Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/OQAYBBx3MDr267rJJCcKXFCn4Uk.roa
File: OQAYBBx3MDr267rJJCcKXFCn4Uk.roa (raw, json)
Hash identifier: UWB5P2fVG911RqZtJe8CauWxWuxOGa/LuF8tp0lO6ng=
Subject key identifier: 39:00:18:04:1C:77:30:3A:F6:EB:BA:C9:24:27:0A:5C:50:A7:E1:49
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019E9394988A7D0391D759D50C777A6F639C
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/OQAYBBx3MDr267rJJCcKXFCn4Uk.roa
Signing time: Thu 04 Jun 2026 17:00:49 +0000
ROA not before: Thu 04 Jun 2026 17:00:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215365
IP address blocks: 2a09:3f00:3000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:94:98:8a:7d:03:91:d7:59:d5:0c:77:7a:6f:63:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jun 4 17:00:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=390018041c77303af6ebbac924270a5c50a7e149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:c6:8e:3f:ff:8c:3f:1b:72:85:70:d8:57:
6c:da:83:8a:b9:c5:a9:38:d7:a9:50:64:32:f8:75:
4d:84:73:7a:9d:19:79:32:b3:65:78:39:f4:80:a0:
ca:dc:8a:1d:ca:0e:42:d5:9f:ea:bc:17:20:fc:b6:
a7:b4:28:1e:90:af:f6:5b:98:aa:9b:a3:9f:a6:d8:
2b:e5:c6:68:e4:cb:9d:c0:b5:e4:83:29:12:8a:25:
e3:a7:92:87:8f:ee:4f:80:fd:cf:e7:b1:48:5a:92:
b1:94:c2:5f:71:03:ae:7b:53:e6:3a:16:d6:df:61:
a4:00:14:86:c0:5c:a8:f0:27:8b:69:29:6d:d1:d3:
fb:93:bd:2c:8b:f4:72:04:ab:26:8e:f5:df:b2:ab:
23:4a:1f:13:d5:5d:3d:cb:d4:4e:8f:3e:02:0c:42:
72:9f:97:89:25:c0:c3:1d:d4:ee:da:b8:15:2c:44:
c4:a7:71:eb:e9:8b:f6:27:f9:ec:3e:59:b3:33:60:
bd:a1:9b:05:65:2d:d1:1e:2d:8b:af:42:28:24:e4:
12:e0:be:94:5b:71:ad:e2:57:26:dd:4e:b5:4b:66:
c0:77:f5:0a:d2:e1:4e:2a:ba:81:12:71:7a:b1:c9:
a4:b8:aa:0e:75:9c:2c:92:c2:11:41:33:f4:0a:84:
f6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:00:18:04:1C:77:30:3A:F6:EB:BA:C9:24:27:0A:5C:50:A7:E1:49
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/OQAYBBx3MDr267rJJCcKXFCn4Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:3000::/40
Signature Algorithm: sha256WithRSAEncryption
99:a7:04:7d:29:0a:6a:30:21:41:20:61:19:8c:e4:58:77:54:
77:bc:c8:5a:f5:b6:6b:a7:d5:ad:30:02:28:63:04:7f:ea:fd:
e6:b2:9d:6f:de:4b:d7:ca:f4:99:eb:45:8f:d7:43:38:65:25:
b4:16:d7:7a:be:d9:06:13:49:5f:a3:27:07:47:f1:33:4d:0e:
39:38:ea:e9:70:dd:53:08:67:41:1d:2c:7d:a6:dc:b5:20:38:
54:28:37:7c:8a:ae:6f:99:b5:61:07:4a:e8:be:a2:70:74:91:
a6:c2:c2:9a:e0:f2:69:f9:f3:04:c6:81:c2:56:7f:23:13:17:
d1:b6:0b:65:9b:e8:3e:5f:1c:63:d5:32:2f:bd:bb:f5:1c:2c:
1e:57:e5:93:65:63:2c:1b:6e:3e:7f:e9:0c:70:00:a0:a9:c5:
5e:33:6a:a5:40:16:af:18:54:91:93:d6:8c:90:cb:4b:3c:83:
b7:ca:4b:28:4a:f0:51:b7:aa:1b:70:c5:7d:b0:80:ab:ad:05:
e7:b6:98:df:bd:c6:3b:74:66:4b:9e:c1:c9:3a:f9:0b:dd:ae:
9e:b3:e2:b4:66:8a:12:38:1b:20:e9:af:54:d7:4e:fc:d4:4f:
73:e9:bc:db:60:3a:7d:74:4d:c4:04:51:ec:62:52:ea:c4:96:
7a:a1:31:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:30:11 2026 by rpki-client