Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/OLoWkpl-vFHnF3fTWV20VZKShfM.roa
File: OLoWkpl-vFHnF3fTWV20VZKShfM.roa (raw, json)
Hash identifier: CIUJ+xraGXm40qmZaGZFb5yT0OSCoTC5GUECw9kb5YY=
Subject key identifier: 38:BA:16:92:99:7E:BC:51:E7:17:77:D3:59:5D:B4:55:92:92:85:F3
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A0B08DF19FCDAB5BD1499EF8B48446D3A1
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/OLoWkpl-vFHnF3fTWV20VZKShfM.roa
Signing time: Thu 17 Sep 2026 18:08:07 +0000
ROA not before: Thu 17 Sep 2026 18:08:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218636
IP address blocks: 2a11:9644::/32 maxlen: 32
2a11:eac5::/32 maxlen: 32
2a12:f982::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:8d:f1:9f:cd:ab:5b:d1:49:9e:f8:b4:84:46:d3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Sep 17 18:08:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38ba1692997ebc51e71777d3595db455929285f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:79:0d:33:49:3d:34:cc:bd:73:f8:41:67:
70:2d:6c:b5:6b:0d:f0:c8:bb:29:9b:58:23:15:f1:
1b:2f:5e:cd:d8:51:37:20:f5:e5:17:cd:2e:81:20:
13:68:1d:c8:cb:d7:af:23:c7:43:f4:40:62:17:72:
93:1f:fe:ed:73:27:c1:24:83:79:74:a5:87:b2:a6:
f3:75:5f:37:00:b6:44:81:b8:a3:50:85:d3:52:ec:
51:24:4d:ab:35:7f:dc:18:85:d5:f0:7c:7c:d2:f0:
71:5b:f2:c9:d7:a0:ec:86:9d:12:9c:aa:1c:58:2e:
48:9a:d7:82:5e:da:08:cc:9d:32:6a:64:14:5e:ef:
f6:1d:71:07:00:5c:2b:dc:1e:97:bf:36:f7:56:57:
c5:aa:e3:59:54:75:d4:ea:5b:15:65:82:9b:bf:b4:
3b:b2:3f:8a:69:68:ed:71:57:b8:45:27:d6:f1:39:
ce:ba:2b:7c:54:7b:fb:0c:e7:c6:b5:1e:91:e4:df:
62:5f:89:68:03:70:07:60:9a:71:f7:e9:2f:ee:31:
a8:ae:a4:a5:e2:31:c2:d9:db:5f:fc:2e:0f:f7:80:
39:2a:05:39:52:ff:3d:fd:12:ce:f5:de:bc:65:44:
79:e4:2d:ce:76:e7:14:5e:a7:ae:4b:dc:7c:5f:44:
6c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BA:16:92:99:7E:BC:51:E7:17:77:D3:59:5D:B4:55:92:92:85:F3
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/OLoWkpl-vFHnF3fTWV20VZKShfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:9644::/32
2a11:eac5::/32
2a12:f982::/32
Signature Algorithm: sha256WithRSAEncryption
1b:0e:fc:1b:73:17:04:c5:75:28:f3:22:3e:7b:d9:52:0d:37:
05:1b:3d:08:3f:f6:84:65:8a:5f:97:73:5d:40:25:f2:07:be:
48:d6:d5:27:5c:71:23:86:c3:15:87:9b:aa:0b:c8:e7:f8:c5:
20:4f:8b:b0:05:3c:67:bb:95:37:7d:e0:82:ca:db:15:a5:c6:
93:7d:79:84:89:a4:ee:a4:c9:f0:cb:3c:21:c1:50:46:f7:24:
2d:e5:7f:44:59:27:af:d1:96:9d:d1:15:82:12:40:f4:bc:1e:
76:dd:35:30:dd:a9:07:00:a7:95:09:f2:52:4d:0b:43:1d:f7:
ed:3b:f8:1e:5c:0b:21:33:cd:2d:95:76:3e:d0:83:c6:e8:fe:
4a:e0:a4:a0:96:23:90:69:c2:2c:a9:43:be:4c:a9:7b:01:38:
88:9e:e1:82:9e:f5:2f:20:4f:8d:6c:d1:92:0c:46:88:ef:ac:
5c:0a:94:50:95:dc:ea:77:4b:17:e6:17:57:31:2f:cc:19:b1:
50:6d:10:a9:2f:69:5d:c5:b5:70:a2:17:a2:cb:ef:c7:48:35:
62:f7:a6:8e:26:e1:56:44:98:3f:58:00:0e:d7:71:78:80:86:
18:ac:70:25:3e:c4:d3:97:d2:8d:d5:c5:04:bf:f2:b6:97:d0:
13:61:be:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:52:15 2026 by rpki-client