Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/OY_SE1N8ame6r8ii8x89C85c4VU.roa
File: OY_SE1N8ame6r8ii8x89C85c4VU.roa (raw, json)
Hash identifier: iSDJaXe98DJ3SvpFfDjaOj1ZRysi5CL+UHjwiAlKl2k=
Subject key identifier: 39:8F:D2:13:53:7C:6A:67:BA:AF:C8:A2:F3:1F:3D:0B:CE:5C:E1:55
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 01A07C13FE85585F1B65EC0E2476E9A9F9C0
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/OY_SE1N8ame6r8ii8x89C85c4VU.roa
Signing time: Mon 07 Sep 2026 13:34:40 +0000
ROA not before: Mon 07 Sep 2026 13:34:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 217.147.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:13:fe:85:58:5f:1b:65:ec:0e:24:76:e9:a9:f9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Sep 7 13:34:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=398fd213537c6a67baafc8a2f31f3d0bce5ce155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:27:96:f3:6e:8c:6a:ae:b6:9e:e7:71:63:22:
ce:00:47:18:ef:96:20:bb:ad:db:49:04:2f:93:a1:
6e:75:1f:38:e6:02:e2:79:e1:97:7b:22:2d:de:8b:
37:80:1e:dc:61:49:a7:ab:84:16:6d:ee:73:cf:0c:
2a:42:ac:34:aa:a7:0a:ad:e1:23:b9:5c:f0:58:3c:
e9:37:01:c7:56:06:2e:22:3e:9d:d2:fe:b5:29:b7:
97:61:30:85:b9:cb:96:d3:8e:96:d3:9f:a2:96:e9:
90:09:7f:a2:f4:c9:87:ae:6a:1c:88:6a:b3:cf:bb:
2a:71:1f:ea:3c:a3:15:70:b4:90:46:86:40:5c:95:
eb:33:d2:d4:be:54:45:d8:0c:23:c7:9f:fe:9d:e0:
21:ba:f1:e3:e3:e1:6f:09:28:a3:98:02:46:5a:ea:
52:45:ee:2b:47:e8:e6:bb:ac:7d:3c:e2:46:fa:77:
d4:d5:83:d4:0d:5d:44:b4:a8:65:1d:a7:d8:4f:73:
84:f4:cd:3f:29:b2:58:27:09:9f:ea:23:a2:1c:3a:
ee:f1:39:8a:4f:f9:ec:9b:81:4d:44:03:f0:92:8e:
97:37:e9:84:4d:c7:23:13:11:32:49:1a:05:3e:83:
f3:45:7d:13:eb:f4:7a:23:87:0c:59:58:bc:10:c3:
c0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8F:D2:13:53:7C:6A:67:BA:AF:C8:A2:F3:1F:3D:0B:CE:5C:E1:55
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/OY_SE1N8ame6r8ii8x89C85c4VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.168.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c6:20:c9:cb:4a:29:f6:bc:44:a7:42:5b:77:c9:46:8e:91:
07:9e:4e:50:0e:3b:33:59:36:8e:69:93:6d:bb:77:53:3f:66:
27:6e:68:d2:f2:2f:1d:36:12:24:e1:0c:30:0b:51:c0:7e:b1:
c7:24:ae:63:ed:78:b4:0c:bf:95:90:da:5f:bc:c3:ec:44:57:
6a:e9:87:78:95:48:13:31:8e:6a:cf:7d:45:b5:38:b0:28:9d:
72:66:07:56:0f:5a:61:c7:94:5a:de:7a:9c:8c:34:08:52:db:
fa:00:44:2f:d6:df:16:4b:bd:24:f9:1a:2a:74:68:5a:26:99:
62:d4:76:24:8f:dc:8b:99:d6:05:35:de:8c:5a:4e:da:48:e4:
04:91:3e:5b:22:16:87:75:3d:22:f8:d0:f2:d1:9d:5f:6c:35:
b8:bc:77:85:3f:fb:aa:50:66:1b:b3:4d:06:e0:4b:40:33:11:
0e:01:14:12:d2:c7:9a:b6:32:94:97:09:64:2f:71:47:40:a1:
40:ad:e5:b8:b0:db:90:61:5d:01:88:d8:ff:9d:a8:dc:c1:c8:
01:0e:43:13:32:c9:18:a7:06:95:fa:ab:61:38:f1:06:23:37:
2b:2d:65:c0:63:a7:ac:5a:33:ea:88:94:8f:a7:94:fe:df:3a:
de:94:cc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:30:00 2026 by rpki-client