Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/oaMdDyOuMHLrZLQUfdyGK2klDt0.roa
File: oaMdDyOuMHLrZLQUfdyGK2klDt0.roa (raw, json)
Hash identifier: iBXiM+MZUWH8Mi/ysn+EmmuC3Xw+mlW+sWAsTir7KzU=
Subject key identifier: A1:A3:1D:0F:23:AE:30:72:EB:64:B4:14:7D:DC:86:2B:69:25:0E:DD
Certificate issuer: /CN=86e548ce6666e9394040d97f9a576bd45c720e42
Certificate serial: 019F6098F1A4FA528652DB90037A0F3C9F39
Authority key identifier: 86:E5:48:CE:66:66:E9:39:40:40:D9:7F:9A:57:6B:D4:5C:72:0E:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/oaMdDyOuMHLrZLQUfdyGK2klDt0.roa
Signing time: Tue 14 Jul 2026 12:27:43 +0000
ROA not before: Tue 14 Jul 2026 12:27:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 194.238.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:98:f1:a4:fa:52:86:52:db:90:03:7a:0f:3c:9f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e548ce6666e9394040d97f9a576bd45c720e42
Validity
Not Before: Jul 14 12:27:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1a31d0f23ae3072eb64b4147ddc862b69250edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:2c:82:a5:6f:f9:aa:6b:58:c3:e4:ae:0b:
9f:1d:6a:66:04:3a:0e:db:09:20:70:79:5d:17:5c:
81:e2:17:dc:d4:d3:af:4b:99:ee:a1:64:6b:30:ee:
be:48:3f:48:01:88:9d:b4:18:33:b2:86:e0:f6:a3:
7f:cf:90:68:dc:d9:02:d3:b5:fc:66:fc:36:59:52:
5b:05:3e:13:a5:71:8b:88:88:ef:e3:dd:e9:27:ca:
07:44:d5:de:38:07:64:74:3a:30:b6:3a:70:ca:16:
09:26:c2:91:13:ee:35:d5:54:49:b6:33:79:d2:63:
c2:3e:99:3b:3b:31:a0:be:b7:5d:e6:db:7c:b4:68:
a3:4e:c2:f1:5e:6d:71:d9:b8:68:63:b9:c8:b7:e0:
14:ba:90:94:9f:53:5c:ce:fd:d8:91:33:86:9a:67:
92:b8:77:2e:de:ba:4a:86:a6:f3:3a:5f:b5:8b:9f:
92:ad:6f:68:dc:f8:82:19:3c:dd:1c:75:4f:34:e0:
a4:56:b2:d9:af:cf:8e:8f:e0:49:f1:00:80:c9:2b:
64:71:6a:62:a3:1a:f2:53:94:06:93:ac:a5:f1:af:
db:4a:65:ce:93:df:1a:c9:66:24:d9:70:2a:5d:38:
14:78:79:a5:53:41:9b:dc:ba:35:a9:71:f7:38:4c:
55:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A3:1D:0F:23:AE:30:72:EB:64:B4:14:7D:DC:86:2B:69:25:0E:DD
X509v3 Authority Key Identifier:
keyid:86:E5:48:CE:66:66:E9:39:40:40:D9:7F:9A:57:6B:D4:5C:72:0E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/oaMdDyOuMHLrZLQUfdyGK2klDt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.238.73.0/24
Signature Algorithm: sha256WithRSAEncryption
33:dd:80:10:30:d3:fd:e8:14:26:1f:a9:4d:a2:d9:27:22:b5:
3b:18:36:05:32:8f:42:50:87:63:82:3e:c0:fc:62:40:fa:52:
07:cc:b6:1d:ea:de:d1:b4:22:9e:7b:9d:a1:44:52:de:d2:c3:
f4:bb:7e:17:16:c7:e6:6d:cb:c5:8d:bc:23:6a:70:ad:bc:f6:
e4:0a:eb:1e:75:fe:0f:82:35:3c:16:c9:c6:37:51:e2:5c:54:
9b:de:c6:7a:86:81:d2:da:f7:9e:b0:81:c1:3c:2f:bd:78:22:
77:79:d3:c9:5d:fa:e0:79:74:c4:ea:bd:47:cc:62:d9:42:a8:
c4:e5:fc:10:83:a4:ca:66:9e:8c:5d:d8:45:cf:58:a4:4c:e1:
82:bc:2f:37:b8:fc:10:56:b7:a0:11:3d:21:94:d0:a9:d3:27:
25:bf:67:07:94:88:e0:2f:68:64:db:29:9b:e5:90:06:11:0e:
8d:a8:45:79:51:68:c8:d0:0d:15:2e:5b:1a:ef:76:5b:ff:b4:
e8:0a:eb:04:ba:bc:f5:1d:8b:f6:44:00:b7:3e:bd:a6:7f:c9:
ff:00:c8:c5:6a:f6:8c:f9:57:81:6b:e8:7f:c5:06:41:81:20:
fc:99:86:7a:3f:d9:50:f0:50:10:e7:7f:f1:ad:68:60:7f:66:
0a:c6:3c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:08:09 2026 by rpki-client