Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/OxtyrUx5--vX5Ukm3pjJQMK_dTc.roa
File: OxtyrUx5--vX5Ukm3pjJQMK_dTc.roa (raw, json)
Hash identifier: aEvYRH4WU2EHsZNy6E4K63co4AdWVDqUTOEdaFm4Qk8=
Subject key identifier: 3B:1B:72:AD:4C:79:FB:EB:D7:E5:49:26:DE:98:C9:40:C2:BF:75:37
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01A0623A90F73CF5F82D7CEF58F3DDE54E9A
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/OxtyrUx5--vX5Ukm3pjJQMK_dTc.roa
Signing time: Wed 02 Sep 2026 13:06:40 +0000
ROA not before: Wed 02 Sep 2026 13:06:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211421
IP address blocks: 94.184.9.0/24 maxlen: 24
94.184.16.0/24 maxlen: 24
94.184.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:3a:90:f7:3c:f5:f8:2d:7c:ef:58:f3:dd:e5:4e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Sep 2 13:06:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b1b72ad4c79fbebd7e54926de98c940c2bf7537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b9:44:9e:6b:89:2b:1b:58:31:fb:8e:64:f3:
50:79:d9:06:d2:a0:45:8b:2c:54:73:66:5b:4c:52:
62:31:1c:a2:06:3c:bf:b9:65:7b:df:c7:f0:ce:f8:
50:34:91:f3:a4:c8:75:a4:6e:87:23:8c:33:44:90:
4a:bd:3f:43:9e:e8:11:93:2e:3a:31:b1:75:b8:01:
a1:9f:6f:18:31:eb:9b:fa:b1:0d:47:30:c1:d3:d7:
b8:c2:f2:34:21:fd:6f:49:ce:13:29:4d:da:d7:41:
4a:fd:69:41:bc:01:32:58:64:db:80:3e:bd:c2:08:
c4:d5:c5:f0:69:d8:72:87:fc:c5:cc:7d:07:d7:1d:
b6:88:93:db:ac:93:28:d5:6e:44:ff:aa:3e:40:2e:
64:e7:5d:44:87:f9:78:dd:4b:22:f1:62:ac:4a:1f:
66:92:6f:21:62:f2:82:dc:0f:dc:22:d2:0b:79:07:
8c:e4:13:31:76:93:91:70:71:4f:73:4a:47:be:48:
48:1e:43:77:91:e2:13:44:20:a9:ed:39:a8:56:1c:
e8:44:83:ba:1c:42:95:68:b9:bd:75:3c:74:3b:21:
38:46:d9:16:c0:31:64:26:5c:a2:e6:15:dc:a5:a9:
ae:d5:4a:24:a5:60:7a:2e:fd:e8:d4:c5:d1:4a:89:
0a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1B:72:AD:4C:79:FB:EB:D7:E5:49:26:DE:98:C9:40:C2:BF:75:37
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/OxtyrUx5--vX5Ukm3pjJQMK_dTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.9.0/24
94.184.16.0/24
94.184.37.0/24
Signature Algorithm: sha256WithRSAEncryption
65:be:12:44:1a:3e:ac:0a:77:83:8d:86:07:29:35:25:71:0a:
f8:ee:86:64:81:fc:a7:95:f4:22:5a:8b:9e:56:0e:61:d2:b9:
9d:de:10:c2:52:d0:e8:fa:e9:aa:b6:63:be:ff:c9:e8:6c:b2:
f0:2c:5c:f3:97:c4:e7:7c:b9:d4:25:3d:1f:40:0e:e9:a8:a3:
65:48:1f:8d:03:fd:de:7b:fd:c1:f0:b6:6c:85:89:b4:ec:81:
9c:5c:37:62:cf:f5:20:da:e6:94:f0:a6:0a:e7:56:d9:bf:00:
5f:c2:76:fc:11:e4:79:fd:25:cd:f8:a1:43:df:aa:18:1b:28:
26:91:e0:8b:5c:f2:6d:4b:03:2b:54:0d:f0:d8:3e:ae:40:4f:
97:09:91:af:18:05:cd:85:4d:99:5c:e8:72:ad:77:1a:b4:3a:
f6:e6:31:05:f2:04:0c:c6:ca:ea:93:68:40:82:12:01:b0:29:
b5:a0:ee:ef:55:94:0a:0d:db:11:99:bd:a5:90:60:4b:0b:14:
cd:3a:4b:db:b4:e7:3b:f3:d4:45:45:0a:97:17:c9:18:48:60:
8e:02:f5:73:81:3c:e5:72:42:23:c3:43:74:7a:4b:53:af:4a:
e9:fc:eb:52:a2:65:cb:19:cd:0f:ef:e4:65:03:0f:11:96:cb:
ee:5a:28:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:04:28 2026 by rpki-client