Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/oaqhAz8r6QOEtVOyS7uoPCODlHc.roa
File: oaqhAz8r6QOEtVOyS7uoPCODlHc.roa (raw, json)
Hash identifier: c6tnbsMZPWMkjfAiaVIbYOOTReRqsQcVwvFXobf5RrI=
Subject key identifier: A1:AA:A1:03:3F:2B:E9:03:84:B5:53:B2:4B:BB:A8:3C:23:83:94:77
Certificate issuer: /CN=cfa8e029e5f1e85b1116cb3d33c85a39bb2c94d1
Certificate serial: 019F2368D4D529AE12865D308EA049F9A7CF
Authority key identifier: CF:A8:E0:29:E5:F1:E8:5B:11:16:CB:3D:33:C8:5A:39:BB:2C:94:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/oaqhAz8r6QOEtVOyS7uoPCODlHc.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211295
IP address blocks: 194.113.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d4:d5:29:ae:12:86:5d:30:8e:a0:49:f9:a7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa8e029e5f1e85b1116cb3d33c85a39bb2c94d1
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1aaa1033f2be90384b553b24bbba83c23839477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7e:a5:e2:5b:9b:79:0e:86:31:20:e6:d9:84:
4f:4e:e9:15:e7:04:5e:db:70:40:21:9e:fb:68:be:
f6:1c:79:11:70:90:cb:5e:9f:46:5f:84:a5:e6:a8:
7d:70:22:cc:81:7e:88:2b:e4:13:bd:23:11:27:d3:
3d:d8:05:47:a9:48:2e:70:4e:67:3a:10:77:b1:53:
4f:5e:b7:5a:9d:e1:22:bc:02:5c:ef:de:8e:3c:11:
b8:34:09:d2:a3:2d:fa:2d:c4:f4:b4:cb:b0:cb:59:
74:94:3d:df:6c:d4:28:eb:0e:e7:70:d3:5c:1e:55:
63:fc:6c:46:96:50:d1:d2:6f:8e:c6:4e:bf:d9:ef:
4d:6f:ea:1d:ab:b5:28:4e:3b:75:ab:bf:72:c1:23:
b4:52:f1:18:44:28:2b:c9:75:2a:d4:85:7a:44:c2:
26:75:e6:73:82:9f:47:35:7e:f8:f0:68:05:b8:7d:
11:ab:60:67:22:7f:dd:b3:32:b5:57:ec:db:9a:e8:
2f:71:a2:f0:34:b8:59:5d:4e:cf:73:db:0a:93:49:
d9:80:13:8e:29:37:c4:e2:f5:82:1a:22:5f:fa:f3:
1f:1c:fd:c7:9e:16:eb:8d:44:cd:0c:9e:37:25:ae:
66:8f:f3:cb:68:7b:b2:c8:e8:02:23:9e:d4:53:16:
a8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AA:A1:03:3F:2B:E9:03:84:B5:53:B2:4B:BB:A8:3C:23:83:94:77
X509v3 Authority Key Identifier:
keyid:CF:A8:E0:29:E5:F1:E8:5B:11:16:CB:3D:33:C8:5A:39:BB:2C:94:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/oaqhAz8r6QOEtVOyS7uoPCODlHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.249.0/24
Signature Algorithm: sha256WithRSAEncryption
57:74:21:59:d9:eb:d2:56:66:a2:52:a6:3e:68:81:15:d4:e4:
37:b5:b6:58:d0:ed:b9:70:9c:f4:f7:28:83:e9:e2:5c:89:a3:
5a:19:61:ae:43:12:b6:13:d6:44:c2:34:01:00:e1:69:6a:ac:
