Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/olY9Vw9L2MNMDqLJGtdPv1HO8ps.roa
File: olY9Vw9L2MNMDqLJGtdPv1HO8ps.roa (raw, json)
Hash identifier: /jbkztdtcnXP+Wco5NBEQLRSjX96nCNUtjjfbVVSYYQ=
Subject key identifier: A2:56:3D:57:0F:4B:D8:C3:4C:0E:A2:C9:1A:D7:4F:BF:51:CE:F2:9B
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019F146B2EC7BA4B2D449F46F2B8B3B28E0F
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/olY9Vw9L2MNMDqLJGtdPv1HO8ps.roa
Signing time: Mon 29 Jun 2026 17:26:36 +0000
ROA not before: Mon 29 Jun 2026 17:26:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219340
IP address blocks: 194.190.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:6b:2e:c7:ba:4b:2d:44:9f:46:f2:b8:b3:b2:8e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jun 29 17:26:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2563d570f4bd8c34c0ea2c91ad74fbf51cef29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:f5:f1:62:0f:16:c3:78:bf:c5:43:c4:c0:
b3:32:2b:f0:18:47:c6:d4:aa:ed:ca:b3:11:c9:05:
79:29:5c:26:86:de:5a:23:59:4f:52:4e:36:ac:84:
20:f3:03:32:4e:83:fd:1b:4e:c4:63:b7:bd:00:bc:
9c:88:db:b7:41:b9:be:97:19:2c:f5:28:d2:df:9b:
01:74:e5:a9:d4:15:e5:35:4c:69:82:a1:7b:06:76:
88:a6:03:0c:5e:93:df:15:b8:09:f5:e9:8e:5a:7e:
13:f0:f9:2a:4c:0b:47:21:ba:02:d0:31:8f:3b:68:
30:48:eb:02:2d:9a:7e:ac:08:74:ae:7e:0a:36:40:
1f:bc:1f:69:9b:70:04:76:ad:ee:bd:5b:36:9e:2a:
0c:18:fd:63:b3:8c:e1:1a:2a:6d:d7:f3:d4:21:cd:
ac:c6:8e:87:8f:ae:cb:4b:2b:d2:3c:75:aa:a3:c8:
7a:3d:53:6e:04:cc:6b:17:fd:d6:00:af:79:c1:dd:
13:56:85:69:e5:65:4d:ab:c9:97:bd:0a:7c:8b:8b:
02:35:43:8a:fa:27:e3:a0:ab:ee:a9:29:7c:16:84:
5d:fa:65:5b:71:b0:cc:9d:62:c1:bc:62:d9:a3:82:
f8:81:81:11:da:15:82:f3:aa:87:ff:1a:05:c1:00:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:56:3D:57:0F:4B:D8:C3:4C:0E:A2:C9:1A:D7:4F:BF:51:CE:F2:9B
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/olY9Vw9L2MNMDqLJGtdPv1HO8ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.190.112.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:e0:a7:4f:34:6f:35:c6:df:bb:92:c6:63:99:c3:98:84:8d:
66:f2:27:bb:ab:6b:89:a4:e9:85:6c:a7:d2:f8:fe:ff:72:97:
cb:56:5b:b2:c1:27:3b:1b:8b:f5:fc:25:7f:24:2d:53:c7:3e:
09:3f:2d:c5:c5:39:52:5a:aa:94:7a:2e:81:9c:12:78:3a:ba:
ce:4b:a1:70:22:d5:08:9e:7c:63:a7:e5:ba:11:70:95:6f:8b:
e0:b5:9d:70:45:70:81:50:e3:1c:c2:53:2a:e5:19:4d:54:91:
a3:75:bc:a5:cd:12:bb:30:ac:8e:3c:5d:a7:cf:90:7a:ed:c4:
f0:db:9b:28:07:8a:a7:c0:96:03:a1:cc:b4:23:5e:2f:26:46:
e2:db:a5:d7:96:c4:86:7b:49:dc:46:c3:0e:67:98:9b:70:c5:
8d:a0:06:84:39:d8:ac:b7:56:c3:7f:fe:5e:2f:0c:b5:22:0c:
6c:2c:e2:9a:86:c2:00:9a:b5:74:17:26:53:c6:10:c2:ad:63:
52:18:b1:3c:09:9a:d3:73:8c:0f:9e:5e:25:4b:7e:8a:e0:c3:
f7:80:1d:78:8c:70:fd:d4:21:0e:a8:41:c1:3f:1c:9c:5b:55:
02:c5:92:e1:21:ea:33:b7:2d:be:74:ce:02:16:74:a7:f7:ef:
55:45:69:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:20 2026 by rpki-client