Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/ORzFbjO5Nia0kcigCY2OWktPzNg.roa
File: ORzFbjO5Nia0kcigCY2OWktPzNg.roa (raw, json)
Hash identifier: H6lUS3aRzmCFN45+2w1+AEQR77kkwodYeALKmKNgXVM=
Subject key identifier: 39:1C:C5:6E:33:B9:36:26:B4:91:C8:A0:09:8D:8E:5A:4B:4F:CC:D8
Certificate issuer: /CN=dfb2f98d5d9330c2825fc8a4bea58e5a2b4abef3
Certificate serial: 019EA1B8E68C83AFCCF39DBAC055C44DDBDB
Authority key identifier: DF:B2:F9:8D:5D:93:30:C2:82:5F:C8:A4:BE:A5:8E:5A:2B:4A:BE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/ORzFbjO5Nia0kcigCY2OWktPzNg.roa
Signing time: Sun 07 Jun 2026 10:55:09 +0000
ROA not before: Sun 07 Jun 2026 10:55:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219533
IP address blocks: 2001:678:3c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a1:b8:e6:8c:83:af:cc:f3:9d:ba:c0:55:c4:4d:db:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb2f98d5d9330c2825fc8a4bea58e5a2b4abef3
Validity
Not Before: Jun 7 10:55:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=391cc56e33b93626b491c8a0098d8e5a4b4fccd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:05:07:a5:4c:39:ee:9c:1d:29:06:ca:94:
b8:21:26:38:87:5d:1e:93:c8:dd:2d:58:e2:27:f3:
50:31:74:ab:92:16:fb:6a:9d:8a:87:83:5f:96:12:
fc:bb:3b:9b:e2:a2:83:a2:33:23:5f:89:f0:5e:9b:
94:63:e6:ed:a6:f1:09:78:21:21:e6:00:d3:e9:3e:
21:5a:7a:50:5c:e3:ca:e3:c8:6b:7d:6b:8f:61:63:
d6:77:bc:df:1f:41:dd:df:23:ca:2a:0b:90:46:fb:
c8:74:64:7f:65:61:85:35:ab:29:a6:4c:51:d7:09:
dc:e9:2d:25:a6:05:1e:c0:6c:cb:bc:f7:75:77:50:
fa:f2:3b:4a:36:5b:d5:51:92:b6:54:ae:34:e4:06:
c3:c8:b0:a4:2c:cb:99:97:78:ac:c3:1c:64:fc:82:
db:64:55:d2:d5:f9:34:e2:bc:91:e1:59:dc:5b:ae:
a8:57:dc:1f:a1:e4:11:30:27:9e:79:f0:b8:9e:3a:
ab:92:8b:9c:7b:02:8b:77:42:15:f9:5b:84:d1:f5:
35:0f:6f:05:3e:58:0f:be:9f:22:5c:37:24:d2:9a:
13:81:fe:d1:dd:a0:70:58:5f:e6:ea:a5:60:67:e9:
74:8a:0e:b9:bd:d9:d5:75:6a:39:a9:a0:45:dd:03:
3a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1C:C5:6E:33:B9:36:26:B4:91:C8:A0:09:8D:8E:5A:4B:4F:CC:D8
X509v3 Authority Key Identifier:
keyid:DF:B2:F9:8D:5D:93:30:C2:82:5F:C8:A4:BE:A5:8E:5A:2B:4A:BE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/ORzFbjO5Nia0kcigCY2OWktPzNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:3c0::/48
Signature Algorithm: sha256WithRSAEncryption
33:8d:e6:96:b2:05:82:52:bc:6a:1f:67:fe:6b:17:82:b4:70:
d5:bc:4a:01:c4:57:a2:50:d4:be:22:22:87:a0:27:a3:05:70:
f8:16:70:d6:f0:71:79:da:ad:01:5b:d7:3f:43:e0:9a:92:5d:
36:32:fd:cd:c3:78:69:10:4d:dd:fb:9f:3a:84:2b:8e:be:c4:
d5:24:72:69:e6:ea:f1:e4:47:3f:94:14:18:d2:f0:69:24:eb:
9e:d6:f6:e6:57:c0:13:cb:15:54:56:e3:08:cc:72:2a:97:fb:
51:ed:be:6e:41:73:23:d2:28:c2:05:55:a7:43:82:51:72:6c:
0c:ff:bb:25:d7:ed:5b:6a:2d:d1:19:d2:27:75:e2:a4:49:89:
98:78:96:fc:e2:16:dc:23:72:a5:ea:b8:6d:0b:91:87:f9:2c:
85:63:b9:2c:ab:24:8b:f6:e6:43:09:3f:92:1c:e8:4b:34:01:
69:97:13:51:bf:13:95:df:5b:b5:83:21:38:40:03:1a:ff:97:
20:74:f7:cb:e1:bf:b7:e6:05:e8:f8:9a:0c:10:69:48:3f:6d:
32:b7:59:d7:13:5a:ea:c7:6f:ed:49:4c:ce:dd:0f:81:02:e3:
59:00:39:be:98:5e:2e:18:39:f7:8b:c2:cb:34:e4:8e:6b:e7:
f4:18:50:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:31 2026 by rpki-client