Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/O0NaR63qYEYkKBX6khhH3sfwhso.roa
File: O0NaR63qYEYkKBX6khhH3sfwhso.roa (raw, json)
Hash identifier: lovVJhahsHXLyNDHuxIILDmOwnsX5JTEWJRzVms+kRw=
Subject key identifier: 3B:43:5A:47:AD:EA:60:46:24:28:15:FA:92:18:47:DE:C7:F0:86:CA
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 019BFF4C52DED570F55E8399F85CC19FB1D6
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/O0NaR63qYEYkKBX6khhH3sfwhso.roa
Signing time: Tue 27 Jan 2026 11:52:30 +0000
ROA not before: Tue 27 Jan 2026 11:52:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207043
IP address blocks: 94.26.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ff:4c:52:de:d5:70:f5:5e:83:99:f8:5c:c1:9f:b1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Jan 27 11:52:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b435a47adea6046242815fa921847dec7f086ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:b6:a1:3e:52:41:b0:68:1c:3d:79:c6:34:
8c:9f:cf:a5:71:5c:68:ed:19:a9:d1:72:37:d9:28:
55:36:34:74:39:bd:5a:0b:55:39:43:4f:68:c6:10:
1f:b9:44:a7:48:05:94:a8:1a:9f:98:b0:70:64:b1:
ac:a1:09:d9:62:d3:70:94:49:28:d0:cd:4b:26:3b:
1a:a1:1b:90:b2:42:a9:48:44:59:19:78:97:66:cb:
b2:a2:1c:55:f9:58:7b:f4:7c:95:18:fd:86:48:b9:
88:d0:42:a9:0d:5b:db:ec:ae:24:b7:24:58:94:e6:
61:05:4c:1c:b1:d0:9f:0b:b8:63:c7:39:3a:db:0a:
09:50:92:2f:b3:f0:29:73:ba:76:83:a1:d8:c8:ad:
42:18:64:88:7f:df:68:bd:74:de:53:fe:a7:55:c4:
b7:3d:13:af:2b:c3:5c:12:a8:79:de:74:48:bc:98:
04:43:d1:4b:06:8c:d0:27:9f:28:18:58:20:bc:7b:
00:1c:29:fb:5c:98:bc:de:2f:a4:cf:e5:95:98:6e:
80:84:9c:c4:06:5a:02:d3:a6:4d:34:2d:e3:a8:35:
a5:48:e7:cc:1b:86:81:c6:d7:9e:de:7d:20:df:d8:
31:06:a6:b0:02:84:5c:59:cd:f8:e4:cc:11:47:db:
e3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:43:5A:47:AD:EA:60:46:24:28:15:FA:92:18:47:DE:C7:F0:86:CA
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/O0NaR63qYEYkKBX6khhH3sfwhso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.83.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:04:ad:2f:ae:08:f3:3d:23:1a:b9:88:e2:08:b4:87:5e:b2:
46:c0:0b:51:3a:15:e4:cf:8b:12:c0:49:e9:39:ff:83:bb:98:
a1:9e:b2:a9:f3:82:ec:70:ae:b7:2a:f1:d1:ef:dc:fc:c4:8f:
dc:bd:e2:14:59:03:b4:9b:2d:e8:c7:ce:27:12:aa:98:e9:f1:
8a:a1:44:01:ee:b5:b4:37:06:dc:66:31:9b:5a:7c:be:27:0e:
e8:a9:34:59:9c:40:2b:b6:27:44:f8:b3:01:5b:9b:3f:73:ee:
2b:b3:8a:77:37:4c:8c:e6:56:f8:35:59:2f:e4:fa:e8:c1:ce:
d3:79:97:da:6f:91:62:14:90:12:72:a3:57:6b:16:17:be:28:
f3:df:90:83:b3:5e:64:46:5c:95:03:81:30:a5:93:70:59:8b:
da:98:e6:ea:2b:07:02:57:50:74:77:3e:b3:fc:77:07:9c:a8:
3f:3b:1f:39:ff:db:c8:59:59:b2:56:c8:c3:d1:59:7a:6e:dc:
a3:2e:d4:0a:2c:36:86:b6:de:a8:30:8a:52:a9:61:e8:13:7a:
b7:03:9f:00:b0:9d:37:38:d9:2d:fe:d6:ea:8c:36:b1:64:8a:
1f:46:f1:40:64:e5:f6:d9:40:89:ce:e2:68:23:02:d7:30:be:
11:0b:ef:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:49:38 2026 by rpki-client