Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/OAbpOTnAOzglaKzJYR_dSWth0y0.roa
File: OAbpOTnAOzglaKzJYR_dSWth0y0.roa (raw, json)
Hash identifier: p0BRSUqt0ibbeGiIUqDvTDnDIoyeLcX+EC1SME0H0Io=
Subject key identifier: 38:06:E9:39:39:C0:3B:38:25:68:AC:C9:61:1F:DD:49:6B:61:D3:2D
Certificate issuer: /CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Certificate serial: 019F520F51E453303C1BC0D68F4477612B97
Authority key identifier: D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/OAbpOTnAOzglaKzJYR_dSWth0y0.roa
Signing time: Sat 11 Jul 2026 16:42:43 +0000
ROA not before: Sat 11 Jul 2026 16:42:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25376
IP address blocks: 2a01:8560::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:52:0f:51:e4:53:30:3c:1b:c0:d6:8f:44:77:61:2b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Validity
Not Before: Jul 11 16:42:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3806e93939c03b382568acc9611fdd496b61d32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:aa:75:49:4f:53:15:cf:6e:a9:fb:e9:50:
e7:f2:f1:b1:a9:cc:7c:67:1c:2b:4c:00:a0:d4:8c:
00:8d:1d:e9:df:c0:ca:5d:1b:5f:12:4e:0c:df:68:
2d:3e:7f:4c:c9:7d:79:29:99:4d:01:6d:41:f1:e1:
1b:8e:a3:04:28:0a:60:a7:83:16:c7:5e:88:47:e0:
60:63:4e:70:b8:2f:b3:4e:16:17:b6:a4:bf:72:49:
ad:5d:af:b2:4e:b3:e7:37:71:93:6b:a5:1a:43:90:
25:9a:02:bb:51:fd:53:bd:5b:af:1a:74:0b:c2:27:
82:f0:a7:3c:d9:8e:8c:9a:57:61:c7:8c:1e:f7:77:
69:94:ad:2a:cc:7a:30:1e:0f:6e:47:f1:71:91:50:
84:a1:ae:df:0a:65:e5:6a:23:1b:79:9e:8a:bd:ad:
43:98:37:44:3c:21:07:56:e8:ee:7d:df:78:41:8d:
5c:a4:3a:65:10:1c:0f:65:55:1b:bc:38:32:fe:69:
fb:4c:ca:ab:22:5d:a1:0f:95:36:8d:cc:95:52:7a:
d1:9e:fd:3c:02:ff:09:be:ec:e1:42:ed:e0:32:40:
cc:fa:52:a6:52:2a:6d:e3:13:c2:be:77:e3:24:bf:
2f:f8:dc:54:23:78:92:15:17:be:7b:b5:0d:7a:9d:
26:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:06:E9:39:39:C0:3B:38:25:68:AC:C9:61:1F:DD:49:6B:61:D3:2D
X509v3 Authority Key Identifier:
keyid:D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/OAbpOTnAOzglaKzJYR_dSWth0y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:8560::/32
Signature Algorithm: sha256WithRSAEncryption
39:46:11:f8:28:8b:e1:c5:6d:cc:f8:f6:07:85:aa:f1:77:64:
28:e4:23:db:8c:09:a0:a9:09:da:3d:07:8a:81:32:4a:a8:71:
c2:52:db:54:12:c5:c5:00:37:93:8f:16:29:fa:e2:1c:86:5c:
d9:a4:aa:38:cc:d9:7f:57:0a:6d:bf:72:90:79:1c:6f:2e:2c:
da:1c:9f:97:77:99:f5:2b:ab:b6:2b:9e:d4:13:74:d9:6f:dd:
c9:9b:35:03:0d:e7:36:54:07:b8:93:4f:89:66:33:e3:46:a0:
7f:41:75:99:ae:e0:e5:88:cc:b2:70:a6:b5:3e:96:ad:80:72:
e9:c8:90:4e:65:f4:75:14:f1:ea:dd:93:81:6a:18:d0:e5:0c:
bf:71:7b:c2:f4:60:ae:28:9e:6b:e3:41:80:3b:05:d2:c5:ec:
99:ce:a7:cd:d5:2b:ca:71:14:86:a8:a9:86:5e:a1:cb:1c:eb:
d0:19:17:aa:af:62:53:75:ee:28:ae:81:46:b4:c8:50:55:bb:
b6:fd:46:14:ab:e4:9c:2a:aa:6c:d2:84:89:e7:7f:e5:cd:fa:
72:59:7b:26:c0:0d:47:34:bf:98:c7:a5:7a:97:ed:47:21:4b:
25:77:45:b8:6b:c2:bf:b7:83:91:de:22:fc:47:95:19:40:38:
44:da:52:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:24:50 2026 by rpki-client