Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/OBPTg2h93nMRgYHf_TenncbSH3w.roa
File: OBPTg2h93nMRgYHf_TenncbSH3w.roa (raw, json)
Hash identifier: DcawVmKkXAq6yOPTfF+1ZtbO8p4q24hhfvuSmUJsz+Y=
Subject key identifier: 38:13:D3:83:68:7D:DE:73:11:81:81:DF:FD:37:A7:9D:C6:D2:1F:7C
Certificate issuer: /CN=8d11662beb3257de1c0340e412ed9d1995c0f5ff
Certificate serial: 019F23688F9D90E4DE5F0CA25823BFF3A6AA
Authority key identifier: 8D:11:66:2B:EB:32:57:DE:1C:03:40:E4:12:ED:9D:19:95:C0:F5:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/OBPTg2h93nMRgYHf_TenncbSH3w.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12480
IP address blocks: 194.59.13.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8f:9d:90:e4:de:5f:0c:a2:58:23:bf:f3:a6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11662beb3257de1c0340e412ed9d1995c0f5ff
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3813d383687dde73118181dffd37a79dc6d21f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:89:6a:97:f9:f6:d7:9c:bf:5e:5a:b7:d3:
47:6f:a3:b9:d2:0d:67:95:1f:ed:1b:7d:dc:ba:86:
30:fe:5a:88:a8:66:c7:f5:2a:03:2e:66:13:6e:a5:
37:e8:7b:7f:a1:22:59:71:0c:ae:86:fa:73:1c:f3:
5a:c7:e3:3e:c1:c7:93:a5:b3:eb:44:9e:cf:84:f8:
df:f9:a5:61:2e:f8:24:95:af:c0:20:5c:6e:fd:f0:
3c:af:9f:32:d7:29:47:25:3f:5c:10:59:2a:a3:79:
fb:e9:2c:22:9a:cc:d3:d7:8b:c3:d8:ea:a7:2a:fc:
a0:1d:58:cc:ea:f0:8c:ed:b7:6f:f5:25:00:5c:af:
f1:e4:93:c6:6a:03:19:61:7d:ff:c1:42:49:fa:83:
dd:46:59:d7:8c:e1:6c:43:1c:70:b2:41:6d:0e:1a:
ac:54:fa:16:28:e9:6d:0c:0a:e9:c1:a4:2f:35:22:
35:11:13:72:ea:b5:3e:df:9c:38:a8:63:f1:59:59:
54:da:87:cf:6a:ae:91:7e:e3:6f:ff:25:77:c2:6f:
10:9d:8a:87:40:f0:69:bf:b1:62:c9:18:a2:e1:d8:
1d:62:8f:7b:7d:8e:96:ad:b3:54:84:ac:47:0a:db:
f4:77:a9:ff:04:2b:8b:44:75:d0:32:72:22:1c:d1:
e2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:13:D3:83:68:7D:DE:73:11:81:81:DF:FD:37:A7:9D:C6:D2:1F:7C
X509v3 Authority Key Identifier:
keyid:8D:11:66:2B:EB:32:57:DE:1C:03:40:E4:12:ED:9D:19:95:C0:F5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/OBPTg2h93nMRgYHf_TenncbSH3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.13.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:95:92:39:23:38:b0:ec:01:31:c4:0f:c2:15:ac:47:70:a0:
ea:f1:8b:b1:57:97:02:78:fe:4a:00:2f:b3:bc:22:51:17:f8:
0a:99:39:2b:99:a1:97:9d:4d:8c:c8:33:a7:91:21:f0:65:ed:
14:96:71:4f:5d:1a:ae:35:77:5d:6e:eb:86:59:e6:63:81:92:
2f:b9:68:27:74:1b:3e:7b:f4:17:60:09:3b:3d:97:5e:40:53:
1e:8f:31:a3:74:51:94:9f:c7:10:ec:da:bc:e2:31:26:d7:54:
67:d6:6b:e1:86:09:6e:80:9e:5c:8a:0e:54:54:77:a1:5e:ca:
61:cd:bb:59:49:60:71:52:fe:36:62:2e:fb:5d:aa:69:1e:b3:
ec:2a:48:c0:52:7c:4b:5e:43:d0:00:5d:53:94:72:eb:d7:52:
96:fc:34:a2:2c:08:5f:cb:24:c4:b4:3f:5e:a0:0f:76:07:62:
03:0d:b3:01:cf:88:1c:c7:b8:0a:8e:07:57:d7:7b:67:9b:0a:
ee:33:1c:2e:62:5f:cf:6e:c2:04:c0:57:78:d2:6a:be:76:72:
ff:98:5a:ab:a5:e3:77:df:f7:07:95:83:85:83:da:32:7e:be:
10:ae:7d:5c:84:bb:d3:5c:8e:9b:b9:cb:cc:5f:4e:8f:83:3b:
0a:a2:d2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:12:10 2026 by rpki-client