Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OuqGAxh94w8bTCpLHxgOmTLbWew.roa
File: OuqGAxh94w8bTCpLHxgOmTLbWew.roa (raw, json)
Hash identifier: ZlhWYIHiwSMC9ToA2E+fRmZL8dTXUZ64EleikDdmlcA=
Subject key identifier: 3A:EA:86:03:18:7D:E3:0F:1B:4C:2A:4B:1F:18:0E:99:32:DB:59:EC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A1C08BB55B7AA0A160DE31C011B3748B54
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OuqGAxh94w8bTCpLHxgOmTLbWew.roa
Signing time: Mon 09 Nov 2026 13:42:23 +0000
ROA not before: Mon 09 Nov 2026 13:42:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203374
IP address blocks: 185.242.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:8b:b5:5b:7a:a0:a1:60:de:31:c0:11:b3:74:8b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 9 13:42:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3aea8603187de30f1b4c2a4b1f180e9932db59ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3d:ca:7a:ef:3b:b3:4c:0d:b7:66:b8:2e:c4:
de:52:e6:58:73:e7:b9:ce:8e:56:e5:4f:af:3d:4f:
05:63:c2:db:d9:5c:61:ad:f1:34:22:4b:3d:ec:67:
ab:44:53:1e:c2:30:96:da:58:10:1c:04:fe:f0:32:
5c:09:38:51:ed:d8:5b:2f:e6:c9:96:52:6c:bb:6f:
e6:03:05:3b:64:94:84:72:cb:fb:75:ec:36:79:a4:
dd:0a:e1:01:50:18:e1:92:84:6f:e3:f5:c2:60:ef:
0d:e0:50:dd:01:1f:50:63:40:45:2c:a4:c4:7e:36:
eb:36:82:78:1e:4f:25:ae:d2:af:07:eb:1d:f5:fa:
81:b1:ce:ad:b2:4e:22:6e:af:dc:c9:59:09:8d:5b:
96:01:d5:7f:e2:74:72:20:a4:a3:3c:92:cd:d3:8b:
f4:0c:81:d1:c9:5c:3a:77:6f:e1:01:8e:f0:4e:3a:
49:8e:3d:23:d4:08:92:ba:5a:f4:65:e5:e8:02:c2:
39:df:a4:de:94:a9:b4:d3:01:1d:d9:f7:58:f5:d4:
a1:79:d9:f7:f1:5f:0d:22:10:e5:af:3e:82:a7:13:
f8:3e:d2:58:8e:0e:d6:c9:af:8c:f7:2d:07:56:25:
f0:57:44:5c:a7:4c:53:cb:8e:15:fe:c2:2f:17:f8:
dd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EA:86:03:18:7D:E3:0F:1B:4C:2A:4B:1F:18:0E:99:32:DB:59:EC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OuqGAxh94w8bTCpLHxgOmTLbWew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.244.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:bb:68:b1:1d:3a:f3:97:a1:d7:3b:09:07:3e:b0:52:d3:69:
b3:b0:15:2b:86:40:02:52:cc:23:d3:5b:68:be:3f:23:f8:6d:
2b:d6:61:3e:17:3d:b3:c6:eb:23:a8:a8:44:36:55:85:ab:af:
83:74:b1:1d:a5:d3:79:ed:25:ff:93:a9:c7:6e:a1:87:40:33:
38:88:44:94:f6:e9:71:d4:be:17:3d:2d:df:4a:cd:33:7d:82:
b0:bc:d7:58:c6:01:45:4c:84:d9:3a:b5:b2:74:9c:89:56:c8:
56:ca:48:41:ba:1c:a8:06:36:36:9b:44:82:02:53:cd:2f:0f:
b9:d5:4d:c9:6c:34:55:52:58:70:f2:1b:3c:2d:3e:4a:8e:ba:
0f:94:a2:d2:f3:b2:86:86:43:e4:6a:84:a5:96:9a:89:f9:70:
b9:53:a4:01:b1:0f:42:e4:c6:4b:04:b2:5f:d7:c1:6c:37:a1:
bd:b2:97:62:3c:0d:2a:85:b2:74:59:56:70:3d:cb:b4:d6:7c:
14:05:9c:9e:91:03:c5:f2:af:51:c0:3c:b1:0b:5f:e7:af:44:
9d:c1:dc:4d:34:7f:d6:7b:f9:0b:4d:90:5b:9b:0c:e7:23:be:
93:60:c6:13:d1:48:8d:c8:cf:f6:d9:c1:1d:37:d6:6b:f0:c5:
c1:5d:d2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:13:20 2026 by rpki-client