Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/oav3URwQXyrT2jUvgDPn7DGmVPM.roa
File: oav3URwQXyrT2jUvgDPn7DGmVPM.roa (raw, json)
Hash identifier: Jvb2wKPQQKuUPKcxKQbXia8en+VF6t/8IxGtUqGnPLQ=
Subject key identifier: A1:AB:F7:51:1C:10:5F:2A:D3:DA:35:2F:80:33:E7:EC:31:A6:54:F3
Certificate issuer: /CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Certificate serial: 019EA4B55C8B5FC163550E9584FDC5283BAF
Authority key identifier: 10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/oav3URwQXyrT2jUvgDPn7DGmVPM.roa
Signing time: Mon 08 Jun 2026 00:50:09 +0000
ROA not before: Mon 08 Jun 2026 00:50:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205007
IP address blocks: 185.115.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a4:b5:5c:8b:5f:c1:63:55:0e:95:84:fd:c5:28:3b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Validity
Not Before: Jun 8 00:50:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1abf7511c105f2ad3da352f8033e7ec31a654f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:dd:33:e3:f9:9b:b3:f7:ff:ab:e9:cc:73:
65:e8:11:7c:10:40:3b:8c:29:6a:80:de:d8:e9:25:
a9:41:5c:22:92:0d:92:35:f9:36:55:44:a0:b9:29:
85:59:8f:b7:9e:21:5b:58:4e:df:ba:7b:23:a8:a2:
0f:8c:32:37:7f:b2:12:4c:96:72:b1:c3:9b:7c:7d:
51:60:d8:6b:f7:99:ec:6b:1e:bc:b6:0c:c4:a6:86:
b8:69:d7:a1:44:83:d5:9b:c3:43:fe:03:3b:b6:56:
49:dc:0f:44:99:be:73:2a:97:fd:af:1c:46:b4:26:
78:4c:ea:60:4c:84:15:38:c6:f1:45:84:59:c7:6b:
b4:29:05:c8:46:09:85:f6:47:ec:ab:31:7c:23:49:
da:ee:3b:d3:cc:cf:42:46:ee:13:b5:94:67:34:bf:
5e:70:38:7b:50:67:01:cb:78:f6:55:01:e1:e9:53:
db:30:06:96:46:12:a4:58:b4:71:26:05:31:bc:3c:
af:3a:03:00:51:e4:4c:5d:c3:8d:70:e5:de:00:4d:
2b:f1:98:12:f9:2e:32:69:d9:04:86:32:ee:6a:fe:
b8:7c:dc:13:84:f7:18:42:41:9a:db:e1:cc:f0:81:
5f:13:4b:ad:e6:40:9a:69:fb:b2:ec:fa:de:95:2a:
78:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AB:F7:51:1C:10:5F:2A:D3:DA:35:2F:80:33:E7:EC:31:A6:54:F3
X509v3 Authority Key Identifier:
keyid:10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/oav3URwQXyrT2jUvgDPn7DGmVPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.142.0/24
Signature Algorithm: sha256WithRSAEncryption
31:fd:25:bd:07:68:ad:40:2f:0d:b3:13:dd:80:2a:3c:d8:83:
f6:a3:4f:4a:c3:7f:c0:aa:50:ab:ea:67:31:cb:8f:a2:6c:40:
f6:dc:53:38:4d:16:e2:59:1b:37:68:84:81:91:3f:85:2f:01:
3b:aa:a6:7c:9c:12:7e:46:33:4e:97:8b:0f:da:ec:a7:1c:41:
bb:17:57:35:79:b2:1a:a5:30:15:42:cd:24:cf:6e:c5:f1:1a:
c3:9d:e1:ba:6d:2d:29:13:c4:8b:4b:68:09:6d:4b:9a:8e:ea:
b2:18:0a:f5:23:1b:ae:fd:01:20:01:4a:2f:9d:c6:d9:6a:4a:
2f:d6:27:a8:26:af:e7:71:c0:20:cc:14:a8:4f:0c:65:41:dd:
fc:d6:c4:ee:b7:4a:5a:27:07:ec:b7:9c:a8:50:98:c8:ce:27:
91:22:0b:3a:75:b6:d0:87:60:e0:07:7e:a3:58:86:fb:8d:d1:
b2:bd:2e:a6:36:ec:7d:77:d0:3b:c7:8a:3d:0b:12:c1:e1:64:
e7:9e:81:03:1b:42:d2:ad:18:b2:2b:9d:70:3d:17:88:47:de:
5c:f2:ad:51:d2:0a:8d:69:3a:29:76:e0:45:fc:8b:f8:00:b0:
5e:93:26:74:30:99:70:80:1a:30:76:bf:b5:89:27:58:f2:a2:
b7:8a:c2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:55:39 2026 by rpki-client