Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/OXE2IW1VpCia9XT2LxEeiUloYYw.roa
File: OXE2IW1VpCia9XT2LxEeiUloYYw.roa (raw, json)
Hash identifier: 4H6BmMtPZ9gCUuxLHe7yW+2TKKAIOdsOn+za/8bH77U=
Subject key identifier: 39:71:36:21:6D:55:A4:28:9A:F5:74:F6:2F:11:1E:89:49:68:61:8C
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A1BFAA02925ABB0AF57298A9C442110373
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/OXE2IW1VpCia9XT2LxEeiUloYYw.roa
Signing time: Mon 09 Nov 2026 09:35:52 +0000
ROA not before: Mon 09 Nov 2026 09:35:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218911
IP address blocks: 194.163.192.0/24 maxlen: 24
194.163.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:aa:02:92:5a:bb:0a:f5:72:98:a9:c4:42:11:03:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Nov 9 09:35:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=397136216d55a4289af574f62f111e894968618c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:b0:36:a5:78:d0:b3:3b:28:fe:b3:a0:fe:
3d:93:94:1f:06:06:e4:ac:7c:5e:83:a7:cb:48:ad:
0d:f8:ec:ca:58:92:1e:a2:7e:ef:a9:dd:2e:53:02:
f3:d8:25:f0:22:d8:f5:da:0f:83:6c:34:68:ea:34:
f1:93:66:ee:61:c3:bf:5b:6e:4c:3f:0c:66:0d:1d:
d0:f4:2f:51:11:bf:c7:55:02:46:c5:e4:1e:93:a4:
43:44:9c:3a:cb:90:2b:58:d2:1a:84:a2:53:38:cb:
be:32:b2:15:fb:ab:54:8b:db:c3:11:11:64:41:03:
de:fb:a3:c3:f3:ce:06:76:27:4e:c7:7c:f2:f6:f5:
78:f9:72:7f:bc:49:64:f0:a3:b1:1c:6f:50:8c:a1:
85:5c:80:93:ad:c7:5d:35:ed:a4:55:40:b8:93:5c:
33:5d:90:d5:e5:3b:cc:cf:3b:35:13:71:c3:e6:6a:
2c:df:da:85:99:8d:59:fc:ca:98:05:94:b4:c7:e9:
c2:06:aa:29:9a:51:0c:c4:e0:d9:49:79:2f:1c:a0:
36:ef:80:a5:df:b7:f7:8f:86:87:52:df:68:33:9d:
b4:6d:c5:fa:61:75:09:7e:93:24:08:fe:68:a7:7d:
31:ae:78:a6:06:21:71:33:e5:0b:22:72:f2:49:a2:
4c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:71:36:21:6D:55:A4:28:9A:F5:74:F6:2F:11:1E:89:49:68:61:8C
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/OXE2IW1VpCia9XT2LxEeiUloYYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.192.0/24
194.163.194.0/24
Signature Algorithm: sha256WithRSAEncryption
60:be:6d:d0:fd:93:b9:6e:3f:45:d4:11:94:ba:d0:42:5d:7c:
cc:49:a0:bc:dd:8b:e3:c5:b1:d0:92:d2:c7:4c:d5:52:7f:23:
19:f5:97:23:45:88:36:d7:6c:07:b9:6b:02:50:0e:16:ab:34:
c8:7b:e4:c9:23:ce:17:68:46:d5:87:cb:73:aa:eb:c9:63:c3:
9d:14:91:39:92:80:27:19:33:c2:4a:85:de:38:7f:7b:87:80:
80:25:2e:d6:d8:4c:cd:b4:8c:97:1f:0c:af:86:12:29:84:fd:
7d:e1:4a:20:c3:da:45:f3:a5:3e:a3:28:54:03:36:30:78:48:
9d:1d:f8:27:b3:71:4e:7a:bd:34:5b:b7:16:d9:9e:78:11:4a:
ad:8b:c6:9f:53:cc:06:60:f8:57:3e:f0:98:fe:58:d6:db:46:
1a:28:72:24:d9:1a:07:91:a2:66:0c:5e:5a:1f:83:a4:13:0e:
b7:76:62:2f:24:b0:1e:2b:7e:18:5e:d8:14:56:65:93:e7:12:
c7:8f:3b:6c:8d:8b:8e:6b:0e:b5:a2:35:ec:c2:25:0e:46:0b:
80:d4:ab:6f:ef:f7:3a:9b:2b:fc:98:d7:eb:d2:2f:c5:c3:48:
37:91:64:79:b5:33:e1:36:dd:fb:cb:3f:e5:e4:c3:2c:1c:6b:
18:e6:50:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:05:54 2026 by rpki-client