Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/OiHFA6PsXtdsPfwZYmkF65Ad0LE.roa
File: OiHFA6PsXtdsPfwZYmkF65Ad0LE.roa (raw, json)
Hash identifier: AVMT+ae9Qwz+FzdBxa6CycOcI9YC/dHoi7NkLXkB2hk=
Subject key identifier: 3A:21:C5:03:A3:EC:5E:D7:6C:3D:FC:19:62:69:05:EB:90:1D:D0:B1
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01A056B3665DE36CA2E014862BF54171E26F
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/OiHFA6PsXtdsPfwZYmkF65Ad0LE.roa
Signing time: Mon 31 Aug 2026 07:23:12 +0000
ROA not before: Mon 31 Aug 2026 07:23:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218823
IP address blocks: 2a03:5840:380::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:b3:66:5d:e3:6c:a2:e0:14:86:2b:f5:41:71:e2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Aug 31 07:23:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a21c503a3ec5ed76c3dfc19626905eb901dd0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9a:9f:6b:97:5c:a1:fc:24:fd:2d:3d:ef:0c:
57:5f:1a:77:36:87:a3:71:71:cc:b4:ba:ef:f7:78:
2f:66:a0:c3:af:f3:2d:c9:5a:7f:f7:dc:f9:c5:43:
f3:fd:3d:8d:dc:f2:6b:6d:2f:83:69:f1:f4:b6:9f:
a5:66:06:9d:fe:b8:aa:f6:c1:a7:83:a6:d4:8d:4c:
31:fa:6f:aa:1d:e9:64:ba:5c:76:b2:8f:25:09:18:
f2:3c:4d:0e:02:72:d1:77:fc:16:b1:6d:7f:c5:77:
66:46:cd:aa:65:0e:cb:a1:2a:c4:2b:00:5f:d1:5f:
13:89:74:23:ac:d5:8a:44:6b:cd:09:05:46:39:43:
a2:dd:ff:25:eb:ff:3e:73:c5:91:ba:d7:11:32:98:
6a:9d:a1:20:89:9f:52:6b:84:53:51:94:1d:31:e5:
6f:cb:6a:a3:4f:1c:66:f9:95:49:ae:a6:ea:80:f7:
93:5b:63:85:94:73:3e:25:80:60:0d:50:2d:18:a8:
9c:a6:3f:d4:07:49:e4:d1:74:e9:73:2a:6f:a5:e8:
84:d7:6c:5b:44:53:55:3e:a1:ed:9d:4d:e8:29:42:
b7:2c:1a:5d:8a:59:e7:df:ba:1c:81:f3:df:ea:a0:
60:8a:d9:e2:33:e2:5a:09:3c:ef:39:74:a2:c9:32:
8a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:21:C5:03:A3:EC:5E:D7:6C:3D:FC:19:62:69:05:EB:90:1D:D0:B1
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/OiHFA6PsXtdsPfwZYmkF65Ad0LE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:380::/44
Signature Algorithm: sha256WithRSAEncryption
99:4e:e4:ea:1f:6c:03:ee:a6:ae:55:c6:01:06:0d:14:76:8c:
ad:08:b3:21:ed:bf:ca:1a:8e:89:dd:c9:c2:a3:79:99:61:fd:
3a:67:d9:61:34:a2:a0:69:3e:4c:11:0b:8d:ae:ce:06:b9:3a:
1d:5e:96:49:f1:80:71:55:76:18:ee:5d:73:b2:d3:a1:2d:e6:
e1:f3:f5:34:06:51:fb:70:e7:e2:bb:2b:ed:98:10:41:f3:7e:
a7:f5:7e:71:3d:56:4e:b6:6e:47:b7:44:f9:47:54:f2:2d:05:
c1:e8:ba:e0:1c:79:57:f8:74:4b:56:6f:f9:01:9d:33:95:02:
ec:bf:a6:9d:45:bf:f0:3c:d8:fb:72:0f:0c:a0:fe:1a:29:b7:
6a:6c:64:d8:cf:63:2c:e1:9a:56:e4:76:80:ba:af:1a:d8:6a:
26:ec:9d:fe:f0:bb:84:d9:13:30:82:08:e9:e2:72:22:2b:06:
9e:fc:1e:ac:5e:38:b0:cd:67:4c:4e:3d:fc:ca:5b:3a:97:7c:
06:96:1a:c5:e4:95:87:d6:a0:3b:35:49:65:8d:be:e2:31:b8:
7b:c3:71:dc:5b:40:62:5f:f2:7a:17:12:bc:09:54:73:84:b8:
e6:f9:9a:6e:d8:4e:5e:3d:b0:51:2a:12:34:c7:d0:e9:f2:fd:
12:76:84:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:23:08 2026 by rpki-client