Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ofFTm1mnq2_mq06Hfej4xcI3Zhg.roa
File: ofFTm1mnq2_mq06Hfej4xcI3Zhg.roa (raw, json)
Hash identifier: PcWzwYGZX9ZqGqbJ/kjhIHWjXfwimgHBMp3yI9Ylpx4=
Subject key identifier: A1:F1:53:9B:59:A7:AB:6F:E6:AB:4E:87:7D:E8:F8:C5:C2:37:66:18
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019D0DEDED3C3CF9DF6D3FB30F2F5021E36E
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ofFTm1mnq2_mq06Hfej4xcI3Zhg.roa
Signing time: Sat 21 Mar 2026 01:06:29 +0000
ROA not before: Sat 21 Mar 2026 01:06:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209484
IP address blocks: 2a03:5840:150::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0d:ed:ed:3c:3c:f9:df:6d:3f:b3:0f:2f:50:21:e3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Mar 21 01:06:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1f1539b59a7ab6fe6ab4e877de8f8c5c2376618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:f9:d9:50:0a:26:c6:e8:df:4e:6c:99:b9:
82:ee:80:1f:bd:66:1f:f9:b6:98:fe:5d:4f:01:0c:
dc:5f:b7:bb:ca:f6:4f:1d:2a:f8:d7:2c:b9:21:f9:
af:6f:04:65:8a:be:96:2f:5f:2c:86:bc:f5:9e:7b:
c7:9d:52:46:8b:1c:3c:6c:4f:a4:98:d6:f8:26:61:
a8:c6:19:27:59:92:2a:40:6e:4f:d6:dd:1f:aa:21:
06:8a:a2:93:d3:14:5e:21:52:ec:57:6b:01:89:53:
71:28:86:88:a7:9a:fe:ac:66:cc:a1:c9:dc:75:88:
f7:4a:b3:b0:43:91:95:af:63:67:12:4e:db:32:1b:
1a:51:27:fe:96:1e:56:b3:26:f4:8f:dc:34:d3:6d:
5c:97:47:a6:44:84:5a:18:7b:55:41:9c:7f:eb:fa:
76:e8:8b:86:32:c2:27:c9:1b:14:05:75:cb:d9:ce:
8b:1f:a2:09:a0:98:28:1e:ba:3c:84:db:61:59:f8:
a7:d8:7c:7c:4c:59:65:81:47:2c:0e:fb:c1:1a:f2:
b1:6f:15:60:f7:43:0a:e4:c2:9d:1b:72:1d:a4:1b:
e8:4f:fe:c3:eb:e3:f8:36:be:47:5c:20:29:d5:7a:
bc:f4:60:a5:aa:4b:09:00:3d:9e:94:ac:56:f4:d4:
c0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F1:53:9B:59:A7:AB:6F:E6:AB:4E:87:7D:E8:F8:C5:C2:37:66:18
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ofFTm1mnq2_mq06Hfej4xcI3Zhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:150::/48
Signature Algorithm: sha256WithRSAEncryption
8a:3f:bc:e4:74:56:36:41:03:24:b8:0e:c8:2e:5e:6e:71:e1:
db:8c:10:64:b0:67:d9:43:18:bb:be:20:c5:52:3f:aa:c7:4f:
fc:57:a7:e7:5c:0a:19:89:a9:87:e1:8a:f3:e4:5b:4b:8a:24:
ef:6e:43:d1:f4:42:58:47:f6:9d:25:6f:ce:97:7f:64:ca:e8:
7b:9b:03:4c:88:4f:ef:2b:24:66:fe:ce:34:16:16:59:d1:e2:
e6:d1:ec:86:77:f3:cb:b4:da:4f:fa:8b:27:54:33:4c:cd:50:
07:19:d6:11:f2:3a:fb:6d:81:89:19:e3:94:b6:1b:82:38:9f:
dc:fd:ef:39:17:fd:4d:d8:c7:eb:12:a5:c7:9b:2c:bc:33:43:
56:e7:00:54:a2:a1:e6:24:87:a7:15:77:ed:74:a8:e9:75:f7:
ce:d8:3a:ff:e0:68:df:29:8d:52:64:97:62:5f:d0:ba:91:da:
6d:d5:c5:c6:8b:aa:e0:07:81:15:c3:6c:c4:fb:e5:9e:76:78:
43:1c:f5:21:28:6a:b6:3a:98:df:6f:69:60:8e:6f:cf:55:0c:
6a:99:8d:da:82:38:1e:c2:fe:d1:dd:00:44:c2:0c:8c:9d:c4:
4e:ec:2c:a5:f5:1b:bc:b1:a3:b3:f6:82:9b:f0:a2:e9:d5:4d:
70:73:5d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:04 2026 by rpki-client