Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/OVHdITlrIjBgUL3Cf_-jwn12NXM.roa
File: OVHdITlrIjBgUL3Cf_-jwn12NXM.roa (raw, json)
Hash identifier: XnDnDon7vnF0DZ9HaQg+eu7/IVwho3fVc1qDQQtaL10=
Subject key identifier: 39:51:DD:21:39:6B:22:30:60:50:BD:C2:7F:FF:A3:C2:7D:76:35:73
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A19D98447512FAF663EA8CFCCBCA1619F9
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/OVHdITlrIjBgUL3Cf_-jwn12NXM.roa
Signing time: Mon 02 Nov 2026 18:49:24 +0000
ROA not before: Mon 02 Nov 2026 18:49:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218218
IP address blocks: 2a0c:b641:fd0::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:98:44:75:12:fa:f6:63:ea:8c:fc:cb:ca:16:19:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Nov 2 18:49:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3951dd21396b22306050bdc27fffa3c27d763573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:dc:c3:29:bd:62:48:0f:90:d1:f8:9e:84:
50:56:88:88:20:0c:67:d5:88:d0:3e:27:b3:46:61:
55:5b:44:50:4c:f5:8e:62:59:e9:da:d5:c2:95:f8:
0b:db:dd:c9:7a:66:e7:b0:5a:96:13:41:74:db:10:
09:13:b1:96:c3:8c:e1:cf:bc:88:73:68:00:03:35:
07:2d:58:36:8e:df:b9:8c:c5:9a:87:f9:fc:4f:78:
e3:2c:e0:dc:63:90:43:91:e2:ac:85:74:6f:8c:9a:
8d:0d:6c:6c:85:e1:a6:69:29:db:1b:e8:69:30:f1:
0a:12:eb:e6:82:0d:b1:aa:c8:8c:4d:ab:03:ab:64:
3e:8d:d1:fd:39:7a:4b:ad:5d:8b:4b:07:96:17:94:
17:8b:6b:66:14:37:8c:0c:84:00:7a:62:fa:30:7a:
78:db:50:36:d1:32:50:8e:d7:20:63:a0:5b:66:df:
8d:ff:8c:bc:51:1d:91:10:b8:ea:7d:c7:9c:ab:5d:
87:76:c6:55:af:f2:ca:4d:5a:54:61:9a:09:ef:cf:
f3:e0:84:4a:3d:2c:3f:28:3a:33:ab:94:d9:38:26:
87:c9:58:c3:10:ff:6b:43:21:a6:09:a1:3f:b1:ec:
da:06:54:6e:76:86:45:23:05:e8:a7:7a:24:b9:c1:
fd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:51:DD:21:39:6B:22:30:60:50:BD:C2:7F:FF:A3:C2:7D:76:35:73
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/OVHdITlrIjBgUL3Cf_-jwn12NXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:fd0::/44
Signature Algorithm: sha256WithRSAEncryption
1c:3e:42:7c:bc:50:38:5b:ed:da:6c:67:e0:2d:6a:35:5d:9d:
e0:33:f1:25:9f:1e:13:e2:23:9c:9b:cb:e9:2f:fe:0d:dc:9d:
ae:b4:04:e8:ab:cd:f6:92:57:12:72:63:a7:9a:94:b1:d5:23:
bf:c6:18:29:5c:3d:75:bb:66:dc:4a:0d:a2:6a:00:07:48:5e:
7c:5b:95:2f:4d:6d:5c:de:60:a5:27:9e:b9:80:b6:b0:c9:67:
1c:84:e2:ca:e5:66:55:48:27:5b:85:a1:db:30:d0:47:bb:36:
79:83:02:a7:88:05:f3:e5:7e:70:9f:7c:91:2d:f7:52:c0:01:
70:2c:d8:a8:00:e0:83:99:20:0b:fd:ab:31:53:d1:66:93:43:
27:1c:51:9c:dc:73:db:fb:6b:7b:f3:93:ad:03:93:46:0f:46:
9d:9b:be:20:e3:99:e8:4d:a7:2a:83:54:0e:53:4e:9b:48:d2:
f6:8d:51:81:76:2f:19:80:bf:1e:d4:fd:c8:a6:c2:e6:99:3a:
e6:78:dd:93:15:3b:8b:0c:48:23:a9:b9:15:66:56:5a:44:11:
9a:0e:a2:d9:33:d8:65:c8:dd:f9:87:99:31:8e:ec:af:bf:e9:
0e:f8:cc:e5:0a:2e:a2:f6:e3:9b:e9:4b:e6:a4:f3:a6:fd:f5:
33:b9:76:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:24:30 2026 by rpki-client