Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/ogCVM0_FD3R6QEvyBDBHVazHJl0.roa
File: ogCVM0_FD3R6QEvyBDBHVazHJl0.roa (raw, json)
Hash identifier: P5tzcX+u+5K9X4wyuw7Cue/raY9HNdmFL+lkgKXUyB4=
Subject key identifier: A2:00:95:33:4F:C5:0F:74:7A:40:4B:F2:04:30:47:55:AC:C7:26:5D
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019F60602DD402575D58A7EB74D527F3C2EB
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/ogCVM0_FD3R6QEvyBDBHVazHJl0.roa
Signing time: Tue 14 Jul 2026 11:25:43 +0000
ROA not before: Tue 14 Jul 2026 11:25:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401293
IP address blocks: 2a13:5040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:60:2d:d4:02:57:5d:58:a7:eb:74:d5:27:f3:c2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jul 14 11:25:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a20095334fc50f747a404bf204304755acc7265d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:02:02:6a:bc:fc:da:b8:68:6c:a9:07:95:1d:
37:a5:28:fd:98:7f:af:85:14:2c:c6:86:4a:28:0a:
78:d8:5c:f5:84:d5:ef:bc:64:71:e5:5d:3a:41:65:
e2:3c:82:56:ff:83:ce:53:85:d8:ee:55:16:ee:53:
37:4c:88:73:03:42:23:50:67:5b:ce:b0:5c:74:a5:
25:48:f1:e9:d6:fc:5e:8b:c0:2e:e2:2c:31:4f:04:
b2:b0:32:5b:fe:bc:92:68:9f:90:ff:85:65:ba:2a:
96:2b:c2:10:24:6f:5e:a9:c4:6d:8e:11:a4:dd:72:
12:16:a6:f7:94:73:f8:76:f1:95:03:f9:72:92:08:
99:df:f0:47:58:a7:24:10:9a:56:88:dd:22:ff:dd:
33:48:3f:b0:16:13:7a:79:23:54:79:ff:81:ff:87:
04:28:8f:79:d7:e6:7e:95:d7:f4:86:50:86:dd:16:
c7:56:4d:8e:00:9c:31:9b:e1:16:a7:9d:08:40:12:
b1:dc:bc:f3:10:fb:a6:4e:2e:7e:1c:b7:ad:5e:6a:
7d:b7:b9:64:c2:65:13:08:46:c5:62:74:19:c7:b2:
bd:df:cf:70:48:cc:83:c8:91:6c:70:b8:44:7d:b6:
58:8e:fe:09:77:b2:d4:59:78:cc:16:23:3a:14:6b:
cc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:00:95:33:4F:C5:0F:74:7A:40:4B:F2:04:30:47:55:AC:C7:26:5D
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/ogCVM0_FD3R6QEvyBDBHVazHJl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5040::/29
Signature Algorithm: sha256WithRSAEncryption
25:4b:42:2c:20:c0:a7:50:d4:c8:6a:c8:cc:26:b4:5f:50:53:
14:2d:3c:08:d0:e2:5a:8a:72:9c:d3:e2:ea:0f:dc:73:9b:6a:
8b:ce:0b:e2:7a:bf:b7:72:8d:e2:32:cf:0f:22:f7:df:58:74:
07:7b:ef:78:78:46:26:68:64:f5:3b:15:3c:7f:82:ee:b7:b2:
8a:7a:cf:cb:86:85:07:08:dc:0b:80:96:c8:98:e4:fa:38:e2:
4a:e4:d7:dc:45:49:27:0c:0f:75:9a:1f:9e:32:ca:a4:f0:e8:
08:56:c5:50:19:bb:a0:54:80:15:5b:84:b7:75:56:51:ed:56:
db:19:4b:43:91:a0:c0:03:9d:8b:ff:59:7b:56:af:50:25:35:
8f:4e:13:7b:37:78:ae:d0:fd:21:81:14:45:aa:9d:13:a8:26:
2e:c9:59:24:84:a9:4f:1d:2d:d0:77:1b:9b:01:95:e8:5f:e5:
8e:f1:b6:19:2a:fd:d6:40:c0:62:d5:5e:47:b2:eb:ca:48:4d:
ac:57:ab:49:f4:47:1c:a7:dc:a0:a4:9c:9b:a6:14:16:c2:96:
e6:77:c5:6c:36:16:88:9c:35:4c:37:7d:14:ae:0a:d9:34:02:
a3:c5:1b:d4:b7:82:34:bb:88:98:d4:31:38:e5:61:bf:08:5d:
46:25:3b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:18 2026 by rpki-client