Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/oLlpW-Kv3YdiNaMBGLxiiSkAPVI.roa
File: oLlpW-Kv3YdiNaMBGLxiiSkAPVI.roa (raw, json)
Hash identifier: jBRIoyXYC1iPbbdulsOrSBH06nGl0L2ZQyhBAH2SJ2k=
Subject key identifier: A0:B9:69:5B:E2:AF:DD:87:62:35:A3:01:18:BC:62:89:29:00:3D:52
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01A1272E68B3B97ED02712D0EA99267A2393
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/oLlpW-Kv3YdiNaMBGLxiiSkAPVI.roa
Signing time: Sat 10 Oct 2026 18:58:35 +0000
ROA not before: Sat 10 Oct 2026 18:58:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205126
IP address blocks: 2a12:bec4:1cf0::/48 maxlen: 48
2a12:bec4:1cf1::/48 maxlen: 48
2a12:bec4:1cf2::/48 maxlen: 48
2a12:bec4:1cfa::/48 maxlen: 48
2a12:bec4:1cff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:2e:68:b3:b9:7e:d0:27:12:d0:ea:99:26:7a:23:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Oct 10 18:58:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0b9695be2afdd876235a30118bc628929003d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:3d:3c:62:0a:bd:aa:6d:93:aa:5d:79:5a:
48:d2:b9:bc:63:f9:19:2b:f0:15:0c:67:23:02:d2:
08:98:57:96:8e:d3:7c:db:83:d0:66:77:98:88:2c:
cb:b6:c0:d7:81:c0:e0:6e:d6:62:1e:5c:91:9d:d2:
37:66:c9:b9:0e:11:e6:26:20:34:3f:8b:e8:6b:0c:
a2:3e:b2:15:68:9b:04:55:ee:d4:4e:44:0e:ea:b1:
a4:30:d4:84:50:fd:50:10:f4:73:47:74:b2:34:02:
2e:a8:66:0d:15:85:e3:f6:05:64:7a:ba:5e:4c:02:
71:2c:61:e4:84:2a:c8:d7:65:81:68:8e:c2:4e:e1:
ca:69:9a:28:0a:46:0c:cb:93:98:34:21:0d:a9:a2:
db:59:a8:3c:40:b0:0f:94:32:3a:e2:e1:79:4a:b6:
95:cf:58:a4:f4:ee:34:08:39:95:dc:94:63:13:e1:
09:89:21:5a:8b:40:3d:dc:08:e9:d8:bd:90:20:8e:
59:cd:0d:23:0b:21:21:65:2c:1d:55:7c:cb:85:dd:
1d:6c:f5:22:f9:d2:a3:d5:61:ac:40:69:ea:8f:e8:
39:45:5b:0b:61:4c:ba:4b:b2:94:20:c6:23:54:47:
fc:a9:71:3b:d4:35:b7:fa:3f:a8:3a:bf:21:69:84:
43:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B9:69:5B:E2:AF:DD:87:62:35:A3:01:18:BC:62:89:29:00:3D:52
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/oLlpW-Kv3YdiNaMBGLxiiSkAPVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1cf0::-2a12:bec4:1cf2:ffff:ffff:ffff:ffff:ffff
2a12:bec4:1cfa::/48
2a12:bec4:1cff::/48
Signature Algorithm: sha256WithRSAEncryption
1b:b2:eb:cb:2f:f1:7d:40:dc:26:13:f1:b2:ef:66:e5:a9:ff:
a3:26:98:5c:50:1a:77:b0:74:b7:15:98:49:f5:e6:af:6f:b3:
f2:81:a4:08:19:dd:30:7b:97:e0:72:98:ed:bd:d1:57:4e:8b:
2e:51:65:04:2f:23:34:72:de:fe:78:72:ff:d6:e0:2d:4e:ee:
57:22:98:44:0d:a0:49:3e:af:11:19:19:31:18:cc:7f:6c:b6:
e0:4c:75:5f:d4:fc:a5:29:b6:56:bf:8d:e3:fa:0e:0d:00:3b:
c1:00:32:5f:50:f6:15:c7:cc:64:dc:66:9b:9d:ac:b5:7f:8c:
87:e8:c3:d0:55:26:84:a3:81:2a:c0:80:55:cd:df:00:90:eb:
2e:69:5e:90:9d:7c:e1:d5:8f:6a:11:55:a9:0f:71:cf:2d:d4:
b7:72:fe:ec:d6:fb:aa:a6:25:bf:62:81:f8:ba:b3:c2:27:22:
ea:b8:bf:2b:50:38:bd:02:72:74:03:13:9e:fb:1b:4e:4d:a6:
23:46:08:09:5e:64:7d:d1:47:26:0e:23:5d:7d:bd:13:4c:bd:
d7:7f:e5:a8:8c:8d:95:7d:0f:05:8a:92:37:df:41:64:1b:ac:
75:02:a7:23:e9:53:32:c5:26:2c:48:bf:38:c4:1f:21:52:95:
75:db:6a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:50 2026 by rpki-client