Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/O94SxcSZ3vVC0i2tgYMUoWnLrx8.roa
File: O94SxcSZ3vVC0i2tgYMUoWnLrx8.roa (raw, json)
Hash identifier: 4LC0luZN8wKvuxcvPoYnx2Xg9O0bR+DUu8P97rau+nM=
Subject key identifier: 3B:DE:12:C5:C4:99:DE:F5:42:D2:2D:AD:81:83:14:A1:69:CB:AF:1F
Certificate issuer: /CN=68e078b5181be5fbe914b412a412096bc8d71549
Certificate serial: 019FC230078FF78ABA57AFFB6FCB13C57E37
Authority key identifier: 68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/O94SxcSZ3vVC0i2tgYMUoWnLrx8.roa
Signing time: Sun 02 Aug 2026 11:15:55 +0000
ROA not before: Sun 02 Aug 2026 11:15:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43046
IP address blocks: 91.229.0.0/23 maxlen: 23
195.191.160.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c2:30:07:8f:f7:8a:ba:57:af:fb:6f:cb:13:c5:7e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e078b5181be5fbe914b412a412096bc8d71549
Validity
Not Before: Aug 2 11:15:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3bde12c5c499def542d22dad818314a169cbaf1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:36:b9:d4:97:15:84:30:cf:56:98:8c:a9:
cb:42:54:41:f4:18:b8:bf:2f:76:58:82:98:ec:c5:
57:a6:f1:6e:80:df:da:64:06:8f:33:68:e3:6f:ba:
99:ee:77:33:a9:a2:49:d8:e5:0d:60:32:8e:2e:0a:
99:c3:11:70:b6:75:cc:84:88:f0:cb:00:70:90:63:
a9:e5:84:5d:21:52:91:1a:9a:b8:39:f5:0e:7e:42:
38:5d:33:3d:24:5d:45:a0:13:cb:f9:f2:50:19:29:
cc:ef:9c:96:d5:dc:d2:55:84:48:2d:7d:a2:49:6a:
34:52:7f:8c:9f:ee:13:51:68:76:ac:1d:5f:9b:fe:
72:06:0f:5f:c2:fd:44:11:41:05:d1:0f:f9:f1:53:
92:a4:5b:68:0c:4c:0a:bb:63:f7:ed:41:86:19:61:
a2:50:29:0c:d2:31:5a:66:64:ee:39:ba:f2:68:3f:
be:f9:5c:f9:a8:78:30:85:1d:23:98:8a:06:b2:4c:
27:a5:b3:16:f2:18:66:bb:9f:da:1e:9b:9c:f7:36:
3c:0e:88:b8:1c:3a:2a:aa:ca:8f:95:b2:df:21:9d:
5a:b7:b8:5e:7a:40:f8:ed:4b:3b:a2:0e:0e:7d:d0:
2f:7c:2d:6b:d5:e2:ca:43:76:bb:27:27:6a:fb:8e:
99:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DE:12:C5:C4:99:DE:F5:42:D2:2D:AD:81:83:14:A1:69:CB:AF:1F
X509v3 Authority Key Identifier:
keyid:68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/O94SxcSZ3vVC0i2tgYMUoWnLrx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.0.0/23
195.191.160.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:58:58:73:f1:1c:ad:f4:1a:d6:e0:db:d8:0e:11:1c:ec:b2:
59:5e:cf:11:52:92:a0:94:bc:9d:22:e6:8b:e5:c6:66:c1:10:
33:88:33:c5:5f:a0:7a:33:d3:09:45:80:5c:f9:ec:3f:2c:02:
ba:46:b2:d0:90:6e:24:a4:38:65:81:34:ca:b4:6e:99:11:5c:
20:be:e0:f6:e5:a3:f7:17:28:9a:07:1d:eb:6b:d9:62:51:dd:
ff:7a:a7:29:47:41:f5:81:7e:38:71:d9:4f:85:ad:40:b8:b9:
a3:40:aa:4f:fd:88:03:8c:a3:a8:b5:3a:0f:b0:16:cf:91:61:
05:06:89:fe:5f:81:3f:a0:99:91:0f:81:49:c1:03:54:37:81:
99:05:7c:60:13:e0:2a:5c:6b:f9:11:ed:2f:38:d2:bc:9c:74:
a5:0f:08:36:0d:a4:37:af:3e:5a:36:a5:25:b8:f6:e7:de:74:
4d:71:73:38:94:b6:4e:41:db:e2:4e:7b:b1:59:60:2d:54:90:
16:ad:65:77:e1:94:f9:92:52:26:3d:93:2f:50:0c:81:3a:77:
89:3a:10:92:56:16:28:30:59:b6:e7:ec:32:47:6d:60:95:98:
c7:e8:0e:c3:88:6d:9d:f5:5b:7d:b4:e5:b1:4a:1b:89:01:26:
26:5c:62:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 06:20:44 2026 by rpki-client