Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/OqnhtiFP7wc9QX2iKECJSviiC-E.roa
File: OqnhtiFP7wc9QX2iKECJSviiC-E.roa (raw, json)
Hash identifier: FUli0rZlPZ/k0xTL7Q59iLe0MEZMq5h8kBwF9fRS3GI=
Subject key identifier: 3A:A9:E1:B6:21:4F:EF:07:3D:41:7D:A2:28:40:89:4A:F8:A2:0B:E1
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01A1B2602856E4C6176110418DAFFE9B8BC7
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/OqnhtiFP7wc9QX2iKECJSviiC-E.roa
Signing time: Fri 06 Nov 2026 19:40:08 +0000
ROA not before: Fri 06 Nov 2026 19:40:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209693
IP address blocks: 87.232.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b2:60:28:56:e4:c6:17:61:10:41:8d:af:fe:9b:8b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Nov 6 19:40:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3aa9e1b6214fef073d417da22840894af8a20be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:50:0a:7d:79:89:0c:8f:e6:8b:ef:38:38:4e:
0f:3d:16:d4:52:28:18:f1:e5:d7:f9:86:b6:d8:5c:
f6:4c:d9:07:96:26:78:b9:d9:c0:19:1c:b2:97:e8:
b9:fd:fb:2d:24:78:53:b2:69:1c:b7:d1:b5:e6:a6:
31:b2:5e:5d:07:5c:07:5a:98:87:6c:4c:8b:4f:2f:
b5:c2:19:da:eb:dc:99:65:15:1c:31:8b:84:bb:5a:
1c:ce:09:c3:43:09:cc:f8:2e:38:93:9e:b0:25:f2:
15:83:cb:aa:ea:1b:d2:92:66:22:d5:fb:ac:cf:3b:
70:91:d1:e2:73:6c:fc:41:ff:2d:e5:a8:9b:ec:b5:
7e:00:e0:3d:2e:66:2f:07:ad:66:0c:ca:21:ae:ec:
56:3b:9c:d4:18:dc:99:a5:97:4c:4a:75:83:e9:0c:
95:91:cf:62:4e:3a:8d:77:fe:c0:96:1e:6f:22:d8:
a3:3c:95:72:b6:55:06:2a:a3:3d:4b:44:58:1f:27:
5a:53:d2:ac:ee:f3:a3:e9:14:0f:a4:4f:0d:02:18:
91:03:1c:c3:fc:77:44:5a:43:fd:3a:a6:c4:8f:6e:
ab:09:b7:7b:67:62:40:d6:4e:46:67:b8:96:01:1e:
bd:3d:e9:54:c1:fd:22:ad:e5:61:53:d3:2a:e8:b2:
1d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A9:E1:B6:21:4F:EF:07:3D:41:7D:A2:28:40:89:4A:F8:A2:0B:E1
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/OqnhtiFP7wc9QX2iKECJSviiC-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.96.0/24
Signature Algorithm: sha256WithRSAEncryption
41:8f:cc:55:6b:0f:6f:a4:d0:1c:61:76:13:26:4f:e0:c5:03:
67:ae:45:d7:f9:0f:8c:25:4c:29:c8:b0:76:7b:28:f5:84:b8:
c0:b6:e6:80:37:6f:3d:eb:9c:f0:04:b9:c7:3c:79:a6:cc:06:
8b:40:8b:5c:5b:53:c8:81:99:a2:0b:ff:74:f4:da:78:ff:2f:
17:e7:96:5a:80:e7:03:96:6a:73:51:d4:9d:03:c2:78:7c:69:
95:07:da:c3:0d:c1:de:f0:55:ce:9c:87:0e:64:bb:e9:cc:3a:
98:47:44:3b:c8:57:42:67:53:f8:05:4b:5c:92:02:a0:86:29:
94:f6:ad:f6:e8:50:cd:51:4a:51:57:cd:cc:80:fd:fa:f8:60:
a4:32:80:eb:ef:59:e4:96:c0:b7:2b:5c:36:ed:51:4d:9f:06:
6b:d1:1d:95:4c:d0:20:c7:dc:c5:85:89:f3:7d:4d:41:52:55:
97:d9:3a:38:b3:af:e9:ad:6e:39:25:65:6a:26:32:49:fa:6e:
b7:de:a2:c1:0e:60:49:d9:bb:00:63:81:fd:26:4b:5c:ae:c7:
9c:63:fd:97:bf:9d:5a:d0:f9:b1:de:46:51:91:88:a7:42:b3:
c8:a8:71:b3:06:69:45:c0:d6:0e:d8:da:34:27:1c:8b:4c:34:
46:b8:98:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:05:46 2026 by rpki-client