Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/OZ_ct-IHl112cW3UGk-r1TEbqxI.roa
File: OZ_ct-IHl112cW3UGk-r1TEbqxI.roa (raw, json)
Hash identifier: DoqtmeSsv8wkBfspTgNZOh8LR7Qkvgnzm8ZKZOHXEpI=
Subject key identifier: 39:9F:DC:B7:E2:07:97:5D:76:71:6D:D4:1A:4F:AB:D5:31:1B:AB:12
Certificate issuer: /CN=47f0b860e1350e087a06793181074f47b7953fa1
Certificate serial: 01A0D82BF5E931C0C60A36C6F824CD93B0A2
Authority key identifier: 47:F0:B8:60:E1:35:0E:08:7A:06:79:31:81:07:4F:47:B7:95:3F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/OZ_ct-IHl112cW3UGk-r1TEbqxI.roa
Signing time: Fri 25 Sep 2026 10:45:54 +0000
ROA not before: Fri 25 Sep 2026 10:45:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24321
IP address blocks: 153.76.232.0/21 maxlen: 24
153.76.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 19:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:2b:f5:e9:31:c0:c6:0a:36:c6:f8:24:cd:93:b0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f0b860e1350e087a06793181074f47b7953fa1
Validity
Not Before: Sep 25 10:45:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=399fdcb7e207975d76716dd41a4fabd5311bab12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a4:5f:bf:1f:d5:f5:d2:d1:31:20:40:b4:2c:
21:f8:bc:17:d6:aa:52:5f:0b:79:ae:f8:55:ae:c5:
5e:42:aa:d5:36:6f:84:23:1e:b8:ef:c3:53:49:54:
b3:ee:3d:47:ed:2a:bd:63:68:bf:58:20:2c:72:45:
ad:af:06:0c:ad:28:03:5d:f7:0e:bb:3c:fd:1b:eb:
ed:42:3e:c7:1f:7d:57:95:c8:6c:a0:e1:03:42:c4:
e8:14:47:a2:38:fe:79:e1:a7:e3:0c:ed:21:40:4b:
c5:28:b1:6d:ae:37:41:12:b9:e5:5d:0e:14:23:68:
75:92:c8:fa:92:86:6b:48:aa:39:fb:8d:a7:4c:7e:
1c:bb:d5:dd:b0:85:9e:e0:a8:c0:26:a9:d6:7f:c8:
c7:2e:d2:51:42:d2:d8:7f:69:ce:24:8c:5c:d9:41:
a0:aa:c1:cd:04:7a:79:19:97:46:dd:76:ed:4f:e6:
5c:f1:02:6d:68:b4:bc:b2:9d:2b:94:23:25:64:63:
3a:6d:9f:ea:69:ac:cd:08:ae:01:4c:a8:67:cb:05:
9a:bd:9d:c4:23:5c:6a:1b:ef:91:87:c4:62:69:fc:
39:6b:24:ca:2c:2d:60:42:bf:29:72:31:81:07:78:
20:c8:e1:da:79:2b:bb:16:fb:f1:6f:f9:b9:7d:5d:
25:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9F:DC:B7:E2:07:97:5D:76:71:6D:D4:1A:4F:AB:D5:31:1B:AB:12
X509v3 Authority Key Identifier:
keyid:47:F0:B8:60:E1:35:0E:08:7A:06:79:31:81:07:4F:47:B7:95:3F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/OZ_ct-IHl112cW3UGk-r1TEbqxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.232.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:be:ad:80:90:1c:43:ee:f6:46:82:ee:f3:13:5c:b7:a6:3a:
3f:da:83:42:0c:d0:00:47:09:d1:bb:11:2d:ea:6c:d3:45:36:
8d:30:ad:71:9b:7d:6a:9a:49:85:15:70:c2:4d:9d:0e:56:5f:
63:dc:2a:8a:60:c8:c4:f2:ed:a0:1e:9a:5b:84:97:29:ba:4f:
3c:07:13:40:5f:61:40:10:3d:e1:22:68:f6:2e:39:eb:52:ed:
bf:7a:73:16:a9:de:6b:98:1c:1d:70:50:59:c3:06:24:22:a3:
d2:e2:d2:95:97:b7:49:1c:36:a1:d6:6c:45:15:27:b4:89:34:
14:13:b1:2b:ef:78:61:70:c3:de:8c:19:85:24:67:92:3f:a2:
04:23:16:08:01:37:44:54:83:da:d9:04:88:8d:97:33:29:00:
24:f6:d2:d1:dd:26:26:f1:c8:20:3f:cb:cd:e0:10:d8:fa:dd:
3b:e9:58:f1:23:cc:97:32:ec:9b:4c:d4:2b:c1:82:3e:f7:99:
6f:f3:d0:5a:38:52:6e:d2:4a:7e:e5:69:8c:a0:79:64:6b:5a:
7f:53:93:0f:f9:1c:ee:33:44:04:d2:de:6e:a3:2a:a7:d8:1d:
5a:67:a6:da:e6:f4:ad:06:69:1c:cb:5e:36:c1:ff:26:ac:e3:
07:13:04:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:46:04 2026 by rpki-client