Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5eab77-8917-467a-8613-418c80443bac/1/OYRXuwprzKG_D7waylC4kGrOTog.roa
File: OYRXuwprzKG_D7waylC4kGrOTog.roa (raw, json)
Hash identifier: K2KXacyz+N3Ly0q/yZtnOMfVu6KxcPZFzACR1xpiat0=
Subject key identifier: 39:84:57:BB:0A:6B:CC:A1:BF:0F:BC:1A:CA:50:B8:90:6A:CE:4E:88
Certificate issuer: /CN=1036d59074fef412115f428b978222e47b8219cc
Certificate serial: 019F236863FF8D9AB5BC688CDE844D1319A7
Authority key identifier: 10:36:D5:90:74:FE:F4:12:11:5F:42:8B:97:82:22:E4:7B:82:19:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDbVkHT-9BIRX0KLl4Ii5HuCGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5eab77-8917-467a-8613-418c80443bac/1/OYRXuwprzKG_D7waylC4kGrOTog.roa
Signing time: Thu 02 Jul 2026 15:17:51 +0000
ROA not before: Thu 02 Jul 2026 15:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208771
IP address blocks: 2a04:8280::/36 maxlen: 36
2a04:8280:1000::/36 maxlen: 36
2a04:8280:2000::/36 maxlen: 36
2a04:8280:3000::/36 maxlen: 36
2a04:8280:4000::/36 maxlen: 36
2a04:8280:5000::/36 maxlen: 36
2a04:8280:6000::/36 maxlen: 36
2a04:8280:7000::/36 maxlen: 36
2a04:8280:8000::/36 maxlen: 36
2a04:8280:9000::/36 maxlen: 36
2a04:8280:a000::/36 maxlen: 36
2a04:8280:b000::/36 maxlen: 36
2a04:8280:c000::/36 maxlen: 36
2a04:8280:d000::/36 maxlen: 36
2a04:8280:e000::/36 maxlen: 36
2a04:8280:f000::/36 maxlen: 36
2a04:8281::/36 maxlen: 36
2a04:8281:1000::/36 maxlen: 36
2a04:8281:2000::/36 maxlen: 36
2a04:8281:3000::/36 maxlen: 36
2a04:8281:4000::/36 maxlen: 36
2a04:8281:5000::/36 maxlen: 36
2a04:8281:6000::/36 maxlen: 36
2a04:8281:7000::/36 maxlen: 36
2a04:8281:8000::/36 maxlen: 36
2a04:8281:9000::/36 maxlen: 36
2a04:8281:a000::/36 maxlen: 36
2a04:8281:b000::/36 maxlen: 36
2a04:8281:c000::/36 maxlen: 36
2a04:8281:d000::/36 maxlen: 36
2a04:8281:e000::/36 maxlen: 36
2a04:8281:f000::/36 maxlen: 36
2a04:8282::/36 maxlen: 36
2a04:8282:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5eab77-8917-467a-8613-418c80443bac/1/EDbVkHT-9BIRX0KLl4Ii5HuCGcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5eab77-8917-467a-8613-418c80443bac/1/EDbVkHT-9BIRX0KLl4Ii5HuCGcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDbVkHT-9BIRX0KLl4Ii5HuCGcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:63:ff:8d:9a:b5:bc:68:8c:de:84:4d:13:19:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1036d59074fef412115f428b978222e47b8219cc
Validity
Not Before: Jul 2 15:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=398457bb0a6bcca1bf0fbc1aca50b8906ace4e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:5b:b2:1f:14:fd:3e:42:0e:99:59:8a:de:
ff:81:b5:b1:12:a3:cf:2d:e3:be:b5:f8:2b:6d:53:
1d:65:9b:8e:28:28:4a:b9:16:81:c0:d7:fa:2e:4a:
78:c2:c6:b0:87:a2:09:70:e1:a9:ef:50:1b:32:93:
af:4e:20:c4:b6:dd:d4:f1:58:26:72:90:60:94:32:
98:1d:ef:dd:52:49:d6:85:d0:92:a5:1f:ef:da:23:
e3:5e:e5:e8:0f:87:11:a2:16:8f:ce:d1:4a:a6:8f:
e2:21:14:1d:73:d8:83:3d:7b:e6:59:49:a8:b9:3c:
51:50:ff:8b:02:a1:bc:19:53:72:f0:99:96:ce:d6:
6b:be:95:d2:0d:35:3d:f7:13:87:b6:4f:79:f1:6b:
44:fd:1c:68:1a:50:a8:a8:41:08:f1:77:1a:74:19:
6b:ed:58:8e:db:c2:18:13:a6:88:2b:8b:eb:62:f3:
3e:4d:5d:8b:9e:cd:92:84:4e:03:d6:be:2e:5b:c3:
f9:5e:0e:c0:42:ba:e6:11:50:30:87:6f:60:37:bd:
95:63:4a:4e:53:43:31:a7:16:6d:dc:c9:e7:ea:cd:
22:33:ac:e2:75:31:a8:13:07:c6:75:af:bb:ed:40:
3b:04:00:d8:0e:57:d0:24:78:e0:e9:21:7a:56:4f:
ac:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:84:57:BB:0A:6B:CC:A1:BF:0F:BC:1A:CA:50:B8:90:6A:CE:4E:88
X509v3 Authority Key Identifier:
keyid:10:36:D5:90:74:FE:F4:12:11:5F:42:8B:97:82:22:E4:7B:82:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDbVkHT-9BIRX0KLl4Ii5HuCGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5eab77-8917-467a-8613-418c80443bac/1/OYRXuwprzKG_D7waylC4kGrOTog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5eab77-8917-467a-8613-418c80443bac/1/EDbVkHT-9BIRX0KLl4Ii5HuCGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:8280::-2a04:8282:1fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
27:83:89:4c:25:eb:ef:e6:12:99:a8:e9:e9:63:fd:60:de:c6:
b8:9c:77:4d:f9:f9:be:a9:e9:6b:5b:da:16:2b:ee:11:a0:3c:
a4:5d:72:2a:68:61:d0:98:ba:10:dc:6c:01:e1:22:e7:d8:97:
db:5c:73:9b:6f:a8:20:50:49:b0:79:8b:5a:5d:ff:bd:ea:6c:
1d:48:3f:20:87:38:4a:ea:ae:6a:43:f2:0a:03:2e:82:10:5d:
99:25:f8:8e:d6:60:fb:be:03:92:d3:fb:0c:6c:07:e6:3d:69:
8b:a4:ff:ad:b3:29:27:91:02:a8:4b:e6:0c:53:8d:fb:69:00:
a4:73:e8:19:c9:47:8b:48:08:21:fb:d7:0e:e2:38:b3:bd:7d:
9f:53:10:d9:47:6f:73:fb:f8:92:ff:4d:f2:46:98:46:65:13:
ec:a2:ff:9b:ce:de:f4:5c:c7:ef:5b:db:f4:7c:6b:69:ca:e8:
96:7e:99:b5:5f:b0:61:d2:1c:25:83:4e:01:99:7f:fa:ea:fc:
ba:89:e6:ed:af:d0:d8:0c:68:de:b1:68:58:58:fb:71:79:7e:
3e:70:29:9d:3e:9b:b0:f5:03:00:ba:45:74:ba:25:fe:01:c4:
38:d1:e2:18:c2:45:ab:0b:07:1a:7e:80:ac:70:59:82:c6:02:
be:65:21:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:06:53 2026 by rpki-client