Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/ow2bqJhEdDegyshhSjmpEmSiWIE.roa
File: ow2bqJhEdDegyshhSjmpEmSiWIE.roa (raw, json)
Hash identifier: jvnyA7cvV4BQzNY5m+pTfWf2ZrkK6vyFHIlZGwtJzpk=
Subject key identifier: A3:0D:9B:A8:98:44:74:37:A0:CA:C8:61:4A:39:A9:12:64:A2:58:81
Certificate issuer: /CN=ae800ede833b86c48ce3705567068eb90724b08d
Certificate serial: 019F8533FE36FBF2E82FD944AF2302A670A9
Authority key identifier: AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/ow2bqJhEdDegyshhSjmpEmSiWIE.roa
Signing time: Tue 21 Jul 2026 15:03:24 +0000
ROA not before: Tue 21 Jul 2026 15:03:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201616
IP address blocks: 2001:678:bb0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:33:fe:36:fb:f2:e8:2f:d9:44:af:23:02:a6:70:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae800ede833b86c48ce3705567068eb90724b08d
Validity
Not Before: Jul 21 15:03:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a30d9ba898447437a0cac8614a39a91264a25881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9e:2f:22:50:99:75:33:40:08:9e:4e:71:32:
f6:e3:e5:c4:8e:28:69:85:b6:90:a4:9c:78:8a:c8:
e2:8a:e6:2d:cc:b4:e6:30:4c:5b:8e:b9:1e:3b:51:
9e:49:25:dd:ff:af:91:fa:48:fa:2b:06:35:85:4d:
8a:2c:24:c1:4c:f5:62:5c:ba:b2:5b:90:54:02:5d:
50:ca:ef:9d:0a:05:62:db:78:98:e9:9f:ca:db:ff:
62:b4:92:ca:e0:b5:47:34:73:61:f8:59:43:b5:59:
f2:f1:f4:ed:ca:d0:09:64:e6:c3:3d:d9:87:2d:31:
e3:8d:a6:65:b5:78:b5:13:30:a3:2c:67:ee:51:8c:
8c:e7:f9:29:82:fd:03:1d:1c:e8:09:bc:50:03:0e:
90:b8:69:1d:95:1a:89:7a:84:dc:0e:b4:09:46:97:
c8:8d:2b:52:1e:b0:80:88:a5:21:54:2b:dc:4c:06:
f8:74:5f:b5:2d:b5:3b:6e:c4:ae:02:2b:4a:c4:1b:
cc:05:35:6e:94:8f:04:39:91:47:2e:16:35:1d:5b:
cc:cd:1c:10:fd:46:48:44:08:9d:02:8a:11:46:0c:
21:e4:77:d6:a2:53:77:fb:14:d2:7a:1e:e6:da:c3:
74:db:43:8f:7f:44:42:8f:11:0e:d8:e9:55:b4:ab:
79:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0D:9B:A8:98:44:74:37:A0:CA:C8:61:4A:39:A9:12:64:A2:58:81
X509v3 Authority Key Identifier:
keyid:AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/ow2bqJhEdDegyshhSjmpEmSiWIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:bb0::/48
Signature Algorithm: sha256WithRSAEncryption
8b:2b:a4:d7:a3:d0:0c:36:91:5c:ff:51:67:ce:fd:d8:8d:91:
48:93:40:5c:91:ad:5e:01:e6:ad:7e:db:43:c0:86:26:2a:a3:
8b:c8:fe:8f:dd:13:5d:3f:75:1d:8b:b6:5b:4c:c8:7f:ac:c5:
ef:0e:37:48:d8:8d:26:96:01:6f:b0:4f:b8:b7:c3:09:c8:81:
91:b7:7a:ef:4b:86:36:73:b1:20:86:90:f2:5b:72:69:ee:4d:
82:88:01:86:05:37:a7:95:3c:7f:cc:b8:73:d2:6c:26:c9:1b:
d1:bc:10:5a:66:13:a3:7b:e2:8f:2f:ae:60:5d:00:5f:58:db:
68:f3:a0:73:c6:61:a5:7f:95:e5:b0:4a:6e:5a:f4:a3:34:1d:
59:06:75:60:29:90:d6:a1:5f:9c:72:08:da:ea:be:b0:e6:ac:
e0:c1:95:a3:a1:bc:87:cf:52:96:19:ce:40:b3:6e:e2:8f:f1:
cf:04:f4:b4:c1:c6:cd:9f:a0:d3:a5:2d:39:53:9f:70:b2:95:
18:0c:c8:2a:88:a7:4e:c4:83:43:0b:f8:1b:ba:97:01:2e:10:
36:51:d2:0f:18:f3:e6:94:93:b7:c6:1b:84:91:b7:a9:5a:99:
ca:03:fa:cb:46:2e:2e:40:ef:3b:d4:c2:fc:1c:93:77:60:65:
d6:94:a4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:59:52 2026 by rpki-client