Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/OOgSrAUeOdz-KCjdJaSylTrVCnI.roa
File: OOgSrAUeOdz-KCjdJaSylTrVCnI.roa (raw, json)
Hash identifier: PA8PRT3MCSljH1ThkYW+RfO3HU2xaW4OhPmDwvl1hVA=
Subject key identifier: 38:E8:12:AC:05:1E:39:DC:FE:28:28:DD:25:A4:B2:95:3A:D5:0A:72
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019D9055962065851D9EA86143D0A64C9743
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/OOgSrAUeOdz-KCjdJaSylTrVCnI.roa
Signing time: Wed 15 Apr 2026 08:50:21 +0000
ROA not before: Wed 15 Apr 2026 08:50:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35810
IP address blocks: 2a11:ec0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:55:96:20:65:85:1d:9e:a8:61:43:d0:a6:4c:97:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 15 08:50:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38e812ac051e39dcfe2828dd25a4b2953ad50a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6c:3f:97:e2:53:0c:de:1e:7e:cb:8d:17:4c:
01:cd:a4:ea:a5:9b:1f:fd:7c:b7:14:29:05:c8:8c:
b7:cf:d0:2f:6b:e8:c9:47:a8:11:46:52:b1:eb:5c:
3b:7a:1f:ff:4f:6f:c8:da:b5:ad:e0:37:22:58:f0:
a3:6d:c9:72:1d:18:a4:8c:7d:4a:55:45:62:94:43:
8b:aa:cd:ef:7d:86:9f:40:77:7f:6d:6e:fe:9e:9b:
4d:de:ed:1e:4a:4d:3d:dd:4a:3f:c4:c9:6e:8d:e9:
22:9b:7e:ca:06:76:14:ae:3a:5c:62:b0:07:c4:c5:
64:c5:a4:8d:c1:af:06:58:c1:31:cb:2c:05:25:88:
24:b0:b5:07:14:9c:20:88:e4:eb:9a:16:e0:73:ee:
42:f1:26:02:c7:a2:3a:7c:c2:a4:69:63:4e:fd:d9:
81:b6:e2:83:58:14:f0:19:65:2e:e2:f2:b3:d1:e0:
32:23:bd:ce:57:ea:89:ab:c9:7f:ac:48:9b:ae:7e:
03:d2:80:4e:8d:97:d6:aa:d1:7d:ac:36:6a:ae:74:
e9:92:a4:fc:83:c6:0c:d8:d7:1c:c6:cd:ff:b9:c2:
e5:bd:83:a4:48:ff:be:fb:65:7c:64:0c:ad:d1:a0:
6c:c7:49:1d:35:71:b5:bb:b4:2f:f4:78:ef:6f:52:
c0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E8:12:AC:05:1E:39:DC:FE:28:28:DD:25:A4:B2:95:3A:D5:0A:72
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/OOgSrAUeOdz-KCjdJaSylTrVCnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:ec0::/32
Signature Algorithm: sha256WithRSAEncryption
2b:d0:44:a1:c0:af:6e:fa:b9:23:58:02:da:d4:38:6c:ed:d6:
04:43:34:9d:60:71:5b:72:e2:f2:c2:2d:4c:74:ef:ae:53:ef:
52:cf:94:16:53:11:1d:de:b7:1c:bd:d5:e6:03:3c:37:e9:c1:
b8:90:ff:ee:a6:f5:48:22:9a:d8:ce:e9:f0:84:eb:d3:dd:6d:
e9:95:f6:d1:1b:3b:7b:88:40:ba:c1:28:c7:32:cf:64:a8:04:
80:48:e0:b7:33:fc:b3:f8:e5:8b:ab:80:ed:48:7c:84:c8:f6:
77:03:5c:b6:da:75:6c:cd:8e:f3:14:a9:3d:b7:84:dc:b9:f8:
0c:e2:5a:fd:cd:e3:ed:5a:0e:2a:0f:a3:e6:8a:1a:d2:95:de:
72:eb:8e:de:a7:31:02:6e:3c:c2:35:ae:2d:f7:c6:2e:cc:9b:
fe:1c:c2:e2:9a:e9:d7:be:32:11:15:44:cb:1d:59:7a:69:7b:
46:b9:87:a9:e3:b9:93:a7:7b:9d:1e:13:51:55:1b:64:a8:94:
01:cc:1a:25:bf:a9:4b:fb:a6:08:da:60:84:81:1c:ef:02:a9:
65:e6:18:a3:e3:a6:58:e3:96:6a:24:2f:28:69:01:a2:0f:d1:
8c:52:c2:7b:98:ac:0b:d7:69:55:a3:63:b5:77:87:c7:ce:7e:
d2:4f:44:4e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ2QVZYgZYUdnqhhQ9CmTJdDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYwNDE1MDg1MDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGU4MTJhYzA1MWUzOWRjZmUyODI4ZGQyNWE0YjI5NTNhZDUwYTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Gw/l+JTDN4efsuNF0wBzaTqpZsf
/Xy3FCkFyIy3z9Ava+jJR6gRRlKx61w7eh//T2/I2rWt4DciWPCjbclyHRikjH1K
VUVilEOLqs3vfYafQHd/bW7+nptN3u0eSk093Uo/xMlujekim37KBnYUrjpcYrAH
xMVkxaSNwa8GWMExyywFJYgksLUHFJwgiOTrmhbgc+5C8SYCx6I6fMKkaWNO/dmB
tuKDWBTwGWUu4vKz0eAyI73OV+qJq8l/rEibrn4D0oBOjZfWqtF9rDZqrnTpkqT8
g8YM2Nccxs3/ucLlvYOkSP+++2V8ZAyt0aBsx0kdNXG1u7Qv9Hjvb1LANwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFDjoEqwFHjnc/igo3SWkspU61QpyMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvT09nU3JBVWVPZHotS0NqZEphU3lsVHJWQ25JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhEOwDAN
BgkqhkiG9w0BAQsFAAOCAQEAK9BEocCvbvq5I1gC2tQ4bO3WBEM0nWBxW3Li8sIt
THTvrlPvUs+UFlMRHd63HL3V5gM8N+nBuJD/7qb1SCKa2M7p8ITr091t6ZX20Rs7
e4hAusEoxzLPZKgEgEjgtzP8s/jli6uA7Uh8hMj2dwNcttp1bM2O8xSpPbeE3Ln4
DOJa/c3j7VoOKg+j5ooa0pXecuuO3qcxAm48wjWuLffGLsyb/hzC4prp174yERVE
yx1Zeml7RrmHqeO5k6d7nR4TUVUbZKiUAcwaJb+pS/umCNpghIEc7wKpZeYYo+Om
WOOWaiQvKGkBog/RjFLCe5isC9dpVaNjtXeHx85+0k9ETg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:39:53 2026 by rpki-client