Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/OZw-cXvyxpGVnW_2Hn9YZaUuGl0.roa
File: OZw-cXvyxpGVnW_2Hn9YZaUuGl0.roa (raw, json)
Hash identifier: b52ZmWbKJdrIjDJP47u58IANqSmvQF38lse/EYMtuxk=
Subject key identifier: 39:9C:3E:71:7B:F2:C6:91:95:9D:6F:F6:1E:7F:58:65:A5:2E:1A:5D
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 01A154B0DB6241997D1DAF52BC55AE285896
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/OZw-cXvyxpGVnW_2Hn9YZaUuGl0.roa
Signing time: Mon 19 Oct 2026 15:03:58 +0000
ROA not before: Mon 19 Oct 2026 15:03:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218439
IP address blocks: 200.96.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:b0:db:62:41:99:7d:1d:af:52:bc:55:ae:28:58:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Oct 19 15:03:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=399c3e717bf2c691959d6ff61e7f5865a52e1a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:03:b3:cf:7f:64:6a:8d:a3:20:06:b0:82:d5:
32:fb:3c:e5:1d:a9:ae:e9:16:e8:8b:a8:27:e8:40:
62:01:ec:c2:c7:25:fb:e7:18:81:d4:42:ec:37:51:
55:42:88:8f:70:5e:8b:6f:9e:b2:39:5d:a7:be:d2:
ab:b2:a7:b8:5e:87:0d:77:91:16:ac:f0:25:d1:cd:
ca:f2:87:db:25:36:6c:2c:14:ac:d8:e4:5a:69:42:
6c:3b:6d:1f:19:d8:85:c3:b8:e9:d6:55:c5:d8:b7:
22:89:f3:f0:bb:e8:30:30:a7:d3:9e:5b:8f:2c:2f:
e1:30:9a:ba:db:55:66:c6:3e:9c:44:16:4d:c8:a4:
1d:a3:c9:bb:a2:60:8f:24:2c:04:22:1a:df:cf:56:
3d:d7:82:5a:76:87:d0:63:e1:80:2a:8e:b8:56:d9:
e8:23:e8:44:99:6c:ed:d8:fc:76:51:57:b4:78:64:
67:c7:79:aa:9a:f5:89:42:ce:da:4b:9c:02:69:32:
97:23:42:49:43:f0:d0:94:37:45:7f:18:2e:c0:43:
a4:18:4a:e9:15:5e:fb:63:95:e0:65:19:f8:68:1e:
3e:3c:33:4f:e1:83:32:1b:71:e4:06:df:a2:76:31:
2e:53:a0:5c:57:f1:12:b5:93:a7:45:81:18:cd:3b:
c5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9C:3E:71:7B:F2:C6:91:95:9D:6F:F6:1E:7F:58:65:A5:2E:1A:5D
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/OZw-cXvyxpGVnW_2Hn9YZaUuGl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.96.106.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ba:a9:df:16:7b:25:e1:89:61:6c:29:17:40:81:f7:ad:33:
37:e3:f7:24:e6:d0:43:68:ef:fb:dd:8a:79:83:40:df:e1:19:
ec:e5:e1:89:26:79:e4:1c:3a:11:81:fb:11:52:e4:0d:8c:fa:
1a:32:2d:3a:8f:cf:f3:23:74:50:0e:35:ba:de:11:5c:9b:25:
33:37:8a:0c:5d:fe:b9:67:45:43:6a:0f:50:7f:6a:61:3a:40:
94:1d:3b:27:19:35:3d:06:6a:9f:36:58:4a:48:00:e9:f5:20:
69:63:6e:11:43:51:a4:2e:9d:69:98:c3:f2:24:73:48:97:99:
dc:a6:8f:ce:95:d3:7a:59:b1:18:11:0e:02:bb:4c:77:76:98:
12:6e:a3:8d:24:15:bf:a2:b7:a4:24:85:83:24:eb:8d:15:a9:
61:40:44:ef:55:91:1b:09:69:98:41:52:4b:dd:14:3d:1e:d5:
b8:19:b4:6a:18:a9:41:23:58:13:82:17:5f:21:8c:ee:a1:fc:
cd:b9:79:7c:8e:72:fa:07:fa:d8:ff:e0:d4:09:ac:9e:9c:9a:
05:13:0f:57:db:c7:da:5a:66:85:c8:a2:a9:26:2e:cf:f1:53:
4e:00:d6:d8:7c:dd:2d:aa:a0:03:d3:e8:b5:ad:de:a6:df:51:
4b:0f:9f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:25:28 2026 by rpki-client