Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/OaFZLyzit9aeE8Q-rZBaTKGo_VE.roa
File: OaFZLyzit9aeE8Q-rZBaTKGo_VE.roa (raw, json)
Hash identifier: Z2wq4t88shsGbAykTeNAzXxxEV7hDGsKc3AYjBfbT+k=
Subject key identifier: 39:A1:59:2F:2C:E2:B7:D6:9E:13:C4:3E:AD:90:5A:4C:A1:A8:FD:51
Certificate issuer: /CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
Certificate serial: 019B78A297031ED92AB55C981A41EA3879CA
Authority key identifier: B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/OaFZLyzit9aeE8Q-rZBaTKGo_VE.roa
Signing time: Thu 01 Jan 2026 08:17:59 +0000
ROA not before: Thu 01 Jan 2026 08:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2607
IP address blocks: 193.87.0.0/16 maxlen: 17
194.160.0.0/16 maxlen: 17
2001:4118::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:97:03:1e:d9:2a:b5:5c:98:1a:41:ea:38:79:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
Validity
Not Before: Jan 1 08:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39a1592f2ce2b7d69e13c43ead905a4ca1a8fd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:82:59:7c:26:51:8e:37:10:58:be:fa:5e:
81:67:7e:cb:47:c2:37:0a:5f:e4:a3:1a:41:30:1b:
36:98:5e:55:19:bd:0b:c8:f6:ed:8e:95:81:e6:94:
33:f6:62:99:86:9e:97:76:c9:6a:c2:05:f4:31:e1:
ae:8c:9b:e7:73:3e:d5:2b:b8:cb:ae:b8:cd:bb:8c:
f4:cc:fd:e4:ad:82:c8:c6:28:2c:35:19:ef:87:8f:
d1:e2:ad:ab:6f:26:e1:34:57:7d:ba:44:5c:b5:f5:
3d:8e:2b:b5:bb:b5:a8:24:8a:0a:c8:8d:d6:bb:9f:
b7:79:cd:59:24:af:85:fa:a4:dc:d4:c3:e3:60:0b:
a1:b2:18:57:af:43:e6:c7:cb:9d:a8:0e:10:4a:22:
28:ad:0c:22:3e:19:5e:1c:48:0c:e7:ef:de:28:63:
2c:f2:f1:13:41:66:c4:06:ee:f4:8d:2f:e7:a6:02:
35:67:a4:f0:f8:a7:83:09:db:8b:b9:d2:08:6e:87:
18:c7:bb:fa:d9:3f:92:21:61:ff:54:27:40:1d:3d:
35:ef:d3:82:3b:df:cf:93:22:d4:19:79:66:1f:b9:
d2:b9:ee:fd:b3:2f:76:11:af:f7:d8:c0:8e:bd:39:
13:7f:69:16:7e:fa:7c:99:8b:e5:41:ed:f7:ef:34:
e3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A1:59:2F:2C:E2:B7:D6:9E:13:C4:3E:AD:90:5A:4C:A1:A8:FD:51
X509v3 Authority Key Identifier:
keyid:B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/OaFZLyzit9aeE8Q-rZBaTKGo_VE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.87.0.0/16
194.160.0.0/16
IPv6:
2001:4118::/32
Signature Algorithm: sha256WithRSAEncryption
18:71:81:53:45:28:9f:1e:9a:9d:00:24:a7:de:4c:d2:22:a2:
00:92:31:9f:df:ff:e2:15:c3:86:1e:52:3d:e1:07:cb:60:5e:
54:bd:53:b3:f8:e9:89:77:4b:a9:e2:cd:09:59:66:3b:d6:62:
d6:e1:4b:44:94:35:a7:aa:eb:67:cc:08:66:60:ca:78:70:06:
a3:af:1b:cf:f0:18:22:d5:8b:6c:84:6d:45:72:c3:0b:2b:3c:
74:c3:41:31:b6:9c:18:3f:8c:43:7f:78:e2:b2:0b:47:1f:02:
d1:3a:2a:ad:56:3a:d1:54:d5:24:7d:76:7c:94:48:e3:c1:27:
89:f6:3c:45:97:18:70:7e:1b:33:4d:8e:0b:43:53:31:31:3b:
05:1b:06:7e:e5:4a:5d:e8:88:26:cb:e3:9a:b3:fe:f1:ac:22:
b5:31:5d:d1:eb:e4:6a:38:07:9a:84:1e:9d:81:f4:a3:d6:58:
49:eb:6d:5a:8e:3e:ff:1d:d1:52:1e:a5:45:23:60:1d:f0:aa:
8b:2f:de:d5:ee:c0:96:9f:65:77:a4:25:3f:68:86:f9:15:90:
52:62:f2:b2:15:fa:72:d8:c2:bd:f6:8d:cb:23:e7:36:8f:1e:
cb:d9:96:eb:20:62:01:6d:26:57:7e:51:89:af:7a:19:b4:23:
6c:1b:7b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:43:41 2026 by rpki-client