Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/oHwOKB3pEhRfEYzYbMIp_e-bJXQ.roa
File: oHwOKB3pEhRfEYzYbMIp_e-bJXQ.roa (raw, json)
Hash identifier: 10dCSdH9Y3Mj3MkbLZl7kAu6fHq+ibPU8sgIIL01M9s=
Subject key identifier: A0:7C:0E:28:1D:E9:12:14:5F:11:8C:D8:6C:C2:29:FD:EF:9B:25:74
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019D1BB3C46B9F2E00289307C8BD74A16C7D
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/oHwOKB3pEhRfEYzYbMIp_e-bJXQ.roa
Signing time: Mon 23 Mar 2026 17:17:39 +0000
ROA not before: Mon 23 Mar 2026 17:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 262160
IP address blocks: 2a0d:6f80:2301::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:b3:c4:6b:9f:2e:00:28:93:07:c8:bd:74:a1:6c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 23 17:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a07c0e281de912145f118cd86cc229fdef9b2574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ea:c3:dc:ae:d3:d6:71:44:2a:0b:30:75:1c:
29:ce:94:ed:74:3b:10:a5:de:34:f7:52:df:ed:9f:
72:66:45:be:56:67:df:f6:43:32:2b:bf:e7:98:bc:
d5:46:ee:c8:b8:04:69:77:c0:d8:36:3c:bc:50:4c:
9a:e3:94:ac:c5:17:aa:e9:6c:03:1f:c1:88:67:00:
c8:6a:d8:42:39:cc:67:3f:fd:8c:17:a1:96:1d:69:
eb:d9:a7:2a:c5:46:c6:1f:54:2d:60:3e:70:95:f5:
5a:24:0b:0b:6f:42:12:1e:23:d9:72:42:a0:8a:76:
a1:11:e6:1c:d4:53:5f:99:0b:71:ab:c5:e8:fe:1f:
91:f9:59:57:95:1d:44:ad:a2:4b:d9:da:02:09:3d:
d8:51:34:b0:8e:f1:4a:5c:11:f6:36:4c:33:e3:cc:
f0:2f:1f:78:69:a5:c5:53:68:b7:cd:85:2a:42:00:
03:fb:e7:b9:9e:e2:77:13:0f:41:ab:83:c0:56:4d:
65:5b:08:67:94:f1:f8:fe:42:35:25:f6:34:89:47:
ef:95:1a:de:b2:f3:c3:ba:16:0b:b2:a7:13:41:17:
20:9b:5a:9d:f9:bf:9c:9e:f3:21:87:d4:e0:6e:3f:
3d:8a:62:c3:ed:22:71:48:1c:45:2d:b5:8c:ab:2c:
44:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7C:0E:28:1D:E9:12:14:5F:11:8C:D8:6C:C2:29:FD:EF:9B:25:74
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/oHwOKB3pEhRfEYzYbMIp_e-bJXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6f80:2301::/48
Signature Algorithm: sha256WithRSAEncryption
25:b2:ae:38:ec:ae:71:3f:c5:ea:54:05:a8:2d:72:c6:8d:0f:
24:d9:8f:c8:a8:ed:6b:f7:1e:20:59:b4:22:18:2d:52:3d:9b:
67:ec:38:19:6c:1d:df:f2:22:e9:a1:c3:8a:ec:14:6c:ad:7b:
61:0a:e7:4a:ae:bf:70:e5:21:0b:e2:f4:96:65:62:e5:7b:53:
45:66:28:c0:03:1f:2b:5e:2a:38:51:cf:50:e1:fe:c0:c4:bf:
69:a3:c8:8b:2a:4f:c0:9e:da:14:bb:a4:54:9d:bb:3f:c1:a6:
53:08:0b:32:17:48:3e:9f:94:ef:37:44:2b:44:59:bb:35:c5:
a1:e8:b2:7f:15:f0:85:62:22:3f:4a:4c:b8:d9:d0:09:26:5e:
db:59:de:2f:a0:c1:5e:a4:23:a8:cd:23:d4:cf:33:45:cf:3a:
03:9f:be:83:fc:f9:6b:a2:4d:a3:ce:e1:0c:d2:e6:eb:22:c2:
37:f3:3c:c1:d4:32:23:34:7b:fa:76:1b:7c:0c:69:9d:f9:03:
03:55:40:99:dd:99:f1:a8:3f:6c:4c:bb:07:c8:a0:7d:79:95:
19:cc:eb:2d:79:f7:a6:03:c0:4f:ce:8f:89:3b:a5:a3:64:dc:
0b:ac:2b:87:34:de:28:81:19:29:b1:3a:bf:b8:2e:7a:9e:b3:
43:19:5a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:47:00 2026 by rpki-client