Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/oq-FxRXyTIXzyweRp0nnP66ynGg.roa
File: oq-FxRXyTIXzyweRp0nnP66ynGg.roa (raw, json)
Hash identifier: S4stpy1EZFYMG0faQESyF4V9AjjskCgMI7Ts69RF38Q=
Subject key identifier: A2:AF:85:C5:15:F2:4C:85:F3:CB:07:91:A7:49:E7:3F:AE:B2:9C:68
Certificate issuer: /CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Certificate serial: 01A06C9E2B878ED8F1A5ADC815F05AEC91D4
Authority key identifier: 6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/oq-FxRXyTIXzyweRp0nnP66ynGg.roa
Signing time: Fri 04 Sep 2026 13:31:40 +0000
ROA not before: Fri 04 Sep 2026 13:31:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25446
IP address blocks: 2a03:e340:3::/48 maxlen: 48
2a0c:c580::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:9e:2b:87:8e:d8:f1:a5:ad:c8:15:f0:5a:ec:91:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Validity
Not Before: Sep 4 13:31:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2af85c515f24c85f3cb0791a749e73faeb29c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f7:b6:7e:6e:ff:e2:eb:9a:9f:eb:43:b3:dc:
75:00:87:aa:38:87:fa:3f:00:96:a0:e5:99:c6:82:
42:52:65:7f:e6:6b:18:0f:df:1f:7b:f7:20:f0:f6:
a0:a7:2b:86:09:04:35:bf:14:4c:80:72:a5:c5:53:
16:3c:c0:c8:4a:63:86:8a:11:18:5f:68:a4:71:4c:
bb:3f:44:99:81:78:d7:01:64:24:3f:6a:2d:4e:22:
62:4c:9c:9e:86:24:cd:0f:90:ff:53:54:d0:6a:0a:
92:87:95:0f:3e:56:26:e2:20:d3:99:c4:a2:9d:ae:
5e:93:30:84:6e:f6:c5:3a:d1:90:d4:07:95:dc:17:
97:06:d7:d6:b0:94:9e:e3:43:bb:a7:56:0d:3d:20:
22:53:71:6e:cf:b2:83:14:6a:b2:43:c2:92:9c:53:
37:03:5b:f3:4e:0f:b8:04:d3:ab:66:c2:77:fd:04:
88:54:f5:8c:1b:83:3f:81:59:2e:4b:15:fb:4f:12:
d3:99:eb:08:16:d6:2f:0d:1b:4f:88:7a:43:fa:6d:
00:be:78:27:a4:87:13:d9:40:27:32:14:ed:75:2c:
7f:3c:6f:3e:6b:ea:17:08:48:6e:9e:4b:e4:04:11:
51:28:a6:30:f4:4a:2d:83:62:8e:0e:8d:88:14:c2:
24:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AF:85:C5:15:F2:4C:85:F3:CB:07:91:A7:49:E7:3F:AE:B2:9C:68
X509v3 Authority Key Identifier:
keyid:6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/oq-FxRXyTIXzyweRp0nnP66ynGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:e340:3::/48
2a0c:c580::/48
Signature Algorithm: sha256WithRSAEncryption
b4:e7:39:e2:13:4c:f6:a3:f7:08:42:41:e3:25:33:6f:91:29:
da:d4:22:84:e5:48:c7:b6:af:2f:e6:77:1f:ab:c7:c8:6b:08:
eb:7d:1b:84:22:63:3e:18:d4:4b:8a:ae:f1:8d:e9:a2:9f:a1:
17:66:c9:c2:96:3f:e3:82:ae:ad:1e:d8:7b:8e:bd:78:15:7f:
99:6f:36:d2:88:e0:f8:f6:6c:25:b1:8d:77:dd:67:59:57:a0:
85:6f:42:36:32:a3:d0:2a:73:ec:c3:4c:28:ed:d9:dd:73:87:
8b:88:5b:98:00:15:c5:ce:8e:37:8c:31:ef:17:23:c5:8d:72:
b1:7e:66:4d:18:04:ad:d5:ea:7a:b7:c6:ca:bd:48:44:8c:5d:
c7:6d:3c:87:1d:e8:82:a2:19:5f:ac:6d:bc:9b:4c:95:6c:7c:
25:a3:23:56:8f:a7:2c:41:ab:51:3e:38:dc:82:cf:8e:02:26:
9f:61:1d:ad:b2:f7:c6:ca:9d:15:90:95:cb:37:18:85:3d:59:
1e:65:d8:5d:93:5b:f6:6f:8b:ba:ab:02:f2:6a:44:10:31:33:
e0:69:95:d3:b8:12:5c:7a:85:5f:41:27:28:75:55:9b:f2:19:
3b:37:fe:8f:66:22:c4:9a:eb:2f:40:48:1f:c5:22:7c:10:d5:
01:9a:ff:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 14:06:43 2026 by rpki-client