Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/OVHSagD4rk2jlSY4Ssyk1A9POtY.roa
File: OVHSagD4rk2jlSY4Ssyk1A9POtY.roa (raw, json)
Hash identifier: TNMSOwsAYXzaiP27uwu/RNejM3IG9BPDGWPuKPmTCPw=
Subject key identifier: 39:51:D2:6A:00:F8:AE:4D:A3:95:26:38:4A:CC:A4:D4:0F:4F:3A:D6
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01A1296177171F780D350ED34DC09DCA8875
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/OVHSagD4rk2jlSY4Ssyk1A9POtY.roa
Signing time: Sun 11 Oct 2026 05:13:35 +0000
ROA not before: Sun 11 Oct 2026 05:13:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a01:f040::/29 maxlen: 29
2a0b:b480::/29 maxlen: 29
2a0e:d300::/29 maxlen: 29
2a0f:63c0::/29 maxlen: 29
2a0f:89c0::/29 maxlen: 29
2a0f:e3c0::/29 maxlen: 29
2a10:7ac0::/29 maxlen: 29
2a13:b740::/29 maxlen: 29
2a13:be40::/29 maxlen: 29
2a13:d0c0::/29 maxlen: 29
2a13:d1c0::/29 maxlen: 29
2a13:dd40::/29 maxlen: 29
2a13:dfc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:61:77:17:1f:78:0d:35:0e:d3:4d:c0:9d:ca:88:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Oct 11 05:13:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3951d26a00f8ae4da39526384acca4d40f4f3ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8a:9a:a9:a7:6e:6f:9e:17:d9:6e:2c:22:fd:
bf:c1:a7:cb:45:7c:ec:fe:36:15:8f:3d:fb:8e:fe:
77:d4:d8:db:0c:73:c3:6f:e6:a7:b3:77:f0:b0:b6:
85:8a:32:8a:66:48:6c:df:20:ff:d0:2d:03:ee:f8:
ac:11:6d:c1:5f:7e:41:26:6a:03:f3:95:9f:19:78:
bd:a1:72:07:32:83:a3:3b:25:c2:b5:34:89:f5:8a:
42:86:49:c0:96:0d:c9:29:f3:cc:15:38:38:e3:fb:
26:b8:85:d3:b3:38:43:ec:19:bf:7b:46:45:57:a7:
b3:1e:ee:7d:1b:4d:f9:1c:61:d8:43:f3:36:ff:98:
74:a4:c9:36:0f:57:41:53:1d:fc:0a:2e:83:6c:06:
bd:12:57:cc:82:3b:78:97:9f:ab:cd:3a:35:27:98:
1a:21:eb:52:bc:e1:7c:e5:4f:2a:d4:96:69:0e:9f:
95:d4:18:02:03:a9:49:54:33:1a:ba:ff:a7:48:7c:
87:a8:45:9d:b1:ac:6c:81:05:99:fe:d0:d9:7c:36:
81:30:e5:ea:e1:f4:97:61:10:f3:cd:06:d0:e1:a3:
88:9e:d9:97:39:f9:91:d0:d7:60:fe:55:0a:76:d1:
a4:8b:8a:1b:31:27:d3:90:c9:eb:04:86:9d:ab:11:
94:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:51:D2:6A:00:F8:AE:4D:A3:95:26:38:4A:CC:A4:D4:0F:4F:3A:D6
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/OVHSagD4rk2jlSY4Ssyk1A9POtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f040::/29
2a0b:b480::/29
2a0e:d300::/29
2a0f:63c0::/29
2a0f:89c0::/29
2a0f:e3c0::/29
2a10:7ac0::/29
2a13:b740::/29
2a13:be40::/29
2a13:d0c0::/29
2a13:d1c0::/29
2a13:dd40::/29
2a13:dfc0::/29
Signature Algorithm: sha256WithRSAEncryption
9e:9e:9e:6d:d5:fe:d2:86:f2:cb:09:61:dc:f2:e6:57:99:5f:
dd:b3:b6:42:e2:2f:61:0c:e4:54:af:97:50:60:a1:ea:1a:9c:
c7:5c:c4:11:d1:e6:b6:14:f6:95:6f:08:d4:f4:40:0f:2e:84:
88:d9:ad:94:c9:fe:b2:17:b1:68:97:a9:88:2c:50:01:bb:10:
55:a6:47:18:47:a0:88:d3:40:69:ff:0b:55:0a:e4:83:d3:1b:
c3:b5:43:34:5a:55:c1:06:bd:15:32:4c:92:01:d2:2a:54:a0:
da:99:06:6a:cf:84:4d:53:d2:d8:f2:7f:eb:10:6c:bc:35:62:
8c:09:1b:5b:c3:b0:bb:bc:55:0b:b1:49:d6:2c:c5:1a:a4:02:
89:04:29:f1:eb:6e:e4:20:3a:39:0a:7e:13:f6:11:16:27:ef:
4e:47:06:d3:77:be:ac:a3:4b:d9:f7:5d:a4:da:3f:b5:39:79:
87:a3:44:fb:0a:18:90:f9:a1:9d:71:04:9f:d7:f9:13:3c:2e:
92:3c:c1:da:36:66:81:c5:98:59:a1:88:dd:1b:e4:bc:a4:fb:
eb:f6:e8:f7:b2:e0:05:c4:ab:28:f0:5a:65:42:54:e9:ca:e7:
e1:1c:36:07:6d:a0:7f:ff:a8:68:f2:d1:99:46:40:93:10:02:
3e:dc:cf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:25 2026 by rpki-client