Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/oLjGL20gvb-jwy4Q-PVhzdDMPy0.roa
File: oLjGL20gvb-jwy4Q-PVhzdDMPy0.roa (raw, json)
Hash identifier: oHv5deIjQma6Gl5w1Se22IPZwIZIKsTeB9zGvO4i+J4=
Subject key identifier: A0:B8:C6:2F:6D:20:BD:BF:A3:C3:2E:10:F8:F5:61:CD:D0:CC:3F:2D
Certificate issuer: /CN=17b6adf257da6a2401fb4dcf590c861335e11ba9
Certificate serial: 019FF623D5100C0D3096EE725CD407ED106D
Authority key identifier: 17:B6:AD:F2:57:DA:6A:24:01:FB:4D:CF:59:0C:86:13:35:E1:1B:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7at8lfaaiQB-03PWQyGEzXhG6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/oLjGL20gvb-jwy4Q-PVhzdDMPy0.roa
Signing time: Wed 12 Aug 2026 13:22:51 +0000
ROA not before: Wed 12 Aug 2026 13:22:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213069
IP address blocks: 91.199.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/F7at8lfaaiQB-03PWQyGEzXhG6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/F7at8lfaaiQB-03PWQyGEzXhG6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7at8lfaaiQB-03PWQyGEzXhG6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:23:d5:10:0c:0d:30:96:ee:72:5c:d4:07:ed:10:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b6adf257da6a2401fb4dcf590c861335e11ba9
Validity
Not Before: Aug 12 13:22:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0b8c62f6d20bdbfa3c32e10f8f561cdd0cc3f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:59:02:76:6c:a3:98:58:62:f9:ef:56:16:dd:
04:86:7c:67:9c:a8:d3:54:b0:11:f8:4e:b0:25:91:
3f:c9:96:f8:51:0b:d8:67:44:3c:59:18:87:62:5a:
c2:75:d7:8b:5d:f0:3f:86:7e:5f:32:c3:f4:58:05:
eb:b5:7b:62:0b:16:61:b0:c1:25:e2:0c:70:9c:2a:
6b:ad:79:d1:a5:d3:94:d4:43:af:5c:8b:f1:79:37:
5b:39:dc:79:26:cb:1e:32:a0:43:f9:8d:38:22:92:
21:a9:00:4c:72:dc:d0:5d:42:ed:7b:89:06:6a:ea:
89:d5:0b:68:3e:33:ff:ee:82:73:0f:94:c6:79:9b:
1c:e7:ac:37:15:d6:62:54:5b:d5:29:d0:93:80:3c:
4c:6d:58:80:1e:97:ef:36:69:25:9e:15:fc:20:9f:
b0:60:79:09:d0:0a:39:98:c3:81:df:0a:91:4a:93:
95:08:69:6c:ae:45:7d:e1:3d:ce:5e:e2:a6:3e:a5:
ae:6f:30:d3:ef:3f:b2:e8:8a:cd:32:d3:2e:42:ba:
75:12:49:9e:0d:40:41:49:a2:4e:03:74:6b:29:a3:
71:0f:92:92:e7:b2:13:96:07:d2:2f:e5:2a:7f:c2:
a5:49:df:a4:20:3b:1b:01:2c:9f:a2:d4:38:6b:5a:
ba:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B8:C6:2F:6D:20:BD:BF:A3:C3:2E:10:F8:F5:61:CD:D0:CC:3F:2D
X509v3 Authority Key Identifier:
keyid:17:B6:AD:F2:57:DA:6A:24:01:FB:4D:CF:59:0C:86:13:35:E1:1B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7at8lfaaiQB-03PWQyGEzXhG6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/oLjGL20gvb-jwy4Q-PVhzdDMPy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/F7at8lfaaiQB-03PWQyGEzXhG6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.14.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:85:b6:ef:1e:2e:02:a7:43:42:02:96:f8:9d:41:e1:cb:24:
fd:88:52:9b:b0:5f:cd:69:32:2f:93:05:4c:41:1f:e3:93:d2:
08:03:b6:17:d4:a1:0a:ba:dc:08:61:0b:14:bb:71:3c:c4:fe:
37:b0:63:7f:b6:9b:6d:e7:93:b6:59:08:40:67:a9:77:17:62:
38:37:0f:4c:b8:98:eb:a1:bc:70:ad:83:c9:78:26:e2:5b:b5:
2b:f5:e9:f4:cf:98:9a:0c:9b:a6:7e:c8:e8:63:bf:3f:c2:33:
62:a1:b8:4a:12:31:19:da:f5:52:09:53:23:60:10:8f:f3:38:
d9:9e:88:55:dd:1b:e7:b9:8d:23:e1:34:46:ba:d1:7e:09:19:
bc:c4:94:56:36:6e:8f:72:7f:98:c3:1d:2d:0e:b3:e1:3f:bd:
4c:96:69:98:56:d6:c6:0a:5b:45:aa:ca:ba:20:85:32:61:95:
66:d6:9b:03:f0:c9:0e:bd:28:5d:ce:e9:32:e0:90:aa:4f:da:
02:e9:0a:53:18:42:1b:5f:e8:21:52:8d:19:23:13:48:f8:e9:
3d:b4:b9:5c:50:1d:75:e0:2d:ff:78:e9:cd:6e:93:57:7f:d8:
1e:f2:e4:2a:da:3e:e2:e2:94:23:d7:0f:70:72:a8:ce:61:d0:
4c:ac:9b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:06:50 2026 by rpki-client