Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/OKbKbtfbhqmIaTZwCyUi7VGbgqQ.roa
File: OKbKbtfbhqmIaTZwCyUi7VGbgqQ.roa (raw, json)
Hash identifier: ECSlBJqqVPIJ5kMulrMoMWXmuRXynI0Ykrvegui4DOM=
Subject key identifier: 38:A6:CA:6E:D7:DB:86:A9:88:69:36:70:0B:25:22:ED:51:9B:82:A4
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 01A0D27254B823DC5E185C55C7A4D3D36B58
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/OKbKbtfbhqmIaTZwCyUi7VGbgqQ.roa
Signing time: Thu 24 Sep 2026 08:05:03 +0000
ROA not before: Thu 24 Sep 2026 08:05:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42585
IP address blocks: 37.0.8.0/24 maxlen: 24
194.213.126.0/23 maxlen: 24
213.249.64.0/21 maxlen: 24
213.249.92.0/22 maxlen: 24
2a01:448::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:72:54:b8:23:dc:5e:18:5c:55:c7:a4:d3:d3:6b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Sep 24 08:05:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38a6ca6ed7db86a9886936700b2522ed519b82a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:64:99:b3:fa:5c:ae:28:75:27:01:d4:b0:
4a:73:38:41:78:60:18:ee:26:d2:e4:af:77:66:68:
c2:78:84:66:76:d9:f1:c3:16:ea:ba:b1:c9:96:0a:
e0:60:76:ef:7a:b1:38:b8:a1:43:d0:15:be:5d:04:
40:09:eb:8f:e5:c8:ec:8c:19:2a:51:19:c7:f5:9f:
d9:a0:cb:6b:5c:c0:6e:59:0e:c8:f9:e8:37:bc:7e:
fc:bb:0c:04:19:76:6a:20:55:f8:cf:f3:13:99:2d:
33:07:ab:73:3d:9b:d4:99:4d:4d:e6:78:3a:86:2e:
c5:e5:08:df:d3:9f:34:da:cc:ad:73:a3:75:48:f2:
f7:7e:e5:02:8c:60:be:ce:b7:03:91:25:4f:9c:c2:
9d:5d:fb:73:e5:2d:fa:f0:b6:c6:42:76:66:f0:3f:
ee:48:58:db:2d:64:64:9a:d9:eb:39:c4:1e:c4:95:
c8:4a:97:65:b3:d2:87:15:ba:ff:a9:eb:20:72:7a:
f7:4f:d6:54:15:bb:f9:d8:4a:ef:30:c8:2b:a1:00:
ea:fd:39:41:33:c0:74:03:42:ff:29:ec:f4:b4:93:
f2:bb:2b:8b:30:e5:13:b4:5e:22:7d:cf:4a:40:8e:
55:96:06:3c:1b:c9:0c:2d:63:c2:cb:60:29:1b:8f:
88:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A6:CA:6E:D7:DB:86:A9:88:69:36:70:0B:25:22:ED:51:9B:82:A4
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/OKbKbtfbhqmIaTZwCyUi7VGbgqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.8.0/24
194.213.126.0/23
213.249.64.0/21
213.249.92.0/22
IPv6:
2a01:448::/32
Signature Algorithm: sha256WithRSAEncryption
9e:2e:d2:b7:2b:5b:f0:9a:82:8e:c6:db:a2:50:f5:be:19:2a:
8d:60:af:e5:e5:0f:bd:ea:3f:d8:bc:3c:87:07:45:ec:bc:f3:
ee:5f:d0:71:3a:2e:1a:a5:c5:15:e2:9f:23:1b:fb:8b:41:7f:
5e:1a:78:6a:b8:c4:61:f0:b0:86:72:97:8e:c4:99:1c:ad:67:
39:51:ac:6a:91:53:17:ca:e0:06:28:9c:72:f0:97:01:88:58:
ab:e5:4f:a3:b7:88:2c:86:7a:02:37:9c:a7:e1:bf:bf:a4:e9:
d6:03:48:36:3b:2f:b8:b8:13:f2:99:d6:ea:70:4d:c1:70:d5:
ee:f7:30:86:c5:50:d6:4a:bb:d6:a2:84:4f:07:81:d8:c3:1e:
68:5c:9c:2e:29:c0:d3:9d:d2:01:98:fc:70:50:a1:ba:8a:40:
e3:1e:b5:ed:35:4c:9e:0c:df:dd:08:8f:5a:16:30:db:c3:c9:
ff:96:bd:be:74:7b:6a:ab:93:34:d4:f3:e6:25:4f:dd:67:e1:
54:ef:14:b4:7a:d3:19:91:0c:1d:ec:9f:cc:01:06:a8:05:f5:
b3:ce:a1:39:33:80:5f:4c:a3:e7:b5:dd:c7:97:b9:43:ab:d6:
53:2f:7b:d6:be:4b:9d:d1:b1:76:9a:cb:03:b1:83:31:fa:84:
19:d9:bb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:48:38 2026 by rpki-client