Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/oe-1CFwfBXxRDhex7FkwF1JYZTA.roa
File: oe-1CFwfBXxRDhex7FkwF1JYZTA.roa (raw, json)
Hash identifier: FBEY8qRdvuiENUskWnHAGFekMX8Uope29YCFoFBpnsk=
Subject key identifier: A1:EF:B5:08:5C:1F:05:7C:51:0E:17:B1:EC:59:30:17:52:58:65:30
Certificate issuer: /CN=1281fd01cce255a27c2eb3cf1753af68fbec28fd
Certificate serial: 019F23692C612390AE299C98A4C09906B5BA
Authority key identifier: 12:81:FD:01:CC:E2:55:A2:7C:2E:B3:CF:17:53:AF:68:FB:EC:28:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/oe-1CFwfBXxRDhex7FkwF1JYZTA.roa
Signing time: Thu 02 Jul 2026 15:18:42 +0000
ROA not before: Thu 02 Jul 2026 15:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60115
IP address blocks: 5.102.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2c:61:23:90:ae:29:9c:98:a4:c0:99:06:b5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1281fd01cce255a27c2eb3cf1753af68fbec28fd
Validity
Not Before: Jul 2 15:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1efb5085c1f057c510e17b1ec59301752586530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:75:b3:84:67:1f:ef:43:30:27:62:56:a9:
b6:60:ec:cf:78:c7:ea:84:f1:41:72:01:6d:e4:9f:
b9:93:2f:21:6d:7d:c0:06:ec:b2:d7:c0:94:95:d4:
94:77:e9:38:88:65:db:62:23:b3:13:62:fd:7e:2e:
32:65:bc:fd:87:06:89:15:5d:79:a9:1a:e2:15:c1:
00:7d:9b:87:f9:d6:36:d7:0b:5c:58:35:44:83:0f:
1f:3c:a4:21:1a:4d:63:d6:e9:44:07:18:4f:d3:29:
fc:d8:55:46:b8:1a:4f:b7:30:47:55:e5:36:d2:43:
e9:b6:0c:c1:32:4a:90:3d:85:96:ac:35:52:91:35:
d4:85:f2:a9:eb:11:52:cc:05:02:b4:58:5b:36:52:
10:10:c4:be:f1:b4:4f:c7:30:03:e7:e1:52:e0:ee:
1e:c0:99:cc:6c:04:88:9e:91:64:0d:3f:b6:a6:ce:
d5:c0:74:60:92:39:0f:99:a5:1b:bc:af:fb:75:4f:
c0:77:aa:95:cd:16:8f:54:8a:8f:78:24:e6:90:bb:
10:9b:af:b5:ad:7d:88:90:ba:de:5e:54:e7:a5:61:
40:e2:ac:cc:47:fe:5f:f3:61:89:27:0c:c6:af:c4:
ef:3c:bc:b7:ed:43:e4:ea:ae:a5:c9:7d:89:4d:94:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EF:B5:08:5C:1F:05:7C:51:0E:17:B1:EC:59:30:17:52:58:65:30
X509v3 Authority Key Identifier:
keyid:12:81:FD:01:CC:E2:55:A2:7C:2E:B3:CF:17:53:AF:68:FB:EC:28:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoH9AcziVaJ8LrPPF1OvaPvsKP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/oe-1CFwfBXxRDhex7FkwF1JYZTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/EoH9AcziVaJ8LrPPF1OvaPvsKP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.32.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:89:67:73:17:54:7c:24:8a:c3:e3:8b:bf:20:e6:2c:bd:60:
c8:30:71:d8:98:a4:4e:26:86:44:bb:d3:e1:6e:d7:5e:17:dd:
f2:66:16:c9:b6:04:c3:d0:0d:43:9b:8b:55:17:a9:1c:6b:cc:
5e:c1:3a:1a:84:6d:3c:51:39:bf:c6:c7:e7:12:78:07:f0:1c:
7a:f3:16:27:f0:c0:84:60:cc:b9:47:0a:a9:0c:1e:d4:0d:a2:
6a:4d:6e:49:92:b2:e9:b4:d0:a6:86:f1:b2:52:ee:85:25:f9:
30:ab:3d:56:05:bb:85:39:5a:3f:85:75:9b:03:8a:6a:42:7f:
0a:f0:c9:ff:8b:16:18:ac:bd:4e:f1:94:ef:a2:4f:2e:29:33:
05:b9:8e:01:18:b0:c3:75:72:a6:84:68:f5:8b:93:25:c4:b8:
dd:6a:01:15:f4:ef:f3:1c:a0:56:1c:38:d8:c9:44:9c:97:e2:
41:c3:ad:1a:93:09:59:40:74:c7:73:2e:7e:f0:c4:84:eb:cb:
c6:5c:da:44:88:54:7c:6e:fc:a6:23:8a:96:49:60:fe:59:8f:
b7:66:12:2d:8d:23:82:34:22:7f:e1:a8:21:45:02:4c:7c:45:
46:ec:33:eb:36:8d:7a:5e:85:d7:73:e0:00:8a:60:b0:9d:74:
98:5c:26:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:47 2026 by rpki-client