Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/Ov83ySv3sFV7M88SSWflw9--a-0.roa
File: Ov83ySv3sFV7M88SSWflw9--a-0.roa (raw, json)
Hash identifier: SVhdkcQVattKFVMXSZeL1xJo615LAy5BBiDbcYL9ck8=
Subject key identifier: 3A:FF:37:C9:2B:F7:B0:55:7B:33:CF:12:49:67:E5:C3:DF:BE:6B:ED
Certificate issuer: /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial: 019E836CD00DFB8EEB97ADCED684699B9216
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/Ov83ySv3sFV7M88SSWflw9--a-0.roa
Signing time: Mon 01 Jun 2026 13:43:26 +0000
ROA not before: Mon 01 Jun 2026 13:43:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214454
IP address blocks: 2a12:e100:30::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:6c:d0:0d:fb:8e:eb:97:ad:ce:d6:84:69:9b:92:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Validity
Not Before: Jun 1 13:43:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3aff37c92bf7b0557b33cf124967e5c3dfbe6bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2e:29:77:bd:a6:2c:68:17:ad:24:bd:63:dc:
9e:23:c5:f0:fc:b8:21:62:7f:7b:d5:29:91:f2:f2:
44:a1:ed:aa:3c:88:57:a7:94:ac:e9:28:b9:d5:93:
12:60:5d:7d:b4:53:17:55:b9:35:70:7e:47:a0:23:
fe:17:73:19:ed:ca:77:58:8d:f8:7e:28:54:97:4e:
af:a6:c7:7d:02:2e:fd:6c:a2:ed:21:84:16:a6:c9:
f2:44:2a:7c:b8:74:ae:30:fd:7a:04:97:f9:00:9c:
ed:88:23:3c:9a:80:1b:e5:eb:42:bf:13:a0:51:74:
99:79:9c:23:75:85:9a:46:4f:28:54:61:3f:ab:1f:
8f:52:26:ca:9a:8d:ec:5f:52:07:93:f6:e2:97:e9:
ad:c8:b1:0d:aa:6f:ad:81:b4:6c:eb:92:dc:63:b6:
e3:69:c9:55:f1:12:40:5d:ad:1d:b2:62:03:92:75:
1b:8f:5e:bb:8e:6c:68:34:08:8d:09:68:ac:a4:8f:
77:bd:0b:2e:97:66:29:60:d4:94:05:da:13:b3:ca:
2b:eb:b6:cf:e7:88:fd:08:63:1b:40:ca:35:49:2a:
8a:40:a3:28:e3:b9:9f:7f:4b:4b:1f:64:c2:7c:19:
a9:f4:c9:55:a4:7a:8b:ce:c3:46:2d:d7:f1:ef:9c:
fe:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FF:37:C9:2B:F7:B0:55:7B:33:CF:12:49:67:E5:C3:DF:BE:6B:ED
X509v3 Authority Key Identifier:
keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/Ov83ySv3sFV7M88SSWflw9--a-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:e100:30::/44
Signature Algorithm: sha256WithRSAEncryption
9d:15:04:ee:e8:3d:81:b0:69:56:c4:81:d8:a6:77:b9:96:37:
50:d2:26:62:86:59:52:3d:00:16:90:f2:19:fb:7f:5f:db:84:
2a:8a:1e:7d:0a:7c:49:18:2b:ba:39:0c:9a:d1:89:3d:d2:f1:
d8:99:34:80:fb:9b:b1:e5:ef:ed:f9:8c:59:fd:ec:25:2e:6b:
81:b8:53:bb:71:43:ae:ca:6c:68:02:35:44:f8:fb:fe:2b:1b:
26:d5:91:b9:5b:e0:29:f7:d4:f2:66:d7:2b:db:fa:52:db:30:
e2:6a:49:59:b7:13:65:6d:e5:22:be:ae:2e:49:be:48:61:27:
77:68:7c:9c:f6:b9:4c:68:89:7f:5b:bd:5a:d1:0c:54:9e:59:
dc:a4:9e:80:45:a6:a0:cd:b6:ad:1c:ab:04:48:93:d9:9b:91:
74:b2:e0:2c:d0:e2:3b:6e:37:88:64:68:69:9a:8b:95:71:a3:
59:a2:02:51:59:cd:92:ae:23:46:b9:9c:8e:f3:19:c5:5b:b6:
3e:a5:89:a4:30:f0:a6:d2:b6:79:66:28:61:03:74:5b:c7:4d:
23:c2:07:ec:d1:a8:11:67:72:0a:10:a9:50:e2:f1:fb:d8:1a:
03:71:79:9e:32:d2:05:cb:3f:7a:d0:66:70:0d:b5:61:61:31:
00:13:27:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:21:37 2026 by rpki-client