Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/OPFVrVCm7fOpCW2S_lCBmcVd_B0.roa
File: OPFVrVCm7fOpCW2S_lCBmcVd_B0.roa (raw, json)
Hash identifier: SubYjJvt3nWCWLimBRLzH/1/tw2nHLXwJHZ3M3lYlbU=
Subject key identifier: 38:F1:55:AD:50:A6:ED:F3:A9:09:6D:92:FE:50:81:99:C5:5D:FC:1D
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 01A1B2EB51B4C92B707D83C76DA2998F9A67
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/OPFVrVCm7fOpCW2S_lCBmcVd_B0.roa
Signing time: Fri 06 Nov 2026 22:12:08 +0000
ROA not before: Fri 06 Nov 2026 22:12:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218664
IP address blocks: 81.90.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b2:eb:51:b4:c9:2b:70:7d:83:c7:6d:a2:99:8f:9a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Nov 6 22:12:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38f155ad50a6edf3a9096d92fe508199c55dfc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:30:43:56:b8:47:4c:1b:f3:85:80:47:b3:
7c:b4:fb:c3:d4:29:37:eb:3d:1d:bb:4a:bb:f2:d7:
ac:15:17:87:0a:78:42:23:80:46:de:f8:d4:da:65:
6c:43:7d:b4:75:81:b3:8c:c0:2a:30:f4:b6:1e:11:
6c:04:e9:6d:c2:ec:58:dc:ef:ba:4a:16:d6:63:44:
84:ee:ed:be:40:fd:e5:0c:dd:e5:13:b0:c4:f8:15:
99:b1:11:5e:19:85:88:19:06:aa:52:42:95:fe:ca:
d4:af:f3:bf:70:28:31:de:74:9e:47:ce:91:76:9f:
93:d1:59:7c:d5:4d:c6:a3:f7:1c:3d:c2:2c:3b:39:
b1:4b:cc:03:03:d0:6e:3f:eb:fa:18:b2:4e:36:82:
29:e1:a3:27:8e:bd:4f:96:5c:c3:1e:b0:45:b3:21:
b9:ef:2e:13:dc:24:aa:aa:eb:48:91:a4:63:3d:fa:
55:c5:b7:d4:57:20:15:3e:16:b0:83:20:92:1a:37:
12:7c:49:da:ac:9a:9e:81:a0:f1:5b:c1:58:f1:f7:
3a:85:67:91:8f:84:02:4b:d1:bc:af:69:ed:36:cc:
d4:69:66:60:1e:24:a7:5e:51:de:45:5b:e8:67:9c:
9b:1f:e1:39:eb:1b:d0:61:d7:d5:8c:fd:10:a9:7c:
bd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F1:55:AD:50:A6:ED:F3:A9:09:6D:92:FE:50:81:99:C5:5D:FC:1D
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/OPFVrVCm7fOpCW2S_lCBmcVd_B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.28.0/24
Signature Algorithm: sha256WithRSAEncryption
47:0b:7a:f3:46:29:70:dc:27:95:34:91:be:22:84:33:68:58:
f2:02:6b:61:34:33:f1:c5:6d:1c:83:c3:f9:d0:8a:4e:48:40:
84:0b:12:a2:9b:6b:13:6e:74:d9:45:d7:14:35:6d:82:a7:7a:
42:f3:6e:b4:69:66:cd:b8:d1:d3:72:5c:38:df:92:fd:38:19:
bd:06:0c:7c:1c:b9:6e:66:bd:06:24:2b:02:ef:aa:11:3f:16:
51:35:dc:ff:8a:29:7b:5d:f0:68:62:b6:2e:41:2e:67:8a:a4:
95:88:32:11:e4:72:ef:d4:f0:43:ec:f2:96:eb:e4:57:67:ab:
b6:54:f8:10:49:ec:a7:fe:59:73:97:42:4e:e9:b4:79:c6:4d:
b4:76:90:51:3d:aa:9d:a9:50:90:21:e9:79:99:2b:7f:dd:be:
53:f5:79:10:fd:1d:6b:ce:5c:35:19:8c:6c:c7:c8:a7:41:b8:
74:fc:b4:7f:22:e5:1c:bf:5d:9a:3d:ad:dc:d8:08:70:65:5f:
5f:2a:8c:b1:d2:9f:cf:e1:ac:bd:70:e8:76:28:cb:f9:74:1f:
b7:21:fb:b9:09:f9:43:06:6a:42:a8:4b:12:2d:10:9a:d5:02:
23:5c:3f:4b:17:e8:09:df:65:5c:f9:2d:c8:5a:60:d3:61:04:
00:ee:92:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:39:08 2026 by rpki-client