Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/OgAXOTf3IDVfT6V0C3TcApv_UQI.roa
File: OgAXOTf3IDVfT6V0C3TcApv_UQI.roa (raw, json)
Hash identifier: eQxYLK/wPde6Uj0bPjt5BRN1ClEuJ7VpeoOHlBMb9xc=
Subject key identifier: 3A:00:17:39:37:F7:20:35:5F:4F:A5:74:0B:74:DC:02:9B:FF:51:02
Certificate issuer: /CN=6e199938e5863ef3ec7a17e3e957821122cacb72
Certificate serial: 019F236833D4553EC4EA943484E566B868B4
Authority key identifier: 6E:19:99:38:E5:86:3E:F3:EC:7A:17:E3:E9:57:82:11:22:CA:CB:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/OgAXOTf3IDVfT6V0C3TcApv_UQI.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57913
IP address blocks: 37.61.228.0/24 maxlen: 24
81.30.109.0/24 maxlen: 24
2a13:f600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:33:d4:55:3e:c4:ea:94:34:84:e5:66:b8:68:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e199938e5863ef3ec7a17e3e957821122cacb72
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a00173937f720355f4fa5740b74dc029bff5102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:70:5c:83:e4:5b:5a:cf:73:72:e7:7f:0e:
5e:ba:6b:ad:23:0c:af:28:30:45:dc:60:6e:b8:ff:
9e:85:11:d5:67:bb:3d:d9:fa:7c:45:4f:64:df:ad:
54:74:be:29:5e:45:62:2a:e8:fc:6d:1b:b4:58:a1:
0b:8a:d7:5f:c3:ce:b8:e2:43:7f:fa:ab:b3:01:72:
32:c6:db:35:bd:a1:90:7b:15:0d:ee:70:26:99:38:
6c:bb:f7:c6:09:d4:f7:22:59:fc:42:95:3b:60:56:
59:df:71:85:6f:53:9e:1e:08:c9:16:74:33:6d:0a:
8b:4e:cc:27:70:5f:87:71:e3:45:80:e5:cd:0d:42:
b9:21:be:15:c6:8c:42:53:7c:80:6b:5f:a3:70:9e:
c6:2f:20:38:cf:09:db:20:e5:d8:54:cf:4f:10:6b:
2f:33:41:70:4e:12:bf:d4:06:53:dc:0a:d0:f7:97:
fa:62:08:bb:a4:f2:e2:a9:1e:0b:98:97:83:a5:2e:
e9:36:0c:f4:f6:f0:99:0c:57:36:df:9c:26:6e:a8:
c3:3f:33:ed:fd:7e:91:8c:d7:09:94:97:45:b0:88:
b0:b5:f4:8b:64:d6:00:1c:7e:e2:44:14:c7:84:91:
0b:be:6f:7a:a3:96:3e:83:75:18:b2:1a:22:c4:c2:
49:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:00:17:39:37:F7:20:35:5F:4F:A5:74:0B:74:DC:02:9B:FF:51:02
X509v3 Authority Key Identifier:
keyid:6E:19:99:38:E5:86:3E:F3:EC:7A:17:E3:E9:57:82:11:22:CA:CB:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/OgAXOTf3IDVfT6V0C3TcApv_UQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.228.0/24
81.30.109.0/24
IPv6:
2a13:f600::/29
Signature Algorithm: sha256WithRSAEncryption
61:1a:62:58:4d:26:79:f5:aa:be:e3:d7:be:51:7b:0d:36:53:
f9:69:1b:6a:b9:2a:d3:d5:13:bf:98:77:06:23:42:41:05:14:
2c:de:56:4e:d1:3f:7f:73:7a:de:2d:a2:b7:37:bd:b3:15:cd:
40:6b:e7:de:d8:29:c4:3e:61:7d:9e:2e:84:38:be:fe:39:9f:
70:e2:b4:44:dc:82:f6:30:e1:b8:92:29:68:f3:b1:8e:20:40:
f2:29:0f:e8:cd:a5:4b:0b:a6:cb:84:b0:7b:88:f2:8a:21:3a:
14:66:70:88:c9:29:3b:48:a9:33:4d:0f:b0:fc:0a:97:cc:bd:
e6:db:4a:d4:ed:31:b3:8e:e9:79:53:44:e8:dd:3f:20:22:c6:
39:4b:24:9c:75:19:00:35:62:ff:fa:9c:06:49:9d:40:f1:79:
fc:31:ec:50:3b:86:e7:3f:6b:2a:58:96:a0:e6:58:19:06:c0:
2f:bf:61:d2:4b:03:b1:52:36:b3:b6:f2:e0:48:e1:1f:d2:40:
7b:e8:c5:73:0d:86:cc:58:bc:6e:f8:e3:8f:bf:7d:e6:56:fc:
8d:36:8b:10:83:99:41:a3:ce:98:07:c4:d2:1e:4f:14:be:6c:
b1:6d:f7:5a:5b:ed:be:61:8c:c4:49:f1:49:bc:a5:c3:3b:1a:
52:aa:1f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:49 2026 by rpki-client