Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/Ofz6wIgtxaRCibyAhk8UZFR46mk.roa
File: Ofz6wIgtxaRCibyAhk8UZFR46mk.roa (raw, json)
Hash identifier: pfLMEVNUomq+htwWQYV9o7H/mwEOU2ZbBFVRp04UREM=
Subject key identifier: 39:FC:FA:C0:88:2D:C5:A4:42:89:BC:80:86:4F:14:64:54:78:EA:69
Certificate issuer: /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial: 01A09A5C7B94E6BB7FAED97C066F5A3902AF
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/Ofz6wIgtxaRCibyAhk8UZFR46mk.roa
Signing time: Sun 13 Sep 2026 10:42:27 +0000
ROA not before: Sun 13 Sep 2026 10:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48571
IP address blocks: 185.62.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:5c:7b:94:e6:bb:7f:ae:d9:7c:06:6f:5a:39:02:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Validity
Not Before: Sep 13 10:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39fcfac0882dc5a44289bc80864f14645478ea69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0c:bd:75:ec:9f:94:0f:8a:25:fe:59:ae:0a:
2b:aa:b6:6c:05:8e:06:ef:dc:bb:b0:f1:f0:6b:4e:
6d:fb:24:18:bb:2d:74:23:19:9e:6b:04:c1:75:d8:
12:93:96:32:e4:c7:e1:5c:89:39:2b:76:ab:cc:be:
3a:aa:10:29:e5:21:be:4b:b2:16:b3:d8:20:16:8b:
ed:05:86:75:15:9a:84:5c:c9:1e:86:46:2b:d5:48:
a8:8e:e6:5f:41:f7:b3:e9:db:19:fb:68:e8:69:98:
11:5c:7c:ff:70:66:86:d0:4d:16:d5:82:df:aa:5e:
bc:47:5e:1f:0d:47:76:95:b4:0a:86:b6:fd:9d:42:
b2:63:df:f6:b8:82:ce:ed:91:55:12:92:86:9b:14:
2d:77:22:d9:47:21:75:d3:e1:a8:7a:6f:8f:94:05:
0d:79:ea:1a:bc:dd:ec:7c:7b:84:85:7e:b2:3a:1e:
d6:d4:f9:65:f1:bf:e7:af:ea:50:91:69:e1:be:4c:
10:bc:01:25:26:5b:98:3d:c4:47:6c:89:ed:41:76:
e5:1b:2f:29:65:70:35:13:f9:73:8f:13:e8:00:4d:
4f:da:dd:a7:3e:39:55:c8:fd:d3:55:c2:00:4b:37:
ca:67:05:6f:96:a4:18:d6:1a:9d:25:2c:4e:0f:cb:
e0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FC:FA:C0:88:2D:C5:A4:42:89:BC:80:86:4F:14:64:54:78:EA:69
X509v3 Authority Key Identifier:
keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/Ofz6wIgtxaRCibyAhk8UZFR46mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.8.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a3:d8:07:11:d6:c4:2b:23:53:7a:ea:19:6c:e2:86:55:b6:
f5:44:b3:e4:6b:30:44:5d:7f:52:83:90:56:58:54:63:a8:7b:
86:d1:1e:32:7e:3c:d6:87:5c:de:15:a6:d2:f9:a0:f6:ac:f0:
22:43:c5:cf:84:91:b3:8a:9f:88:31:b1:9f:54:49:29:2e:87:
bf:0f:ca:38:01:76:c1:b4:26:b4:9f:3e:12:33:e5:18:a6:03:
9c:35:fe:5a:f1:29:40:8f:b3:0e:00:ac:d1:db:1c:47:e8:b3:
28:94:95:27:8d:49:6e:28:e2:3c:d7:99:b6:64:20:62:e8:1a:
88:15:31:43:35:9f:21:4b:e8:7e:77:de:bf:83:e0:e0:d5:a8:
7c:86:d3:2b:41:05:9b:08:b5:67:b8:53:11:49:35:69:4f:ee:
5a:17:c0:f5:57:09:1c:41:86:33:10:bc:b0:56:1c:6f:da:31:
44:a5:d1:19:e8:80:8b:0d:d1:27:0e:9f:16:1f:c9:24:64:cf:
07:81:86:2a:42:99:b3:87:f2:b1:b4:e4:f9:90:97:bc:5b:a3:
b1:4b:3f:49:5a:08:4f:d1:6f:f0:68:0a:fd:5b:fc:39:ed:c6:
9c:60:2b:6a:cc:83:4c:8a:03:7f:90:1f:70:8c:38:f8:bf:56:
05:6c:f4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:28:16 2026 by rpki-client