01:eb:4d:94:73:1a:f8:81:c1:48:96:ba:a4:2d:2c:fd:a2:56:
f3:16:b1:20:f8:3d:3e:a6:17:81:79:05:e5:81:97:c1:3a:f4:
65:73:41:7b:ee:79:8d:1a:23:70:f5:98:19:8b:52:74:3f:62:
28:a4:ea:df:6c:ad:20:3e:29:64:c9:9c:ad:da:bb:d5:c1:cf:
99:e5:80:cb:95:11:ba:1f:51:c1:c9:63:4d:c1:6b:21:8a:e6:
87:b5:8a:36:1b:7e:89:4a:04:30:37:0d:13:4b:8f:35:ff:ed:
9a:61:52:0d:7a:8e:27:e4:68:02:c5:2e:17:7e:46:85:7a:07:
34:08:2a:eb:3b:65:00:a5:30:2c:e3:52:ed:30:72:c2:36:c4:
92:9d:71:26:e7:de:87:b2:8d:1b:3e:cf:ef:d3:39:c7:5f:df:
e5:25:38:f0:01:ce:4f:1e:e0:f6:61:d4:99:a0:f9:02:5e:e0:
29:99:77:07:8f:67:6d:fd:34:95:64:31:8f:66:06:6a:58:22:
19:c6:00:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaNTVKa4Shl0wjqBJ+afPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYThlMDI5ZTVmMWU4NWIxMTE2Y2IzZDMzYzg1YTM5YmIy
Yzk0ZDEwHhcNMjYwNzAyMTUxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWFhYTEwMzNmMmJlOTAzODRiNTUzYjI0YmJiYTgzYzIzODM5NDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA136l4lubeQ6GMSDm2YRPTukV5wRe
23BAIZ77aL72HHkRcJDLXp9GX4Sl5qh9cCLMgX6IK+QTvSMRJ9M92AVHqUgucE5n
OhB3sVNPXrdaneEivAJc796OPBG4NAnSoy36LcT0tMuwy1l0lD3fbNQo6w7ncNNc
HlVj/GxGllDR0m+Oxk6/2e9Nb+odq7UoTjt1q79ywSO0UvEYRCgryXUq1IV6RMIm
deZzgp9HNX748GgFuH0Rq2BnIn/dszK1V+zbmugvcaLwNLhZXU7Pc9sKk0nZgBOO
KTfE4vWCGiJf+vMfHP3HnhbrjUTNDJ43Ja5mj/PLaHuyyOgCI57UUxao2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKGqoQM/K+kDhLVTsku7qDwjg5R3MB8GA1UdIwQY
MBaAFM+o4Cnl8ehbERbLPTPIWjm7LJTRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejZqZ0tlWHg2RnNSRnNzOU04aGFPYnNzbE5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zNDQ3MWYtMGJhZi00MzNiLWI4NmEt
YWNkNzQyZmUwOTg2LzEvb2FxaEF6OHI2UU9FdFZPeVM3dW9QQ09EbEhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zNDQ3MWYtMGJhZi00MzNiLWI4NmEtYWNkNzQyZmUwOTg2
LzEvejZqZ0tlWHg2RnNSRnNzOU04aGFPYnNzbE5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnH5MA0G
CSqGSIb3DQEBCwUAA4IBAQBXdCFZ2evSVmaiUqY+aIEV1OQ3tbZY0O25cJz09yiD
6eJciaNaGWGuQxK2E9ZEwjQBAOFpaqwB602Ucxr4gcFIlrqkLSz9olbzFrEg+D0+
pheBeQXlgZfBOvRlc0F77nmNGiNw9ZgZi1J0P2IopOrfbK0gPilkyZyt2rvVwc+Z
5YDLlRG6H1HByWNNwWshiuaHtYo2G36JSgQwNw0TS481/+2aYVINeo4n5GgCxS4X
fkaFegc0CCrrO2UApTAs41LtMHLCNsSSnXEm596Hso0bPs/v0znHX9/lJTjwAc5P
HuD2YdSZoPkCXuApmXcHj2dt/TSVZDGPZgZqWCIZxgCl
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:25 2026 by rpki-client