Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/oVS7O6Cx3sEy_lE8ooU6HMjR0Gc.roa
File: oVS7O6Cx3sEy_lE8ooU6HMjR0Gc.roa (raw, json)
Hash identifier: ahCanAa7DPFoacnm1PaGMrsVdd4gqMEpt4NKPg5Bsj0=
Subject key identifier: A1:54:BB:3B:A0:B1:DE:C1:32:FE:51:3C:A2:85:3A:1C:C8:D1:D0:67
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 019FC9687AE0B94C5C83B311BB9019B4A754
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/oVS7O6Cx3sEy_lE8ooU6HMjR0Gc.roa
Signing time: Mon 03 Aug 2026 20:54:55 +0000
ROA not before: Mon 03 Aug 2026 20:54:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 195.5.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c9:68:7a:e0:b9:4c:5c:83:b3:11:bb:90:19:b4:a7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Aug 3 20:54:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a154bb3ba0b1dec132fe513ca2853a1cc8d1d067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c1:82:dc:b5:9a:4f:e8:77:e1:9e:65:6c:c6:
86:f7:09:02:6e:ad:b7:e9:d8:b8:8b:1a:34:70:1a:
10:58:2b:29:66:ea:17:86:60:98:35:ed:0d:1c:91:
65:05:f4:74:9f:a9:ed:a6:8e:32:68:4c:66:c3:fa:
e1:a6:01:4e:8d:62:81:5d:7e:9c:dc:23:29:4a:49:
7c:3a:ba:c8:c6:41:2b:cc:7b:e5:50:3e:bb:a3:cd:
8f:6c:0d:71:46:ad:a0:6b:eb:1f:53:76:a8:40:18:
ea:2f:fa:f4:ed:f9:44:c8:5f:f5:55:ef:23:aa:54:
d7:29:7b:9e:22:2e:8a:52:cf:0a:28:f9:aa:0c:59:
71:33:1c:f5:ec:43:22:87:96:b3:58:4a:3c:f4:fa:
ac:82:7a:0f:ba:dc:2b:dc:ad:1d:b5:1c:b4:e9:77:
90:96:1e:bc:d8:7a:0b:79:90:e3:47:f6:c8:88:91:
46:cf:4b:9f:6f:e5:59:b0:ff:ee:e5:a4:b5:74:b5:
54:6b:b7:a0:e1:a4:ee:19:e8:45:59:1d:d4:48:ac:
05:a6:06:07:08:e2:03:48:ba:58:e2:3c:9e:bb:64:
7a:91:0c:f2:61:a4:b8:fc:c7:8a:56:0c:55:4c:42:
d0:c5:a2:39:73:5d:b9:9a:94:d4:3e:c9:64:1b:95:
95:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:54:BB:3B:A0:B1:DE:C1:32:FE:51:3C:A2:85:3A:1C:C8:D1:D0:67
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/oVS7O6Cx3sEy_lE8ooU6HMjR0Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.125.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e2:76:1b:05:14:78:e9:7c:42:31:f8:bd:c8:e0:42:33:36:
57:8f:6b:38:57:ab:3b:2d:14:5e:bf:ae:01:be:f1:9e:57:d3:
80:d7:0a:34:da:1e:67:98:2b:34:eb:30:af:93:fe:0e:0a:ab:
66:28:5c:a7:3b:f3:c3:d7:ee:e9:6b:f5:35:3d:3c:b6:4d:af:
32:5c:ff:d7:04:6b:1b:10:f0:17:25:ad:aa:f2:8c:f4:0f:a6:
ce:8a:12:6b:4f:c6:46:5a:63:09:a8:12:f7:46:48:9d:eb:76:
39:3a:74:a2:99:ff:02:8f:8d:4b:1d:e8:ca:d5:1a:11:84:88:
37:ca:e9:11:58:ed:9c:9d:0b:3d:56:8e:d4:c7:ae:30:37:90:
4d:78:60:f1:ff:ec:13:93:73:2d:26:74:ea:e6:c3:ed:dc:5b:
fa:a4:d2:87:fc:41:26:cb:f9:43:92:05:1a:9c:4d:0e:98:a1:
08:be:bc:5e:33:d0:cd:50:db:98:a7:6d:60:dd:15:3c:c7:5f:
d1:e1:14:35:18:8e:e0:97:81:f5:b6:a3:64:95:f0:9a:3b:46:
7d:a3:af:1c:a9:15:35:ff:94:48:b1:a5:e0:8f:d6:a7:9f:6d:
1e:7c:c2:1e:0b:71:a8:2e:b0:8e:9b:d7:eb:84:17:cd:de:8c:
29:8c:2c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:03 2026 by rpki-client