Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/OCvApHO5mjUuV4yskONg4kSU_tU.roa
File: OCvApHO5mjUuV4yskONg4kSU_tU.roa (raw, json)
Hash identifier: SD3pfUSDH8g2hAqab8oUoG9VqzVkLCW7ntgh81aWSJo=
Subject key identifier: 38:2B:C0:A4:73:B9:9A:35:2E:57:8C:AC:90:E3:60:E2:44:94:FE:D5
Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Certificate serial: 01A08B0E6D9808849A81DF776D3A9473CAD8
Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/OCvApHO5mjUuV4yskONg4kSU_tU.roa
Signing time: Thu 10 Sep 2026 11:22:53 +0000
ROA not before: Thu 10 Sep 2026 11:22:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212755
IP address blocks: 194.59.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:0e:6d:98:08:84:9a:81:df:77:6d:3a:94:73:ca:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Validity
Not Before: Sep 10 11:22:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=382bc0a473b99a352e578cac90e360e24494fed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:69:08:80:4e:ef:c0:5a:fd:5b:63:32:e8:
c8:66:57:9e:42:61:60:0e:21:f3:c8:43:08:56:73:
9b:1d:2d:34:d2:37:45:7e:6f:48:c7:98:7b:ed:21:
f1:6d:0e:11:5a:52:a2:8a:48:1c:94:49:16:47:00:
bd:74:64:9d:74:3a:5f:ad:e3:b9:ff:1c:19:3e:45:
42:3b:b5:89:48:4c:a8:d3:ad:21:f7:27:8f:a9:e6:
ad:dc:13:68:8f:37:ac:2e:69:b6:fe:33:ee:35:52:
75:ad:29:e4:27:dd:e1:dc:7e:30:d3:db:40:a4:93:
23:39:ee:47:97:6c:2c:d9:0b:a8:87:8d:7a:f2:29:
37:4d:31:f5:3d:d5:12:97:26:bd:df:e4:1a:ce:67:
e6:52:b8:37:73:35:9e:0b:8b:6f:f4:b1:91:b9:80:
5e:60:0d:de:3e:20:8c:cf:e6:8a:3c:0f:99:b0:67:
29:e3:81:db:d0:a7:19:d3:99:ad:42:76:46:93:7e:
3c:e4:de:22:e3:44:b0:9c:49:92:cd:c9:b0:ac:f3:
b2:6b:4a:73:ee:89:32:fd:23:72:08:cc:be:13:e5:
73:28:a7:bb:35:93:8d:a2:31:20:b8:93:b2:da:9c:
f9:22:0b:04:38:f5:0e:e3:81:bc:48:a7:ab:13:de:
d8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2B:C0:A4:73:B9:9A:35:2E:57:8C:AC:90:E3:60:E2:44:94:FE:D5
X509v3 Authority Key Identifier:
keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/OCvApHO5mjUuV4yskONg4kSU_tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:7d:94:09:4f:8d:dd:2b:bf:69:36:b9:97:d5:78:3a:00:f6:
bf:62:e1:8d:74:92:8c:8c:9d:32:4d:0f:cd:1c:06:6b:56:39:
39:45:1a:c1:73:70:52:6a:8d:7f:91:ec:d0:f0:18:6c:43:3a:
35:07:73:3d:ed:10:e5:eb:7d:22:bd:5f:39:60:3f:bc:36:66:
fb:41:ee:2d:c4:68:14:0f:3d:d4:db:4f:7d:79:d2:1d:fe:5b:
80:2d:da:6f:37:2a:e0:22:27:f3:96:ea:a1:37:d5:4d:68:45:
7e:0c:fa:bb:20:54:d0:2a:f3:8c:10:ec:75:3f:36:12:ce:2b:
94:59:64:6f:cd:75:b7:8a:e7:af:d6:89:36:90:88:10:e2:59:
c2:3c:f5:db:7a:04:a5:25:1d:73:75:9d:84:83:7a:fa:b0:88:
1a:4e:e0:12:8a:cf:f6:57:9f:cf:9f:04:75:b0:cd:13:32:01:
d0:57:5a:c4:c9:a2:b5:fa:78:e7:5b:74:9a:c9:30:de:48:a3:
3b:13:32:81:9d:9e:af:28:b3:27:37:c8:1f:b6:94:b9:95:dc:
d5:b9:6c:bf:e3:40:ce:6e:ad:4d:81:56:bb:79:22:75:85:98:
7b:55:a5:b8:b5:f0:68:7e:b0:83:07:d3:15:5c:19:70:1d:28:
39:2d:93:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCLDm2YCISagd93bTqUc8rYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMjk4OTAwMzU1ZmRmNDI1NGMyMDgzMWYyZDdlZTNiZWM0
MjliZGIwHhcNMjYwOTEwMTEyMjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODJiYzBhNDczYjk5YTM1MmU1NzhjYWM5MGUzNjBlMjQ0OTRmZWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvhpCIBO78Ba/VtjMujIZleeQmFg
DiHzyEMIVnObHS000jdFfm9Ix5h77SHxbQ4RWlKiikgclEkWRwC9dGSddDpfreO5
/xwZPkVCO7WJSEyo060h9yePqeat3BNojzesLmm2/jPuNVJ1rSnkJ93h3H4w09tA
pJMjOe5Hl2ws2Quoh4168ik3TTH1PdUSlya93+QazmfmUrg3czWeC4tv9LGRuYBe
YA3ePiCMz+aKPA+ZsGcp44Hb0KcZ05mtQnZGk3485N4i40SwnEmSzcmwrPOya0pz
7oky/SNyCMy+E+VzKKe7NZONojEguJOy2pz5IgsEOPUO44G8SKerE97YbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDgrwKRzuZo1LleMrJDjYOJElP7VMB8GA1UdIwQY
MBaAFA4piQA1X99CVMIIMfLX7jvsQpvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYt
M2U0Yjc0ZGQwNThkLzEvT0N2QXBITzVtalV1VjR5c2tPTmc0a1NVX3RVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYtM2U0Yjc0ZGQwNThk
LzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjvfMA0G
CSqGSIb3DQEBCwUAA4IBAQAbfZQJT43dK79pNrmX1Xg6APa/YuGNdJKMjJ0yTQ/N
HAZrVjk5RRrBc3BSao1/kezQ8BhsQzo1B3M97RDl630ivV85YD+8Nmb7Qe4txGgU
Dz3U2099edId/luALdpvNyrgIifzluqhN9VNaEV+DPq7IFTQKvOMEOx1PzYSziuU
WWRvzXW3iuev1ok2kIgQ4lnCPPXbegSlJR1zdZ2Eg3r6sIgaTuASis/2V5/PnwR1
sM0TMgHQV1rEyaK1+njnW3SayTDeSKM7EzKBnZ6vKLMnN8gftpS5ldzVuWy/40DO
bq1NgVa7eSJ1hZh7VaW4tfBofrCDB9MVXBlwHSg5LZPR
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:15 2026 by rpki-client