Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/OcUKYBLEbrR_oUjbGT-xwc_jiio.roa
File: OcUKYBLEbrR_oUjbGT-xwc_jiio.roa (raw, json)
Hash identifier: DlVZZHB5/NNfKcFI5S8VaGS/LeR1BoBD0bU/YGVRUKo=
Subject key identifier: 39:C5:0A:60:12:C4:6E:B4:7F:A1:48:DB:19:3F:B1:C1:CF:E3:8A:2A
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019BFF9DE81CA99968EAB50F2C2657866320
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/OcUKYBLEbrR_oUjbGT-xwc_jiio.roa
Signing time: Tue 27 Jan 2026 13:21:37 +0000
ROA not before: Tue 27 Jan 2026 13:21:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 2a14:67c2:510::/48 maxlen: 48
2a14:67c2:575::/48 maxlen: 48
2a14:67c3:70::/44 maxlen: 44
2a14:67c3:140::/44 maxlen: 44
2a14:67c3:50f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ff:9d:e8:1c:a9:99:68:ea:b5:0f:2c:26:57:86:63:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jan 27 13:21:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39c50a6012c46eb47fa148db193fb1c1cfe38a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:be:6a:85:de:9e:49:c9:96:8c:35:2e:25:4c:
7d:a5:f5:95:35:1b:2f:b0:af:5a:7a:20:16:cc:54:
68:3b:8e:2e:d8:16:0d:09:ee:ab:dd:83:2a:1a:f6:
5a:3b:15:32:1f:08:82:0e:80:60:00:62:36:6f:23:
e8:87:28:0f:87:f4:8b:a6:a4:d4:13:f6:02:5a:49:
0f:2a:e5:e8:d4:2b:1f:2e:89:c7:74:82:d7:e9:07:
9d:57:9e:59:09:5b:47:6b:6a:80:e6:3f:63:ae:26:
96:af:4d:dd:44:f8:54:05:16:0a:18:09:d6:14:eb:
ad:06:d3:43:f3:6a:80:f8:8b:ff:4e:cf:6e:3b:c5:
b5:55:c6:b0:db:24:0d:10:21:17:8c:1a:30:88:e9:
06:84:51:9d:d3:7b:a4:13:8c:b3:93:2b:58:57:48:
22:da:94:c4:5e:bc:a1:7f:89:21:8a:33:49:05:ee:
02:cf:97:58:3b:5d:ce:1c:17:e2:54:88:a1:b7:02:
95:d4:b5:d3:94:53:29:b7:21:0e:ef:b4:df:1f:43:
58:9d:65:aa:5e:3a:4d:c6:23:a1:a6:55:e5:a4:fa:
88:4e:25:06:09:30:27:6d:2f:0f:94:27:62:b8:af:
fa:1d:d5:59:16:16:b5:96:aa:22:d0:89:f3:60:d1:
d4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C5:0A:60:12:C4:6E:B4:7F:A1:48:DB:19:3F:B1:C1:CF:E3:8A:2A
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/OcUKYBLEbrR_oUjbGT-xwc_jiio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c2:510::/48
2a14:67c2:575::/48
2a14:67c3:70::/44
2a14:67c3:140::/44
2a14:67c3:50f::/48
Signature Algorithm: sha256WithRSAEncryption
87:e3:f9:a4:61:d5:5d:6d:6f:fd:f6:f1:e8:b5:71:6a:8e:ce:
f3:63:a3:71:12:5c:f0:a0:b2:d5:18:f6:4a:83:4a:ed:84:f5:
e9:da:04:29:2f:62:55:02:ae:a1:c0:f5:2b:55:fd:bc:e8:fd:
0b:77:ce:11:c6:3e:c8:7f:5a:4b:2c:8d:0e:99:74:99:f8:16:
9e:40:95:38:4f:f5:af:6e:c7:48:1d:7a:14:a0:42:52:ca:16:
de:7c:8b:f3:4c:82:79:43:5d:93:68:27:82:72:85:87:31:1a:
f3:e7:a8:70:5a:a8:2c:0c:ce:e0:d2:22:05:d1:a2:2a:ca:85:
88:18:7f:66:e1:42:01:da:10:c2:4f:8f:71:d7:81:24:b5:9a:
2c:60:37:69:0b:c9:31:f5:38:4d:53:8e:9f:eb:d1:e0:5a:af:
6c:c8:0b:fc:85:13:e7:2c:6a:3e:2a:2c:84:0a:ce:4b:ce:de:
77:d5:a9:8a:e8:03:b6:b5:c9:76:19:1b:30:4f:2a:5b:f6:ae:
1e:25:56:fd:9b:c0:9c:80:fb:a7:9c:a5:28:41:10:23:d0:07:
85:f3:68:0f:f9:cb:5a:3c:32:52:cd:5a:00:90:d6:34:8f:53:
dd:c7:e2:99:aa:9e:93:00:43:be:f5:2b:17:ac:85:2d:19:a8:
46:18:b4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:43:21 2026 by rpki-client