Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/OOZCU9RDZbWm90IHhggbkADAyok.roa
File: OOZCU9RDZbWm90IHhggbkADAyok.roa (raw, json)
Hash identifier: yzkJaDkuzS/Q97fyxLhVwM/SdV10qs3BxmQUOzU77kU=
Subject key identifier: 38:E6:42:53:D4:43:65:B5:A6:F7:42:07:86:08:1B:90:00:C0:CA:89
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 01A082EDF3A8FAA27187E9986977F509B9AA
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/OOZCU9RDZbWm90IHhggbkADAyok.roa
Signing time: Tue 08 Sep 2026 21:30:27 +0000
ROA not before: Tue 08 Sep 2026 21:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57844
IP address blocks: 45.83.182.0/24 maxlen: 24
139.28.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:ed:f3:a8:fa:a2:71:87:e9:98:69:77:f5:09:b9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Sep 8 21:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38e64253d44365b5a6f7420786081b9000c0ca89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:de:87:0f:97:b3:72:53:f2:10:d0:8e:90:
62:d4:e0:16:38:50:26:ad:ab:6d:5b:7a:3b:04:dd:
23:9f:e8:49:26:c8:24:ad:07:4a:69:de:b6:70:26:
21:e0:f1:87:27:ef:cf:b6:75:f2:98:ec:53:05:3a:
c4:4a:26:74:f7:c5:bb:3d:78:ba:f7:c6:58:f7:45:
4c:25:a3:39:1c:66:10:c7:03:e0:d6:51:6d:b6:26:
10:59:0d:f6:74:fc:d4:fc:7a:57:a5:a8:f1:a3:b5:
07:5e:2b:1a:1a:97:31:11:ce:fa:26:1e:1a:fd:e5:
3c:1f:43:84:84:46:e0:91:ff:ce:a9:f5:da:bd:82:
b6:dc:4a:54:ab:10:95:0c:1f:b3:09:46:fd:cf:ce:
da:8b:91:99:03:c0:e1:e2:96:f0:29:bf:ed:33:98:
90:14:c1:f8:0d:9c:aa:4c:cf:96:b1:e8:e1:14:ef:
bd:3e:f4:be:b6:11:1b:cb:a1:22:4f:08:b9:d1:6a:
a1:25:c4:ea:8e:14:ea:bf:f6:61:a7:81:b3:55:28:
69:c1:62:ca:c7:74:01:c3:0d:49:48:c8:74:b5:e9:
a0:9a:3d:6d:11:ec:89:c4:bd:18:53:48:00:be:70:
87:dd:3f:71:4b:07:ad:81:3a:b2:e5:fa:9f:27:a0:
04:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E6:42:53:D4:43:65:B5:A6:F7:42:07:86:08:1B:90:00:C0:CA:89
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/OOZCU9RDZbWm90IHhggbkADAyok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.182.0/24
139.28.72.0/22
Signature Algorithm: sha256WithRSAEncryption
28:6b:01:f7:8a:53:b2:e4:1b:3d:42:cc:13:cf:2b:7f:9d:e6:
a7:bf:c1:42:90:77:57:73:54:68:a7:22:97:a5:1c:09:52:20:
2f:a3:d5:bf:24:14:4a:34:aa:9d:39:cc:20:bc:f1:b7:59:14:
8c:0a:99:33:b5:32:c5:da:47:22:9f:42:86:d5:dc:2e:1b:66:
aa:9f:b4:04:85:82:c7:d3:48:f5:78:da:8a:56:52:51:d4:97:
30:b5:34:58:8d:81:b8:0b:7c:32:3c:e4:93:92:4a:73:5c:9e:
cc:b0:f9:46:bb:4d:28:74:94:c5:3b:97:b4:12:2f:fa:8a:52:
52:4c:e3:d6:9e:c9:19:c9:38:c9:20:38:08:ab:94:d7:4d:a4:
61:9d:20:d5:0f:81:85:4c:13:30:c4:63:39:88:4c:ff:6f:cc:
5f:fa:86:c6:9b:4f:61:33:44:6b:e2:58:a0:de:3c:01:24:7c:
69:53:3b:9a:9c:cc:b4:e9:6b:20:68:69:17:ee:6e:51:c7:80:
9a:f0:5f:79:36:c0:30:aa:7c:59:91:9e:de:56:b5:3f:80:d4:
9d:2b:57:10:8c:5a:32:96:11:fe:02:09:6f:04:9a:94:de:40:
56:16:48:b5:c0:68:23:90:93:27:51:06:f3:de:9a:ff:ff:64:
91:e1:94:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:27:00 2026 by rpki-client