Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/OYv_dkuy_Y2dlLzuuRzwRfbuYvE.roa
File: OYv_dkuy_Y2dlLzuuRzwRfbuYvE.roa (raw, json)
Hash identifier: CC0Q+2nNKezsmgtyWfzEhTdriEmSy+Gje/Gosq8c8Uw=
Subject key identifier: 39:8B:FF:76:4B:B2:FD:8D:9D:94:BC:EE:B9:1C:F0:45:F6:EE:62:F1
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 01A0C89CF426D7E943872A080FF0BA28AC33
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/OYv_dkuy_Y2dlLzuuRzwRfbuYvE.roa
Signing time: Tue 22 Sep 2026 10:15:24 +0000
ROA not before: Tue 22 Sep 2026 10:15:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402475
IP address blocks: 2a11:37c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:9c:f4:26:d7:e9:43:87:2a:08:0f:f0:ba:28:ac:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Sep 22 10:15:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=398bff764bb2fd8d9d94bceeb91cf045f6ee62f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:79:0a:c8:dd:ae:15:6a:ca:3f:cc:a3:2d:
72:b4:54:5a:85:c0:cb:d7:b4:1a:7e:fe:d8:fd:b8:
fd:ed:91:09:fc:74:c6:16:db:fe:ef:cc:d9:f7:bb:
1a:5b:5c:7d:2d:52:a6:de:e2:cc:15:c5:d8:ef:a4:
cf:e3:c3:04:4b:72:e8:0b:b0:06:ed:0c:41:0a:0e:
0f:7c:4e:e1:3a:a0:95:7a:42:4d:57:0f:a4:19:c8:
ba:51:ba:3d:cd:02:38:b9:45:9b:31:a2:74:a3:55:
a5:30:39:55:79:a0:8c:34:d7:ce:b1:0c:99:c7:60:
36:0e:77:fc:0d:64:12:12:6e:1f:59:cd:ca:a6:0d:
3c:d4:1f:28:63:80:cd:5a:f6:36:aa:01:78:d6:d6:
11:a2:1e:e0:30:99:7c:06:3d:3e:f4:f0:71:f1:ab:
e1:3c:8d:f5:85:b8:04:7d:fb:ef:0b:bf:8d:b2:37:
a2:06:36:4d:30:07:87:cf:32:ad:1d:e3:f4:50:9e:
b1:e8:ca:f3:a5:3d:86:ce:50:43:bd:f4:93:f8:0d:
15:e5:7e:c0:05:9d:7f:6e:08:c7:3f:7a:5d:40:73:
db:67:9d:05:79:87:ca:6f:76:51:ea:86:ad:38:12:
48:46:9f:99:3e:68:bc:50:94:c2:25:83:06:39:57:
f0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8B:FF:76:4B:B2:FD:8D:9D:94:BC:EE:B9:1C:F0:45:F6:EE:62:F1
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/OYv_dkuy_Y2dlLzuuRzwRfbuYvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
04:f6:a4:63:ad:ed:e1:43:b4:5d:7a:5d:a3:cb:cc:ec:a8:66:
a0:7d:22:e8:c1:b0:dd:8b:63:e5:11:c6:8d:52:b9:52:f9:98:
84:1a:86:b1:66:2f:e3:a6:2d:37:d4:c9:77:23:0e:de:10:b4:
50:1b:be:c3:e7:06:a0:13:9e:3d:12:0d:81:4d:7d:8d:57:12:
84:dd:cf:1f:2f:49:52:c4:5b:b1:c4:b3:6c:d5:05:af:04:6c:
66:21:04:d3:ef:da:ec:6e:77:e3:f3:d5:23:60:56:56:a2:7a:
de:b1:30:c0:fa:71:91:21:7c:2f:4a:a9:ef:7e:4b:06:ac:2e:
0f:e9:23:51:9f:ca:19:a9:d2:0c:28:e8:df:84:dd:e6:44:11:
f6:36:a3:99:cc:f2:bf:68:c9:61:f0:14:6d:0e:36:b9:96:57:
ef:63:d2:10:91:ce:d2:63:76:b0:de:03:16:fd:1d:44:e0:59:
ec:1a:ce:ef:d1:ea:aa:71:29:f5:ac:d1:8e:53:2e:27:f2:76:
a4:c1:3a:0b:61:0c:4a:5a:60:9b:91:1f:5c:23:5f:1f:b2:a3:
34:5c:47:4a:a2:2f:31:d2:a7:39:27:9c:10:92:f2:21:3e:4b:
8e:4b:93:e8:1b:17:37:91:c1:17:d9:14:a7:eb:99:b8:a2:f5:
32:00:66:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:47:30 2026 by rpki-client