84:
07:11:8f:1d:0f:03:a9:1a:5d:a5:09:78:0a:18:7c:51:f2:ff:
57:38:ed:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 14:29:22 2026 by rpki-client