Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/O1gPaiiuHk3Ynoh8wcqM-XkdraY.roa
File: O1gPaiiuHk3Ynoh8wcqM-XkdraY.roa (raw, json)
Hash identifier: suwi7xOa2pEQsq5Ilao9i/obnAr3R24ZSt95W5s3w8g=
Subject key identifier: 3B:58:0F:6A:28:AE:1E:4D:D8:9E:88:7C:C1:CA:8C:F9:79:1D:AD:A6
Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Certificate serial: 019F2369190C190EF43E4433BFD0266B1521
Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/O1gPaiiuHk3Ynoh8wcqM-XkdraY.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6453
IP address blocks: 89.39.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 18:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:19:0c:19:0e:f4:3e:44:33:bf:d0:26:6b:15:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b580f6a28ae1e4dd89e887cc1ca8cf9791dada6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:b5:d9:90:43:8a:d0:6d:0b:cb:c4:87:83:
43:73:c5:a7:62:82:dc:18:f9:ff:1e:00:79:35:9a:
b5:65:84:34:6b:d7:7e:f7:e7:e7:d8:02:7c:39:80:
79:ee:3c:1b:72:69:7f:90:0f:65:53:30:2d:a8:67:
a4:cf:b9:c3:54:10:f8:55:af:cb:fb:43:f5:b1:af:
38:91:e4:64:1b:40:6b:15:10:1d:93:7d:66:a2:a9:
a2:58:91:34:ab:c0:cb:63:f7:e9:65:96:91:33:1f:
59:20:be:7a:4f:dc:0f:1a:00:49:1a:34:db:de:79:
16:2a:67:c5:a7:9b:0a:8e:11:5a:fb:a0:50:68:0e:
40:da:df:7e:bb:f7:e4:ad:25:b6:6e:24:24:dd:7d:
af:00:1d:77:64:29:b2:b8:fe:07:40:49:31:54:6b:
ba:bb:9a:c1:3d:50:d4:3a:2f:b1:9f:8a:cb:d0:98:
fb:4d:1a:f3:13:f0:a2:1d:c4:b3:82:ac:1c:d9:45:
00:ed:91:68:98:d0:5c:56:bf:65:2f:24:20:15:70:
d7:40:16:20:d9:1b:18:1e:b4:e0:77:43:28:b8:3f:
3a:f0:91:f8:a2:02:b7:5c:ff:17:ba:a9:fb:75:87:
ff:68:89:e9:5e:a1:c7:71:7a:c8:76:ef:1e:ed:ca:
b5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:58:0F:6A:28:AE:1E:4D:D8:9E:88:7C:C1:CA:8C:F9:79:1D:AD:A6
X509v3 Authority Key Identifier:
keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/O1gPaiiuHk3Ynoh8wcqM-XkdraY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.6.0/24
Signature Algorithm: sha256WithRSAEncryption
06:04:4c:c1:23:30:44:fe:75:58:c7:07:08:02:5d:ab:e1:39:
99:bf:c3:ae:76:13:cf:ef:94:ad:fd:af:bc:bf:6d:ab:a5:9b:
21:f3:dd:9f:12:32:f6:42:69:00:2e:6f:51:dd:a9:6f:50:63:
2e:5b:45:35:61:7d:db:b8:13:94:82:5e:b6:86:9b:b7:eb:15:
0c:5e:73:ee:d8:60:fc:6e:c6:60:f0:d4:20:a9:16:33:16:a7:
8e:9b:0a:c4:8d:fe:50:0c:4e:ce:33:e2:76:68:85:23:45:50:
1b:fb:a6:bb:46:b8:ea:76:ce:b8:46:6c:a7:53:28:c2:4a:be:
2c:69:4b:c4:da:50:b0:e5:56:a7:f2:d0:41:4d:6b:b5:cf:aa:
63:a3:7c:74:c4:87:67:e2:37:75:58:97:9c:90:a7:a2:d0:76:
89:cd:b5:3b:b4:dd:ad:04:fc:81:9e:5d:78:cf:d0:a1:38:a1:
02:08:ef:a3:96:97:57:35:c3:71:e3:f8:58:2f:b4:c6:ea:e5:
00:87:c5:7e:a6:7e:11:98:5f:c7:90:b8:f7:a6:55:32:17:e2:
8f:d2:cd:56:0a:3d:48:c2:68:2b:80:c1:1f:17:34:83:2a:f7:
07:c8:dc:73:86:ba:39:09:81:70:46:ef:4e:29:70:41:7e:1d:
e8:43:f5:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaRkMGQ70PkQzv9AmaxUhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MTMwZTdkM2E3NjA5N2QwMmE5NThiM2YwMzk1ZGZkMTg3
ZDE3ZTIwHhcNMjYwNzAyMTUxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjU4MGY2YTI4YWUxZTRkZDg5ZTg4N2NjMWNhOGNmOTc5MWRhZGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTi12ZBDitBtC8vEh4NDc8WnYoLc
GPn/HgB5NZq1ZYQ0a9d+9+fn2AJ8OYB57jwbcml/kA9lUzAtqGekz7nDVBD4Va/L
+0P1sa84keRkG0BrFRAdk31moqmiWJE0q8DLY/fpZZaRMx9ZIL56T9wPGgBJGjTb
3nkWKmfFp5sKjhFa+6BQaA5A2t9+u/fkrSW2biQk3X2vAB13ZCmyuP4HQEkxVGu6
u5rBPVDUOi+xn4rL0Jj7TRrzE/CiHcSzgqwc2UUA7ZFomNBcVr9lLyQgFXDXQBYg
2RsYHrTgd0MouD868JH4ogK3XP8Xuqn7dYf/aInpXqHHcXrIdu8e7cq16QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDtYD2oorh5N2J6IfMHKjPl5Ha2mMB8GA1UdIwQY
MBaAFKcTDn06dgl9AqlYs/A5Xf0YfRfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt
MmVjZTA0ZTE4NWMyLzEvTzFnUGFpaXVIazNZbm9oOHdjcU0tWGtkcmFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy
LzEvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWScGMA0G
CSqGSIb3DQEBCwUAA4IBAQAGBEzBIzBE/nVYxwcIAl2r4TmZv8OudhPP75St/a+8
v22rpZsh892fEjL2QmkALm9R3alvUGMuW0U1YX3buBOUgl62hpu36xUMXnPu2GD8
bsZg8NQgqRYzFqeOmwrEjf5QDE7OM+J2aIUjRVAb+6a7Rrjqds64RmynUyjCSr4s
aUvE2lCw5Van8tBBTWu1z6pjo3x0xIdn4jd1WJeckKei0HaJzbU7tN2tBPyBnl14
z9ChOKECCO+jlpdXNcNx4/hYL7TG6uUAh8V+pn4RmF/HkLj3plUyF+KP0s1WCj1I
wmgrgMEfFzSDKvcHyNxzhro5CYFwRu9OKXBBfh3oQ/XX
-----END CERTIFICATE-----
Generated at Tue Jul 7 00:17:51 2026 by rpki-client