Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/oqX2gExMo-KlgfeVjBQNl-V9kYQ.roa
File: oqX2gExMo-KlgfeVjBQNl-V9kYQ.roa (raw, json)
Hash identifier: AhjEc5iJ0saymH9KLRkLm0lyxGwUZpd99G/NbAW7jGw=
Subject key identifier: A2:A5:F6:80:4C:4C:A3:E2:A5:81:F7:95:8C:14:0D:97:E5:7D:91:84
Certificate issuer: /CN=b024b574a243e853df2df054c9c9f091ed47f1a1
Certificate serial: 019F2368D86A953477BF767E23C0E23997E4
Authority key identifier: B0:24:B5:74:A2:43:E8:53:DF:2D:F0:54:C9:C9:F0:91:ED:47:F1:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCS1dKJD6FPfLfBUycnwke1H8aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/oqX2gExMo-KlgfeVjBQNl-V9kYQ.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28717
IP address blocks: 194.50.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCS1dKJD6FPfLfBUycnwke1H8aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d8:6a:95:34:77:bf:76:7e:23:c0:e2:39:97:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b024b574a243e853df2df054c9c9f091ed47f1a1
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2a5f6804c4ca3e2a581f7958c140d97e57d9184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c2:c1:a5:84:a0:3b:b2:d9:1d:51:a2:e5:4c:
63:72:a9:ad:b3:bf:a3:8f:bc:b6:a9:12:1e:11:6d:
f8:48:75:8b:8b:12:91:f6:2d:49:34:76:66:b2:8b:
3d:e9:4b:91:a1:40:46:8d:4d:f6:55:1e:1e:7f:3e:
3e:64:f2:1c:90:72:6b:02:c8:82:6e:8d:65:e2:aa:
bc:2e:ba:3b:85:75:a7:b7:9a:2b:9b:57:01:15:57:
ac:67:3a:fd:c7:fe:c0:4a:76:7f:65:f4:a2:43:33:
1a:ce:91:29:0a:8f:6c:ba:97:1b:53:12:6f:03:3e:
d4:32:16:25:2f:af:d2:91:8f:16:74:1e:40:2e:5d:
30:5e:ca:e8:b2:1a:9f:9a:e3:13:75:64:29:13:b2:
54:5a:b0:ed:a8:65:e7:9e:1b:85:ae:ec:27:42:e1:
b0:ae:ba:b8:2f:05:21:9a:11:a3:e5:f0:7d:07:1c:
8c:a9:56:4d:d2:fe:c9:12:05:76:cb:34:41:a8:6c:
c9:77:d9:f8:79:a7:e8:f4:40:f1:b6:a7:d2:33:2d:
79:54:24:ec:f7:86:65:a6:6d:d1:2b:7e:81:4f:3f:
2c:20:1b:f2:b4:5e:1e:29:a4:08:6c:98:67:30:08:
7c:05:f3:97:d7:14:e0:c0:f1:dc:39:2a:24:05:5a:
73:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A5:F6:80:4C:4C:A3:E2:A5:81:F7:95:8C:14:0D:97:E5:7D:91:84
X509v3 Authority Key Identifier:
keyid:B0:24:B5:74:A2:43:E8:53:DF:2D:F0:54:C9:C9:F0:91:ED:47:F1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCS1dKJD6FPfLfBUycnwke1H8aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/oqX2gExMo-KlgfeVjBQNl-V9kYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.57.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:64:f5:78:7c:93:b9:b4:24:f7:65:30:6d:0d:15:67:5d:ac:
d2:71:58:79:e1:68:34:70:40:a9:34:fd:83:ab:ad:3c:e6:06:
8d:e9:83:73:c6:ee:ad:ba:bb:c2:06:e9:db:ee:52:98:42:53:
a9:5d:01:cf:ba:cd:5b:8f:16:fd:f3:87:4d:a0:ff:e9:73:08:
c0:14:15:7b:3a:72:8f:8a:59:94:4f:5e:e8:5e:01:c2:8a:dc:
22:5a:67:77:87:c2:1c:af:01:82:a3:72:87:32:fd:90:17:23:
cb:75:6d:98:3e:90:ee:d0:ba:5d:a0:49:0c:62:e0:06:2a:ad:
8f:44:5a:16:89:6b:7e:26:4f:cf:a9:21:8e:b7:79:25:09:b2:
ca:c2:ef:12:9a:06:b3:91:89:d8:73:c9:36:31:e9:8d:b1:93:
8a:4b:cb:90:fc:0a:74:d5:00:b6:ef:88:d9:7c:e2:6a:05:f3:
dc:02:ba:b7:e5:d2:f0:16:ea:40:49:09:d6:2e:8a:81:ab:d6:
28:9f:26:dd:05:9e:a0:90:ab:bb:85:fc:37:ff:da:c7:57:a1:
8b:76:ac:1b:47:6d:a5:9d:c6:8d:34:ee:15:f9:d9:75:c3:8d:
51:db:e2:88:43:5b:59:ae:98:da:ff:10:98:7d:7d:23:fb:c2:
ca:b2:3d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:25:54 2026 by rpki-client