Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/OvhjYvjn3_wXCLzkv0-qvjrnP2c.roa
File: OvhjYvjn3_wXCLzkv0-qvjrnP2c.roa (raw, json)
Hash identifier: PASGQrxnaPPVfG8wveLmu1yblEkfFRY9IVmAZk+6rdk=
Subject key identifier: 3A:F8:63:62:F8:E7:DF:FC:17:08:BC:E4:BF:4F:AA:BE:3A:E7:3F:67
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A116D7D7112510890F5D7BAA328838244C
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/OvhjYvjn3_wXCLzkv0-qvjrnP2c.roa
Signing time: Wed 07 Oct 2026 14:50:06 +0000
ROA not before: Wed 07 Oct 2026 14:50:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 394503
IP address blocks: 2a10:fa80:140::/48 maxlen: 48
2a10:fa80:141::/48 maxlen: 48
2a10:fa80:142::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:d7:d7:11:25:10:89:0f:5d:7b:aa:32:88:38:24:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Oct 7 14:50:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3af86362f8e7dffc1708bce4bf4faabe3ae73f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:35:c1:7e:4f:92:19:9c:70:51:18:b4:7b:
72:53:78:e5:95:14:7d:e3:3c:2c:3b:db:80:b3:07:
db:93:36:9b:4d:7d:13:36:18:48:10:09:ef:a9:e2:
42:c7:b3:98:b0:fb:8e:d9:b3:af:66:21:97:dd:4d:
57:86:d3:75:2e:0c:6d:25:14:b9:3b:14:a7:0f:53:
a8:0c:01:c2:5d:fd:02:3b:88:c3:fe:a7:0d:6c:c6:
55:31:08:ee:14:c2:96:2e:47:79:7c:62:ba:e0:04:
5a:cc:dc:58:18:fa:d4:51:78:1a:9d:28:0e:aa:5a:
87:b9:ba:51:49:e2:84:56:74:90:37:7c:ee:1b:c5:
78:9d:11:14:e8:5b:06:a6:cb:2c:4d:cb:97:71:a3:
fe:bb:c8:0a:0b:2b:4e:3c:3b:6e:5a:da:a4:75:7b:
e9:4c:f6:29:18:16:8a:fa:45:39:4e:fe:14:cf:f6:
01:ad:ba:00:5c:41:6e:78:b3:1a:50:de:97:98:c4:
47:fb:8a:cd:d9:2a:26:f0:9d:b8:9a:7d:06:66:95:
9b:96:2d:79:bd:8a:e1:d2:d9:db:8a:2d:dc:ab:27:
86:3c:b6:d6:8a:49:b2:e1:df:f3:22:0c:f5:be:d1:
55:ed:72:40:56:5c:3b:93:d6:18:a1:fc:18:2b:dd:
d2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F8:63:62:F8:E7:DF:FC:17:08:BC:E4:BF:4F:AA:BE:3A:E7:3F:67
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/OvhjYvjn3_wXCLzkv0-qvjrnP2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:140::-2a10:fa80:142:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2d:ee:3b:1f:57:34:08:26:14:03:fd:37:01:86:84:d7:14:9b:
88:a1:f4:93:f5:1d:56:fe:52:a9:aa:aa:b4:5b:e1:41:d9:10:
61:bf:ae:14:cc:97:c4:90:9f:ed:25:aa:e0:2b:7e:76:f9:d6:
2f:0e:da:32:a9:43:45:48:f2:94:5b:1c:c9:fb:b3:22:a2:dd:
6a:db:ac:5d:9a:ba:0f:93:4c:5f:44:71:d0:a2:1b:98:1a:78:
31:be:60:76:d4:82:f7:34:9c:69:32:d6:af:37:ce:d2:a1:80:
e2:c9:66:e2:6f:8f:a8:37:cf:10:6b:17:4a:58:6b:e0:90:50:
6c:74:9e:41:8e:87:94:eb:d1:a1:05:1f:6f:1a:e3:22:6d:a0:
8d:f6:ae:b4:f8:c0:bd:5a:23:b9:14:ee:a3:9c:c5:f6:b4:22:
0a:67:4f:98:4a:98:f2:99:ed:44:d2:ac:7d:51:dc:ba:d8:82:
4e:5a:9a:12:af:b6:88:a1:ea:eb:f9:a1:41:3b:53:d3:db:3c:
bf:3b:40:ae:07:8d:0c:fc:6e:7f:94:30:00:ff:45:00:ff:8d:
ea:cc:20:e5:d9:03:fb:7a:83:6e:23:64:95:a0:8d:77:69:02:
11:7d:24:b3:0d:78:ce:a2:91:f6:a1:a1:78:7b:fd:72:05:66:
ff:87:6e:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 12 19:04:56 2026 by rpki-client