Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/OHMkQc20XLUuhWG9TR6YUIfUeNQ.roa
File: OHMkQc20XLUuhWG9TR6YUIfUeNQ.roa (raw, json)
Hash identifier: Q/okgqIrrRu57dOM1pUZVReELn18xaaSWaDkfsqY+zY=
Subject key identifier: 38:73:24:41:CD:B4:5C:B5:2E:85:61:BD:4D:1E:98:50:87:D4:78:D4
Certificate issuer: /CN=3c510e21ba1c9d600589130255a36928f1c8f23b
Certificate serial: 019F2368E2E082CF9EF23EB7FDC2609C29DF
Authority key identifier: 3C:51:0E:21:BA:1C:9D:60:05:89:13:02:55:A3:69:28:F1:C8:F2:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/OHMkQc20XLUuhWG9TR6YUIfUeNQ.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49488
IP address blocks: 194.0.10.0/24 maxlen: 24
2001:678:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e2:e0:82:cf:9e:f2:3e:b7:fd:c2:60:9c:29:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c510e21ba1c9d600589130255a36928f1c8f23b
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38732441cdb45cb52e8561bd4d1e985087d478d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:4b:c4:cf:0b:a2:17:a2:e0:d6:5d:34:fb:
3d:f0:75:1e:aa:87:4c:bc:9f:5b:fc:5d:c1:16:86:
25:bb:87:be:d8:ef:78:93:c0:e8:d2:e8:09:6d:d9:
cc:81:79:d5:38:4d:f4:8c:d4:43:ac:d4:da:0a:f4:
1c:d1:c7:9d:01:2c:0c:09:22:87:c1:6e:0a:41:e9:
90:9f:fe:a7:a9:8f:d7:f9:cf:ed:c8:f9:98:db:31:
61:46:ff:18:ad:07:a9:c0:42:22:43:e0:31:62:2f:
24:84:f1:b7:75:03:97:04:ea:34:6f:a8:8d:b4:38:
fa:a1:02:4d:63:41:f8:a9:42:5a:73:5c:de:9f:de:
d0:11:64:c7:42:07:c7:55:8f:9b:01:fd:17:ef:93:
c0:a9:5a:81:9d:df:68:a2:ac:ca:07:71:02:6a:fe:
c6:ab:c7:63:21:96:2c:33:e2:f3:58:2b:24:43:d7:
7b:76:41:cc:0e:87:a9:2e:fa:e2:88:8d:1f:8e:99:
a9:1d:a7:a0:5e:22:2d:e9:f9:5e:c3:31:35:6f:ae:
81:9f:c2:3c:f7:8d:c0:f1:58:32:20:2e:07:0b:27:
68:52:e7:fc:e5:db:4a:9e:02:35:2b:f8:2c:74:2c:
3e:3d:7d:f9:f2:cd:6d:c5:6d:2e:16:1c:d7:9a:1e:
48:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:73:24:41:CD:B4:5C:B5:2E:85:61:BD:4D:1E:98:50:87:D4:78:D4
X509v3 Authority Key Identifier:
keyid:3C:51:0E:21:BA:1C:9D:60:05:89:13:02:55:A3:69:28:F1:C8:F2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/OHMkQc20XLUuhWG9TR6YUIfUeNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.10.0/24
IPv6:
2001:678:d::/48
Signature Algorithm: sha256WithRSAEncryption
2d:97:91:94:bd:64:9c:69:89:fc:4f:5e:e8:0f:2a:2e:09:a8:
db:af:c2:2c:49:29:9a:70:2e:2a:b7:72:24:41:63:37:d4:d9:
1b:9e:0d:8d:06:98:dc:e6:4b:70:0e:a6:f8:5a:03:ab:82:e0:
04:0d:d8:54:26:ef:6f:c5:71:9a:54:2d:ea:dc:58:b4:08:0b:
04:70:f5:76:55:80:5e:7e:1b:6c:c6:49:7d:de:dd:01:13:c0:
25:ef:a1:c2:d1:94:61:92:7e:ad:b5:74:ac:48:43:18:8c:ca:
f8:f9:3a:89:71:a2:5e:65:72:a6:09:31:64:42:2e:52:0d:e3:
b2:92:44:d5:6e:c1:43:3c:19:d4:73:4c:54:26:7b:70:21:79:
e1:30:62:4e:75:15:89:a8:72:10:10:4b:fb:de:50:ff:d4:cf:
c6:45:10:1c:cd:84:15:c8:d3:f0:17:f1:f5:52:7b:4a:6f:71:
63:bc:1b:48:fa:51:dc:d2:34:d5:b8:24:f9:99:3f:c0:af:0a:
90:bc:da:72:47:05:91:6b:3c:e5:08:ab:1c:94:f4:50:79:d4:
48:1f:1b:d7:75:f5:89:21:07:4f:56:ad:68:3b:40:68:75:0e:
af:6f:13:ec:4b:82:bc:11:75:b9:a4:a6:8b:ce:1a:bb:ac:77:
2d:96:dc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:09:17 2026 by rpki-client