Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/OZRl0EIZvzMHZGy3Mgu3BOnL2cQ.roa
File: OZRl0EIZvzMHZGy3Mgu3BOnL2cQ.roa (raw, json)
Hash identifier: iLj5NBVnsGW8zwXege6rDcdJrlo0iKYwZQK/cL/VEYQ=
Subject key identifier: 39:94:65:D0:42:19:BF:33:07:64:6C:B7:32:0B:B7:04:E9:CB:D9:C4
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01A0B1AB950018D327F9D40A9FFFBFE55275
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/OZRl0EIZvzMHZGy3Mgu3BOnL2cQ.roa
Signing time: Thu 17 Sep 2026 23:20:07 +0000
ROA not before: Thu 17 Sep 2026 23:20:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204603
IP address blocks: 2a14:6782:5::/48 maxlen: 48
2a14:6782:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:ab:95:00:18:d3:27:f9:d4:0a:9f:ff:bf:e5:52:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Sep 17 23:20:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=399465d04219bf3307646cb7320bb704e9cbd9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:00:be:e4:a9:15:30:af:71:56:cb:85:1b:23:
38:b2:50:79:17:2b:f6:91:81:ae:11:94:d1:28:49:
18:07:7d:8d:e7:70:96:27:89:f2:f0:cd:70:e0:67:
47:76:d0:9c:98:70:bd:9f:e5:f9:83:92:fd:29:8a:
80:4d:97:da:4d:4c:a2:5c:fa:61:01:6a:d1:68:91:
d1:9b:ab:4b:09:89:5a:97:e2:f6:12:ff:6a:e0:10:
8d:04:5b:0f:54:94:c3:7a:73:47:c6:12:d6:95:30:
ed:29:54:f9:6f:b3:6d:8a:cb:fc:c7:24:a3:3f:01:
50:af:96:b2:f9:fb:33:ba:8b:81:92:4c:99:30:52:
2b:fb:67:d3:88:76:1d:59:bc:6a:23:df:a9:59:db:
4b:e5:9f:f5:71:3a:df:21:12:d4:b8:ef:a4:f1:80:
35:6c:f7:93:f4:3c:15:4a:69:ab:b6:f3:ba:39:8d:
14:68:57:e7:00:50:a3:85:ee:07:d3:69:c3:ae:01:
98:4f:b0:9e:be:34:92:d4:9b:5c:2f:d4:ea:e1:04:
6d:e0:fc:16:16:d3:db:0f:a3:0b:d0:74:ee:26:0e:
70:95:12:38:a9:19:16:4a:6e:06:3c:0e:b1:59:87:
d6:bc:f8:8a:4d:b7:b2:69:f2:78:08:64:23:f9:0b:
d3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:94:65:D0:42:19:BF:33:07:64:6C:B7:32:0B:B7:04:E9:CB:D9:C4
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/OZRl0EIZvzMHZGy3Mgu3BOnL2cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6782:5::-2a14:6782:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
34:dc:2b:9e:32:e3:81:6f:b4:c7:06:6b:23:16:e3:d5:d9:10:
1b:c8:2f:8e:76:25:4b:80:a0:fe:0d:ad:20:cc:4d:e1:29:83:
5a:43:99:b3:2f:dd:66:60:24:af:55:ab:10:a2:44:f9:76:0b:
98:17:9a:8b:d6:49:0f:d6:e5:e4:e5:52:2c:bf:3d:fe:4d:53:
e0:27:3c:d6:da:a8:cd:c7:e8:11:97:34:e5:6c:9a:c4:e5:c2:
61:73:db:f6:14:b5:90:cd:e6:16:57:dd:45:17:d4:83:1d:e8:
f8:fb:80:37:2b:ce:24:b6:ee:a9:45:18:68:d2:ff:87:43:09:
9d:bd:eb:7c:46:ae:a8:80:0f:38:2e:a0:d6:17:54:e9:a6:25:
a6:c4:7c:f7:0d:dc:58:91:45:7c:b5:f3:85:2b:7a:f9:45:9e:
06:bd:5d:8b:3d:a0:5f:76:ce:db:57:9d:ef:8c:3b:23:2f:7d:
01:b5:b8:d2:ed:6c:4a:b7:c0:ca:21:aa:56:93:51:23:11:64:
43:26:9c:84:71:7f:f8:d7:de:f1:c0:aa:5a:37:55:69:c8:a5:
f3:36:5b:1e:7b:3d:a4:ff:a2:eb:55:21:8d:b2:e0:0f:d7:07:
32:7f:77:a4:f4:19:52:9d:c5:2a:dc:c7:22:8a:d2:72:29:6f:
f0:d1:45:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:38:05 2026 by rpki-client