Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/oiOso2ah4DIMtsn2kxKAzGDyirs.roa
File: oiOso2ah4DIMtsn2kxKAzGDyirs.roa (raw, json)
Hash identifier: aLcgxvos1HLAujPoJMMu3Y2LHkeSWIRqhOML8XYEQlQ=
Subject key identifier: A2:23:AC:A3:66:A1:E0:32:0C:B6:C9:F6:93:12:80:CC:60:F2:8A:BB
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019DBB8769185C30666B1059A466647E9959
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/oiOso2ah4DIMtsn2kxKAzGDyirs.roa
Signing time: Thu 23 Apr 2026 18:08:26 +0000
ROA not before: Thu 23 Apr 2026 18:08:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 2a07:f240::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bb:87:69:18:5c:30:66:6b:10:59:a4:66:64:7e:99:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Apr 23 18:08:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a223aca366a1e0320cb6c9f6931280cc60f28abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fd:1d:06:a6:ac:41:f6:76:40:7e:c9:3d:21:
ff:b7:96:9e:86:0c:52:b9:db:b4:3a:fb:72:9a:1c:
f9:f4:37:54:45:e8:0d:02:91:75:52:76:a9:f8:01:
4d:46:55:8c:e4:9a:72:04:1d:f6:a0:a4:34:00:f9:
5f:4c:f2:f4:4d:72:0a:fe:41:fa:9c:2d:c0:fb:37:
a0:c6:87:5c:1d:76:d7:ee:88:a5:dd:5a:10:b3:b1:
fa:2c:6e:3e:ae:87:9e:70:d3:4a:c2:f6:fc:d8:9b:
42:fb:61:b0:75:ce:ee:c6:d1:b5:4c:77:03:54:9a:
c4:c4:4d:cb:e6:2a:ea:30:8a:cc:de:43:7f:8a:57:
5e:b1:04:dd:7c:22:41:78:07:e4:73:1b:29:30:d9:
35:43:ac:37:d6:ce:66:77:0d:c2:65:ac:df:01:6e:
71:54:f3:46:4f:b1:d0:e1:ba:3e:60:6c:31:07:15:
24:75:73:cd:5d:e1:10:e6:ca:3a:7f:d0:fa:23:67:
a2:14:64:b8:1b:28:27:d4:68:67:5c:3a:ef:02:4e:
ba:d3:19:13:73:c3:df:9e:a3:9b:91:40:29:a8:c3:
a7:c6:50:e6:8b:0c:55:db:8d:4a:34:e8:49:c8:79:
ea:67:61:1a:f6:a6:37:fe:ce:99:49:8a:84:8b:89:
75:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:23:AC:A3:66:A1:E0:32:0C:B6:C9:F6:93:12:80:CC:60:F2:8A:BB
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/oiOso2ah4DIMtsn2kxKAzGDyirs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f240::/29
Signature Algorithm: sha256WithRSAEncryption
8e:2c:12:1d:39:dd:4a:66:36:d9:fb:1f:50:84:dd:80:93:dd:
a3:56:40:d3:1e:e4:d7:3c:05:81:67:30:1b:f0:31:98:ab:46:
1d:9b:02:64:11:62:a4:97:d2:79:b8:5b:28:ff:bb:dc:22:19:
37:e6:8c:85:54:ea:17:55:33:ca:53:55:9c:ae:d0:01:6c:60:
7c:cf:c0:43:b4:81:7d:c5:f3:84:c9:b9:fc:cb:0b:0d:6d:b7:
c2:84:f2:0e:fc:ae:6a:fc:ca:6b:81:3d:d2:71:ae:d2:f0:45:
51:e3:28:e6:b6:16:34:77:4d:fd:12:f4:01:bd:65:ba:18:1e:
e3:3e:95:a6:3a:09:40:9d:a8:cd:52:ba:73:5f:ca:68:f2:72:
66:96:57:c2:65:5f:30:da:b2:e1:ed:71:be:95:91:ac:65:6b:
00:3d:70:f4:1f:33:a9:12:39:3c:da:a8:a1:42:09:a4:50:4a:
a3:2a:d0:10:e0:bc:c5:74:fe:c1:30:fb:f1:80:14:e0:25:9f:
87:b3:62:b8:42:16:1d:06:c2:79:d6:f6:ea:79:a5:45:8e:95:
71:22:80:79:f0:b0:73:4e:f8:a1:fd:1e:b6:c5:3f:bf:0c:92:
a0:64:2e:25:82:7b:df:5d:35:a9:fd:d6:4d:cd:fe:94:9e:0b:
d7:8d:d8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:04:00 2026 by rpki-client