Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ocPBGEk7rMPB7iUxHRuhsaT_KD8.roa
File: ocPBGEk7rMPB7iUxHRuhsaT_KD8.roa (raw, json)
Hash identifier: KmT9eCmKnbOjhIgd/U996MLBv7tQYXQxb1cbug55YgU=
Subject key identifier: A1:C3:C1:18:49:3B:AC:C3:C1:EE:25:31:1D:1B:A1:B1:A4:FF:28:3F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01A0C965338F2C4BE1A6829DA575BB70D141
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ocPBGEk7rMPB7iUxHRuhsaT_KD8.roa
Signing time: Tue 22 Sep 2026 13:54:07 +0000
ROA not before: Tue 22 Sep 2026 13:54:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41095
IP address blocks: 2a09:b380::/29 maxlen: 29
2a0c:9940::/29 maxlen: 29
2a0e:8a00::/29 maxlen: 29
2a10:5900::/29 maxlen: 29
2a10:5b00::/29 maxlen: 29
2a10:5d00::/29 maxlen: 29
2a11:5040::/29 maxlen: 29
2a11:7ac0::/29 maxlen: 29
2a11:8f40::/29 maxlen: 29
2a11:b5c0::/29 maxlen: 29
2a11:d8c0::/29 maxlen: 29
2a12:2680::/29 maxlen: 29
2a12:3700::/29 maxlen: 29
2a12:4e00::/29 maxlen: 29
2a12:6380::/29 maxlen: 29
2a12:8e80::/29 maxlen: 29
2a12:b000::/29 maxlen: 29
2a12:d900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:65:33:8f:2c:4b:e1:a6:82:9d:a5:75:bb:70:d1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 22 13:54:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1c3c118493bacc3c1ee25311d1ba1b1a4ff283f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:3b:41:53:b6:b0:74:38:b8:e2:cb:5c:a5:
b8:c1:21:54:09:55:94:33:16:09:a7:21:e4:7f:bf:
5b:52:d2:e5:f6:1e:d6:b7:9c:03:ea:6e:19:0f:b7:
78:cf:9e:7a:04:97:17:f9:88:57:b7:52:50:26:04:
7a:72:b9:6b:38:83:36:df:18:c3:da:1c:e7:35:23:
d0:6d:44:ea:90:fd:0b:c2:c3:b6:64:db:27:ed:72:
33:43:ff:fd:5d:5a:45:01:97:46:4e:c0:71:c8:61:
b2:19:94:05:dd:84:26:5a:8a:51:54:ac:e1:14:87:
c8:a0:ac:44:53:d3:41:d6:f5:c1:3e:6e:4f:da:4c:
2e:6b:80:0a:0b:84:ea:07:5c:3c:54:40:09:d9:56:
09:e8:48:1d:87:61:12:11:77:d9:8f:0b:81:d2:76:
93:a3:6c:70:a6:96:93:e9:ea:6d:56:aa:5a:c3:59:
53:96:16:f5:5d:de:4b:1c:5f:da:6d:d2:a3:f5:44:
d8:af:32:54:8b:46:e6:96:0f:33:06:03:14:e8:ee:
4c:ff:0e:21:4b:b0:8f:32:25:a9:c5:46:34:1b:38:
73:a6:98:24:96:6c:ec:bd:ba:6b:d4:77:29:0e:7b:
4f:8e:dc:b2:1a:fb:08:1a:37:66:70:45:a7:1a:df:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C3:C1:18:49:3B:AC:C3:C1:EE:25:31:1D:1B:A1:B1:A4:FF:28:3F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ocPBGEk7rMPB7iUxHRuhsaT_KD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:b380::/29
2a0c:9940::/29
2a0e:8a00::/29
2a10:5900::/29
2a10:5b00::/29
2a10:5d00::/29
2a11:5040::/29
2a11:7ac0::/29
2a11:8f40::/29
2a11:b5c0::/29
2a11:d8c0::/29
2a12:2680::/29
2a12:3700::/29
2a12:4e00::/29
2a12:6380::/29
2a12:8e80::/29
2a12:b000::/29
2a12:d900::/29
Signature Algorithm: sha256WithRSAEncryption
92:d9:21:28:59:fa:c1:56:a0:47:a0:85:c3:67:d6:2f:4e:10:
c0:21:5c:48:b5:fc:4c:67:14:4b:72:85:63:f2:47:9e:21:2c:
56:9b:93:fd:6a:5c:38:15:a5:12:c5:ad:39:3c:22:f8:fe:e9:
1d:86:66:ec:3a:1c:a0:cd:6a:e9:3f:63:dd:e0:e8:8f:41:1c:
52:2b:4f:40:f8:39:ab:a8:21:85:18:2d:3b:86:89:d0:44:91:
a1:83:5c:d9:b7:88:73:ac:be:07:d1:51:e9:e3:aa:13:93:f8:
87:38:f4:ce:e5:c3:27:a8:50:22:77:27:dd:60:da:f8:12:17:
c0:b9:8e:46:bf:07:6d:a4:85:f6:c4:53:26:3f:34:0e:90:a2:
ad:76:a1:6e:76:7f:17:cf:dd:17:2a:2a:ce:29:07:18:7c:eb:
49:bc:88:45:67:94:1a:bc:45:f6:c9:17:3e:c4:a9:da:2e:a1:
13:63:97:31:1b:1a:b3:71:46:70:e3:46:fa:97:4e:b6:e7:50:
23:3a:00:14:6c:33:96:91:f4:e0:0d:0d:0d:ac:90:60:e1:fa:
2a:1b:a0:8b:9b:e4:3b:80:89:d3:f6:d9:0c:b7:98:5f:f5:4b:
a9:a1:ee:7a:3b:ef:b4:00:01:2a:d7:f7:42:74:8a:0f:d4:26:
b4:14:08:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:49:45 2026 by rpki-client