Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/oaByAQIBjr3MEhUsexneSlHEXi0.roa
File: oaByAQIBjr3MEhUsexneSlHEXi0.roa (raw, json)
Hash identifier: rmEVb+5d+NzSU5TuAXNLnba89QJ2KzlFb0zmkyWDY5I=
Subject key identifier: A1:A0:72:01:02:01:8E:BD:CC:12:15:2C:7B:19:DE:4A:51:C4:5E:2D
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019E78A39728512115B36FED56ED8DB02C5E
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/oaByAQIBjr3MEhUsexneSlHEXi0.roa
Signing time: Sat 30 May 2026 11:27:27 +0000
ROA not before: Sat 30 May 2026 11:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211358
IP address blocks: 87.229.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:78:a3:97:28:51:21:15:b3:6f:ed:56:ed:8d:b0:2c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: May 30 11:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1a0720102018ebdcc12152c7b19de4a51c45e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:43:01:70:95:c3:20:f8:f1:4f:c7:73:a7:69:
95:e1:df:51:90:e7:e9:05:99:e1:ae:1f:c0:a7:72:
ec:ed:e9:00:16:ba:f5:2c:48:61:79:60:40:3a:bf:
9b:5d:ed:95:1c:5d:09:58:61:ec:5b:6d:df:ce:3b:
93:f1:84:4e:f6:53:35:22:00:e4:49:ef:37:a0:cc:
35:34:55:e9:53:1f:d6:9d:ce:92:70:ac:a9:ce:21:
80:a1:7b:9d:5d:48:81:ae:59:69:1b:3f:9d:28:39:
10:8e:93:70:f0:d5:34:87:18:58:ba:88:70:9b:11:
50:85:f2:28:f7:6c:6d:11:f7:34:da:7f:00:96:3e:
05:d8:15:c3:ef:b7:3f:77:39:b1:3d:25:f8:13:5b:
96:6c:ea:92:6e:0d:a9:31:2a:22:0e:da:72:f7:f0:
5f:96:a3:55:dd:a1:4b:69:eb:c1:7e:99:a8:75:9f:
62:b1:cd:e7:8a:b7:95:3e:72:83:91:86:cf:73:0f:
fb:32:94:14:b9:96:41:5a:27:89:1d:b0:f0:ef:7c:
25:75:03:f3:7b:c9:ca:57:72:06:fb:91:35:ca:da:
9d:72:1a:75:b5:da:e2:2a:2c:de:29:9d:76:20:3b:
a5:48:0e:8a:f1:17:08:e7:47:8d:a1:5d:7a:cd:7b:
0c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A0:72:01:02:01:8E:BD:CC:12:15:2C:7B:19:DE:4A:51:C4:5E:2D
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/oaByAQIBjr3MEhUsexneSlHEXi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.44.0/24
Signature Algorithm: sha256WithRSAEncryption
24:e1:51:e3:7f:30:45:52:46:57:47:41:27:40:e8:59:d4:8b:
f4:57:5c:3a:ec:2a:5f:cf:5e:a4:2b:bf:b0:d0:09:55:fa:0d:
a9:86:e1:7d:4d:86:37:9b:0f:14:ea:1f:02:6b:10:ae:a6:91:
09:5e:9a:e8:fd:6d:42:31:b2:d1:5c:ba:42:c4:c6:67:9e:d4:
66:a2:61:f6:cf:1f:38:64:b4:7b:f3:92:47:cf:e5:6c:14:ea:
30:6d:56:28:5f:4d:0b:54:75:ec:1e:b6:7b:4c:05:b5:c5:c1:
c3:0d:e5:99:a7:6c:ff:17:33:fc:65:eb:f7:21:ce:30:64:a9:
c9:85:7f:6a:44:e1:45:81:a7:5a:90:88:9e:86:01:80:30:17:
92:a8:61:05:b0:6e:85:97:5f:5d:d6:6d:52:dc:65:68:64:e6:
8a:98:4f:8a:6f:f9:d5:3c:b5:23:bd:9b:2a:cd:bd:01:02:c5:
d3:11:15:07:09:76:e3:d4:72:34:07:ed:36:8b:80:7a:1b:6c:
fb:ac:84:13:24:38:6d:e9:af:5d:2b:de:5b:30:09:67:e9:54:
90:b0:2a:03:13:62:13:1a:99:fe:43:58:6e:33:6a:10:9f:da:
a4:c3:31:c9:f4:4e:e0:26:30:7c:3e:0e:4d:54:b3:ed:a6:56:
a0:3c:d4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:56:33 2026 by rpki-client