Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/O_GvhJ3AIu5IJuqpQ4uX03ArEEA.roa
File: O_GvhJ3AIu5IJuqpQ4uX03ArEEA.roa (raw, json)
Hash identifier: GC8qNwD4vLhbf1Ux7vQLpVBwBRtyOha518PQltW/PIg=
Subject key identifier: 3B:F1:AF:84:9D:C0:22:EE:48:26:EA:A9:43:8B:97:D3:70:2B:10:40
Certificate issuer: /CN=2747c171786e883167d862be101f352135b923b4
Certificate serial: 019E8EDA94AC06082C874F933A2A643D4579
Authority key identifier: 27:47:C1:71:78:6E:88:31:67:D8:62:BE:10:1F:35:21:35:B9:23:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/O_GvhJ3AIu5IJuqpQ4uX03ArEEA.roa
Signing time: Wed 03 Jun 2026 18:59:10 +0000
ROA not before: Wed 03 Jun 2026 18:59:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199211
IP address blocks: 153.56.149.0/24 maxlen: 24
2a13:bc40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:da:94:ac:06:08:2c:87:4f:93:3a:2a:64:3d:45:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2747c171786e883167d862be101f352135b923b4
Validity
Not Before: Jun 3 18:59:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3bf1af849dc022ee4826eaa9438b97d3702b1040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f1:d9:a7:6a:20:48:e4:38:cb:f3:a4:79:b8:
3a:44:c6:5d:c4:e6:60:4b:c2:bf:63:ff:52:fa:33:
1c:fc:b7:8f:32:5d:05:dd:f5:f3:d3:96:af:8a:eb:
e4:1d:db:53:44:71:95:3a:97:bc:5b:eb:3e:4f:89:
5d:fc:76:ce:f6:b5:d6:ed:7e:43:b2:90:87:c7:f6:
aa:b2:37:d2:4f:6b:78:34:de:71:9b:b4:eb:8e:1c:
af:67:85:07:e7:b5:69:c6:1a:04:76:68:4b:c9:a8:
05:25:33:c9:e0:6d:4b:a1:a7:1a:68:14:a4:75:48:
4e:e5:a7:11:b5:78:b6:94:b1:08:24:92:b1:81:07:
69:f3:34:b7:a4:0b:51:e2:76:3e:b4:55:2b:1d:67:
02:c2:45:18:f9:fd:3e:63:48:9a:36:92:82:1b:ce:
90:f1:b3:27:95:87:bd:c1:42:88:67:e0:7a:8e:f0:
0d:b3:8a:98:ff:0e:75:0f:05:14:65:d6:b6:89:67:
46:bb:50:83:f7:95:69:cb:46:a8:45:23:8e:25:1f:
50:49:65:3d:ee:9a:bd:81:97:6b:7e:6e:a1:71:d0:
05:64:53:01:a6:62:78:c3:c2:cd:6e:8f:62:c4:c9:
9c:20:97:c5:32:d2:f3:71:79:cf:03:ba:39:33:e7:
77:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F1:AF:84:9D:C0:22:EE:48:26:EA:A9:43:8B:97:D3:70:2B:10:40
X509v3 Authority Key Identifier:
keyid:27:47:C1:71:78:6E:88:31:67:D8:62:BE:10:1F:35:21:35:B9:23:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/O_GvhJ3AIu5IJuqpQ4uX03ArEEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.149.0/24
IPv6:
2a13:bc40::/29
Signature Algorithm: sha256WithRSAEncryption
50:d9:49:a2:64:16:5e:fe:d7:c1:40:78:0c:7f:be:10:f6:ef:
30:21:60:c9:d3:89:c4:21:4a:23:9e:92:da:37:63:d3:79:73:
ba:f4:41:2e:2b:0e:d0:49:84:46:3d:5e:e2:32:d5:c9:01:83:
52:d9:3b:68:5d:30:6a:13:f1:93:e7:46:8e:e2:77:01:c9:3b:
6e:f9:34:32:0e:c8:25:45:3d:a6:7b:cd:e7:86:7f:af:b4:5b:
70:37:13:2c:2a:78:c0:84:b3:bc:99:16:67:f3:f5:e9:c0:31:
d4:87:a1:3a:de:26:49:d2:cb:ab:ba:e1:4b:a7:7e:d7:b7:04:
e7:ea:c3:93:cd:bc:08:70:cd:92:c9:b5:43:5f:97:a1:03:25:
55:35:af:c0:2a:db:16:42:cd:ec:a8:72:e0:f0:eb:ae:6f:71:
32:ae:37:49:40:10:f3:bc:7c:66:14:cc:ed:64:7e:95:8b:e4:
24:d0:88:b1:29:a2:9d:3c:79:9d:e6:4d:00:a7:5e:c7:1e:46:
68:7e:dd:8b:f7:af:9a:23:c0:b2:2e:1b:14:5e:fc:4b:64:31:
f7:be:17:f0:4f:7d:19:51:cd:a6:17:e3:88:b3:0f:5e:44:88:
84:76:31:b6:7b:b8:32:14:34:5d:ec:72:d9:e3:6c:16:af:b6:
a8:f3:89:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:18:23 2026 by rpki-client