Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ocvs0xJgvnYOlkU7g_PsYJ8jzkI.roa
File: ocvs0xJgvnYOlkU7g_PsYJ8jzkI.roa (raw, json)
Hash identifier: NDkizho/VVHKiL/ocU+qMBQwzE5gvlQ/xJmsHF69Dig=
Subject key identifier: A1:CB:EC:D3:12:60:BE:76:0E:96:45:3B:83:F3:EC:60:9F:23:CE:42
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019E9349D7B0F63B60FE0C5A47FCAA83988E
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ocvs0xJgvnYOlkU7g_PsYJ8jzkI.roa
Signing time: Thu 04 Jun 2026 15:39:10 +0000
ROA not before: Thu 04 Jun 2026 15:39:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36530
IP address blocks: 77.246.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:49:d7:b0:f6:3b:60:fe:0c:5a:47:fc:aa:83:98:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jun 4 15:39:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1cbecd31260be760e96453b83f3ec609f23ce42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:e1:23:f8:5f:a9:1f:33:10:d4:83:d7:50:
d1:56:df:9d:e0:8a:00:84:25:d7:e8:3f:d0:8e:8d:
7e:41:45:97:40:c8:51:4a:5f:17:d2:d1:ca:b8:09:
24:ce:d1:cb:15:f0:11:63:34:70:27:b7:30:a5:df:
81:c2:29:a6:e7:fd:58:01:f6:ff:a2:e1:d4:1c:a6:
95:e3:28:25:b8:4b:8c:c6:4a:c0:f4:50:12:34:f9:
b5:84:46:22:c9:e9:ee:5c:9a:5f:79:03:d2:a2:3a:
d8:5f:60:ea:5a:37:fd:15:35:fc:d9:90:ea:45:21:
e8:6e:72:5b:63:e1:c9:40:bb:88:7f:4b:32:10:70:
43:b5:30:7d:d0:c7:a9:3c:06:ab:85:01:c9:eb:14:
37:ac:55:ad:4b:bb:b1:12:7f:f7:07:7a:3e:36:df:
79:7d:96:99:07:7c:56:2c:07:e4:0c:a4:e1:e9:05:
89:28:aa:30:d9:ef:42:37:ea:64:30:d0:dd:c1:5d:
d0:74:bd:74:7e:06:ff:6a:f0:7d:ef:c9:d9:ac:e4:
40:c5:79:b3:fd:da:3a:cb:23:f3:5e:e6:27:fc:2d:
31:2d:ef:be:21:bc:25:b6:26:25:9f:8f:f4:2d:79:
e1:16:ed:62:c0:a5:e3:af:1d:73:ec:f6:4f:11:18:
49:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CB:EC:D3:12:60:BE:76:0E:96:45:3B:83:F3:EC:60:9F:23:CE:42
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ocvs0xJgvnYOlkU7g_PsYJ8jzkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:fa:bc:c1:da:94:be:64:5e:41:2c:9b:65:ec:7f:75:58:d4:
79:7e:c7:ca:51:01:01:60:94:bc:a3:36:32:0d:c8:17:13:be:
db:08:12:ad:e5:e3:5f:50:39:97:fa:7d:ba:50:fb:34:d9:b7:
38:89:d5:1a:55:63:7e:a9:85:4f:2f:ff:55:90:ca:a0:9d:ec:
e9:54:58:f9:5d:f3:72:58:b0:d9:de:2f:94:a4:fa:65:e3:cb:
56:17:9f:bc:95:3c:ae:87:a9:75:f1:1d:50:c4:cb:24:cb:15:
d7:3c:8b:74:03:16:01:b3:89:a7:b3:16:c0:c3:00:4e:eb:d4:
02:21:9f:7a:8d:34:98:27:5d:cb:34:45:9b:a1:1d:a0:3c:df:
7f:3c:07:99:f9:98:fd:2b:0b:f1:2a:d0:9f:3f:49:cc:99:98:
dd:bb:54:b6:f5:8e:3d:12:ef:a6:e9:28:6c:ab:4c:ea:1a:d5:
45:af:d4:62:a1:0d:a6:c9:b6:27:30:a6:5b:1c:cc:31:58:9c:
50:b6:4a:68:7c:4c:c4:04:50:32:51:88:58:80:12:e5:34:31:
69:d8:fb:71:94:d3:2f:8d:ac:b2:9f:a3:1b:d1:e0:8b:3e:12:
42:de:16:41:c3:f4:8e:e8:6d:84:e8:52:2f:bf:03:44:63:6a:
82:08:4b:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6TSdew9jtg/gxaR/yqg5iOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjYwNjA0MTUzOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWNiZWNkMzEyNjBiZTc2MGU5NjQ1M2I4M2YzZWM2MDlmMjNjZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9rhI/hfqR8zENSD11DRVt+d4IoA
hCXX6D/Qjo1+QUWXQMhRSl8X0tHKuAkkztHLFfARYzRwJ7cwpd+Bwimm5/1YAfb/
ouHUHKaV4ygluEuMxkrA9FASNPm1hEYiyenuXJpfeQPSojrYX2DqWjf9FTX82ZDq
RSHobnJbY+HJQLuIf0syEHBDtTB90MepPAarhQHJ6xQ3rFWtS7uxEn/3B3o+Nt95
fZaZB3xWLAfkDKTh6QWJKKow2e9CN+pkMNDdwV3QdL10fgb/avB978nZrORAxXmz
/do6yyPzXuYn/C0xLe++IbwltiYln4/0LXnhFu1iwKXjrx1z7PZPERhJVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKHL7NMSYL52DpZFO4Pz7GCfI85CMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvb2N2czB4Smd2bllPbGtVN2dfUHNZSjhqemtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfbcMA0G
CSqGSIb3DQEBCwUAA4IBAQBa+rzB2pS+ZF5BLJtl7H91WNR5fsfKUQEBYJS8ozYy
DcgXE77bCBKt5eNfUDmX+n26UPs02bc4idUaVWN+qYVPL/9VkMqgnezpVFj5XfNy
WLDZ3i+UpPpl48tWF5+8lTyuh6l18R1QxMskyxXXPIt0AxYBs4mnsxbAwwBO69QC
IZ96jTSYJ13LNEWboR2gPN9/PAeZ+Zj9KwvxKtCfP0nMmZjdu1S29Y49Eu+m6Shs
q0zqGtVFr9RioQ2mybYnMKZbHMwxWJxQtkpofEzEBFAyUYhYgBLlNDFp2PtxlNMv
jayyn6Mb0eCLPhJC3hZBw/SO6G2E6FIvvwNEY2qCCEvl
-----END CERTIFICATE-----
Generated at Sat Jun 6 05:40:56 2026 by rpki-client