Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OUBR8k-QU85bZtL1KyK7scFHBU8.roa
File: OUBR8k-QU85bZtL1KyK7scFHBU8.roa (raw, json)
Hash identifier: BCNyGxnMV8XYbp2ymJRyhgHXUTRWwsvvDW3KslspTMg=
Subject key identifier: 39:40:51:F2:4F:90:53:CE:5B:66:D2:F5:2B:22:BB:B1:C1:47:05:4F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A03EE7B8B6FD0C7E116EFE80958E66B7BE
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OUBR8k-QU85bZtL1KyK7scFHBU8.roa
Signing time: Wed 26 Aug 2026 16:29:28 +0000
ROA not before: Wed 26 Aug 2026 16:29:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205220
IP address blocks: 13.143.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:e7:b8:b6:fd:0c:7e:11:6e:fe:80:95:8e:66:b7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 26 16:29:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=394051f24f9053ce5b66d2f52b22bbb1c147054f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7b:fc:02:98:c6:e1:48:b7:ea:f8:f2:77:2e:
e5:3f:00:b7:5f:f4:46:ed:0a:7c:7d:fb:63:69:8b:
da:b8:45:2e:bb:2e:c9:d1:49:70:09:0e:d3:75:85:
15:41:3b:b0:3c:bd:64:6c:40:32:6e:d8:15:4c:d3:
44:8e:9b:f4:7b:ee:73:1b:c6:4a:9e:c2:74:31:dd:
75:87:fe:77:d5:69:b9:7a:97:76:af:88:4b:3b:0d:
8d:2f:34:6c:83:13:82:de:f7:c6:57:42:57:a4:8a:
b7:83:46:a1:27:3d:a8:f1:46:7b:58:80:fb:b0:b3:
2a:fb:64:3a:ae:f6:20:81:4a:f7:67:93:4a:ce:c8:
95:b6:e0:fe:28:ad:f5:bd:44:04:cf:6d:ce:72:07:
4f:dc:dd:58:c1:c6:21:bf:12:74:08:cd:58:97:66:
83:86:da:f6:af:90:d7:9e:cb:45:ac:d7:4a:dc:ca:
66:e0:11:4c:ab:c2:2a:33:b6:a4:70:71:2e:3d:f6:
f6:73:a7:25:c0:4b:5b:a2:88:ea:f0:0d:b9:e3:e8:
9c:ce:31:8c:a5:a9:d9:93:8b:14:b4:b4:30:ab:60:
71:20:8c:04:5c:c8:45:0b:3c:21:fb:c8:c4:e4:f4:
27:5f:19:d9:34:28:65:53:7e:c0:e6:09:91:2b:df:
c8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:40:51:F2:4F:90:53:CE:5B:66:D2:F5:2B:22:BB:B1:C1:47:05:4F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OUBR8k-QU85bZtL1KyK7scFHBU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.207.0/24
Signature Algorithm: sha256WithRSAEncryption
02:18:7a:50:08:a1:58:41:05:e5:d7:a3:89:17:39:42:70:f1:
94:19:c6:20:55:bd:78:9a:ad:18:cd:7a:47:27:30:a9:4f:04:
ca:55:41:0d:05:51:b6:e5:03:74:3a:91:cc:48:fa:1c:e3:7f:
32:03:f0:62:fe:63:11:21:6f:9c:68:47:f9:67:cd:17:c0:9a:
ca:05:7c:08:e1:a2:57:07:1b:ac:1b:a0:ce:8a:7b:17:74:8d:
26:d2:f0:2f:1c:2b:c9:07:f2:c3:3c:35:df:de:49:e9:24:80:
d0:fb:45:db:1b:37:d3:0e:4e:37:00:af:c4:1c:03:f6:40:a2:
5f:7d:77:87:55:bc:69:96:ed:9e:ee:bb:d9:01:90:10:48:68:
af:9c:8c:c2:93:0d:68:35:78:90:61:39:05:e7:ab:5f:c6:a4:
69:c8:2c:84:aa:88:1c:ad:cc:d5:57:a1:33:3e:80:12:09:4e:
49:f5:00:37:65:dc:1c:c5:9a:eb:a6:b6:e6:dd:be:e6:a6:34:
70:23:d6:bc:98:db:3e:a1:fc:87:8f:73:bc:bd:c0:6f:28:9f:
93:de:4b:a0:98:32:54:6a:7c:fd:7f:e9:ba:e9:df:dc:0d:4f:
8a:2f:6c:f9:29:1f:a0:8a:9c:48:f3:79:c8:92:76:9d:a7:39:
60:48:cb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:48 2026 by rpki-client