Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/oPMPQL97ioOPzcI3nCulVuvoz9s.roa
File: oPMPQL97ioOPzcI3nCulVuvoz9s.roa (raw, json)
Hash identifier: sBtKUfuDXNASlU06N3GnwSJFJv6yHZNIVqXOTCSz1yg=
Subject key identifier: A0:F3:0F:40:BF:7B:8A:83:8F:CD:C2:37:9C:2B:A5:56:EB:E8:CF:DB
Certificate issuer: /CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
Certificate serial: 019C8F2A2050095D951124FD37E0C6F34E02
Authority key identifier: 06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/oPMPQL97ioOPzcI3nCulVuvoz9s.roa
Signing time: Tue 24 Feb 2026 10:20:28 +0000
ROA not before: Tue 24 Feb 2026 10:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211351
IP address blocks: 2a10:f8c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:2a:20:50:09:5d:95:11:24:fd:37:e0:c6:f3:4e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
Validity
Not Before: Feb 24 10:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0f30f40bf7b8a838fcdc2379c2ba556ebe8cfdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:9e:27:7a:83:f9:d0:40:23:c2:6f:b1:2b:
de:91:38:53:66:1b:0e:46:8e:94:ea:2a:da:93:65:
98:a2:8f:36:8c:4a:e5:43:b9:6e:a6:47:d9:c6:e0:
b3:1c:50:32:30:df:18:47:70:a5:df:d0:89:e9:6a:
a3:3c:74:4b:df:67:7f:ba:6e:31:41:9c:dc:08:66:
1d:b5:2a:7f:0f:bb:0e:a5:e1:b9:f4:08:1e:ea:59:
4e:64:3b:04:f3:cc:e5:5e:c0:a4:93:a0:65:0b:00:
94:2a:46:03:45:fd:21:c2:f4:3c:9f:10:4e:b8:14:
23:d3:da:46:94:07:20:bd:6a:9a:d2:d4:6b:cf:cb:
b1:1a:5d:27:b3:ba:ec:27:b1:1c:98:7b:46:a3:70:
8c:4b:01:f5:a5:20:ac:22:ed:cb:b2:38:38:50:1d:
e7:d7:d5:12:f1:ac:26:5e:83:04:e3:f2:15:ed:c1:
fe:c3:f7:81:54:86:96:96:51:e6:dc:0c:f3:34:ba:
2e:16:67:b6:02:f1:44:b1:69:26:43:71:c9:9f:54:
4f:0e:e3:ee:fa:47:53:00:ed:bf:5c:1b:4e:e0:dc:
1e:86:df:51:78:53:20:08:54:bc:43:fc:b7:1b:08:
bb:4a:2d:7a:a1:a4:0c:e8:94:6a:9c:ba:58:fd:5c:
5a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F3:0F:40:BF:7B:8A:83:8F:CD:C2:37:9C:2B:A5:56:EB:E8:CF:DB
X509v3 Authority Key Identifier:
keyid:06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/oPMPQL97ioOPzcI3nCulVuvoz9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:f8c0::/29
Signature Algorithm: sha256WithRSAEncryption
61:92:75:3b:e1:04:95:15:20:92:4b:b5:72:ec:18:90:53:18:
6c:fa:d2:fa:38:3f:26:87:f4:5d:bb:cd:af:46:a0:51:37:f9:
25:d0:c3:78:b7:cc:62:fe:48:82:a0:1f:45:06:35:2e:c8:9f:
80:d0:90:85:f5:71:9c:e5:d8:41:33:65:dd:c2:ac:3c:af:83:
7c:a6:0a:c0:5a:b6:60:c3:3f:31:6c:45:dc:c9:9b:5b:42:69:
da:bd:03:9d:a6:88:27:53:38:08:e4:57:71:7e:6f:db:47:f9:
ee:0c:24:7a:88:24:34:d7:75:08:22:2f:b0:50:4f:9a:08:36:
2a:48:5a:de:60:48:f5:04:fd:80:41:04:85:08:68:35:2a:1b:
b8:a8:7d:81:05:fc:83:34:bf:db:e5:b1:48:5a:2f:c6:54:73:
07:41:8d:7b:04:6d:85:16:2d:4d:b2:b6:e8:40:5e:71:7d:b8:
9f:e0:07:84:59:85:13:51:07:82:39:1a:13:19:df:a4:cd:6e:
f7:76:5b:87:27:64:1e:df:7a:e3:d5:d2:15:25:6a:4a:6f:ec:
37:ec:e3:ad:13:04:99:b0:4d:43:4f:6f:6f:f7:f4:50:c5:fd:
db:aa:15:38:48:bd:98:10:20:89:9e:97:e9:d0:bf:e5:22:00:
0c:fc:63:c1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZyPKiBQCV2VEST9N+DG804CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2M2JhZGM3ODUzYjA1MTAwYTZiMjI0ZGRjZWZjMThlMmU3
ZDNkZDUwHhcNMjYwMjI0MTAyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGYzMGY0MGJmN2I4YTgzOGZjZGMyMzc5YzJiYTU1NmViZThjZmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/meJ3qD+dBAI8JvsSvekThTZhsO
Ro6U6irak2WYoo82jErlQ7lupkfZxuCzHFAyMN8YR3Cl39CJ6WqjPHRL32d/um4x
QZzcCGYdtSp/D7sOpeG59Age6llOZDsE88zlXsCkk6BlCwCUKkYDRf0hwvQ8nxBO
uBQj09pGlAcgvWqa0tRrz8uxGl0ns7rsJ7EcmHtGo3CMSwH1pSCsIu3Lsjg4UB3n
19US8awmXoME4/IV7cH+w/eBVIaWllHm3AzzNLouFme2AvFEsWkmQ3HJn1RPDuPu
+kdTAO2/XBtO4Nweht9ReFMgCFS8Q/y3Gwi7Si16oaQM6JRqnLpY/VxaywIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFKDzD0C/e4qDj83CN5wrpVbr6M/bMB8GA1UdIwQY
MBaAFAY7rceFOwUQCmsiTdzvwY4ufT3VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmp1dHg0VTdCUkFLYXlKTjNPX0JqaTU5UGRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kMDlmYjAtOWFhNS00YjVhLThhNGYt
YTIzNzQ0NGFmODI5LzEvb1BNUFFMOTdpb09QemNJM25DdWxWdXZvejlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9kMDlmYjAtOWFhNS00YjVhLThhNGYtYTIzNzQ0NGFmODI5
LzEvQmp1dHg0VTdCUkFLYXlKTjNPX0JqaTU5UGRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhD4wDAN
BgkqhkiG9w0BAQsFAAOCAQEAYZJ1O+EElRUgkku1cuwYkFMYbPrS+jg/Jof0XbvN
r0agUTf5JdDDeLfMYv5IgqAfRQY1LsifgNCQhfVxnOXYQTNl3cKsPK+DfKYKwFq2
YMM/MWxF3MmbW0Jp2r0DnaaIJ1M4CORXcX5v20f57gwkeogkNNd1CCIvsFBPmgg2
Kkha3mBI9QT9gEEEhQhoNSobuKh9gQX8gzS/2+WxSFovxlRzB0GNewRthRYtTbK2
6EBecX24n+AHhFmFE1EHgjkaExnfpM1u93ZbhydkHt9649XSFSVqSm/sN+zjrRME
mbBNQ09vb/f0UMX926oVOEi9mBAgiZ6X6dC/5SIADPxjwQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:59:58 2026 by rpki-client