Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/oaOpWcKp_RuDUI-E4PBVi_f7tgA.roa
File: oaOpWcKp_RuDUI-E4PBVi_f7tgA.roa (raw, json)
Hash identifier: 5XWXckD+m2ntiiCMnH8OwKYbZ7yEtoattiLCxagINqU=
Subject key identifier: A1:A3:A9:59:C2:A9:FD:1B:83:50:8F:84:E0:F0:55:8B:F7:FB:B6:00
Certificate issuer: /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial: 01A1975D70CB4C25D5CD04756BE0060EE81E
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/oaOpWcKp_RuDUI-E4PBVi_f7tgA.roa
Signing time: Sun 01 Nov 2026 13:47:25 +0000
ROA not before: Sun 01 Nov 2026 13:47:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213799
IP address blocks: 2a01:f900:214::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:97:5d:70:cb:4c:25:d5:cd:04:75:6b:e0:06:0e:e8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Validity
Not Before: Nov 1 13:47:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1a3a959c2a9fd1b83508f84e0f0558bf7fbb600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:fa:5a:83:13:bc:10:20:8c:8a:a4:80:a9:
9c:22:f0:16:36:6a:37:46:e9:8c:15:33:f7:72:00:
4b:83:63:99:fe:f9:2c:21:95:f8:b5:9a:b1:a2:c2:
9b:94:e9:07:7c:01:29:0f:35:80:98:b7:e0:91:f2:
6c:34:53:b5:d9:45:e8:47:9c:54:2d:74:4b:7c:33:
e7:1a:5b:65:30:13:d3:c6:7e:8e:3f:d5:19:76:1d:
1c:13:bf:9c:1d:30:f2:bb:17:e7:8e:28:70:6f:25:
53:a9:ad:c3:fb:cb:85:8e:68:40:a9:03:c9:4c:a0:
1e:35:6a:24:b7:2e:82:54:ce:b6:73:03:af:21:34:
62:2c:d4:0f:2b:0a:ec:98:48:05:38:9f:87:d0:9f:
1b:cf:26:10:76:49:c3:f0:d2:64:bc:ed:0e:5b:f5:
41:ce:4c:87:c9:6e:88:f5:bf:60:25:f0:d8:d9:a2:
d0:4d:d3:78:2c:fe:21:22:c6:b6:ea:85:de:eb:8b:
72:16:9f:30:a0:c8:4a:53:dc:20:90:6e:e0:fb:07:
c0:cb:e1:37:97:a6:be:c5:c8:8f:ca:2e:fa:9f:02:
53:39:e0:e4:01:41:5e:28:ee:57:a2:75:6f:e5:bd:
bc:8a:52:cc:4c:43:0d:d0:29:91:5d:a9:8b:94:eb:
d4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A3:A9:59:C2:A9:FD:1B:83:50:8F:84:E0:F0:55:8B:F7:FB:B6:00
X509v3 Authority Key Identifier:
keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/oaOpWcKp_RuDUI-E4PBVi_f7tgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f900:214::/48
Signature Algorithm: sha256WithRSAEncryption
1f:79:5e:7e:21:94:0d:e8:25:7d:86:fa:47:46:9f:98:95:f9:
61:32:fb:bd:20:14:76:c3:be:6f:55:8b:92:2c:f4:41:9d:d3:
a3:63:f9:c4:1c:a3:af:4e:4a:d7:f0:ab:e5:23:90:67:66:a9:
b8:e6:de:87:c2:37:70:11:ff:ca:10:14:b5:4b:90:1c:89:41:
f0:b1:df:43:35:25:71:df:32:4a:80:c8:ab:b4:59:6b:ab:5a:
7e:db:36:ab:6b:a1:2b:93:dd:f6:10:af:c9:3e:7b:15:5e:75:
c8:42:7e:23:5b:32:5b:2e:e6:11:5f:f2:9b:b3:53:87:55:69:
1a:f6:7c:57:b6:65:2a:50:ab:7c:44:ee:85:27:02:b9:96:3f:
71:94:e5:c2:2a:30:e0:23:67:a5:b1:3c:36:c3:8c:6e:3e:ce:
b7:4f:3f:c3:ca:f4:48:e5:3b:71:3a:10:14:f5:fa:a0:27:0c:
a9:4b:b2:e9:cd:e5:06:4f:4b:4c:0f:a6:65:45:f7:e7:32:ea:
67:8e:10:57:1d:1d:77:77:f3:d2:3a:9d:0c:1a:50:7d:fd:71:
0f:32:9e:67:34:d2:96:4e:ee:27:2f:94:9e:b3:f2:a4:9c:71:
71:09:ed:43:05:7c:61:d6:ea:23:88:0f:94:91:e0:86:86:b1:
24:0c:04:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:41:03 2026 by rpki-client