Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/OOTmSDz9ct7BasuGsC3EgT-bcQY.roa
File: OOTmSDz9ct7BasuGsC3EgT-bcQY.roa (raw, json)
Hash identifier: onBcNIZoRGO8OodD7K7EyDioCxf28CvQsMXqlTs+2wo=
Subject key identifier: 38:E4:E6:48:3C:FD:72:DE:C1:6A:CB:86:B0:2D:C4:81:3F:9B:71:06
Certificate issuer: /CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Certificate serial: 01A019A967C243C15E946C10540DABCF7E06
Authority key identifier: AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/OOTmSDz9ct7BasuGsC3EgT-bcQY.roa
Signing time: Wed 19 Aug 2026 10:55:27 +0000
ROA not before: Wed 19 Aug 2026 10:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202611
IP address blocks: 185.32.184.0/23 maxlen: 24
2a0b:1440::/32 maxlen: 48
2a0b:1447::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:a9:67:c2:43:c1:5e:94:6c:10:54:0d:ab:cf:7e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Validity
Not Before: Aug 19 10:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38e4e6483cfd72dec16acb86b02dc4813f9b7106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:88:32:4f:6a:69:91:9a:77:e7:0e:ae:5c:91:
54:11:2a:e3:74:36:d1:bd:0b:22:17:df:59:ac:5d:
c0:f1:8e:dc:49:97:a4:7b:10:ce:f9:1b:80:94:2c:
5f:05:d8:29:9b:55:72:2d:9c:4d:d8:88:29:cc:38:
55:b5:ea:eb:6a:b6:23:ac:a9:2a:51:24:13:38:d5:
22:d3:dd:f7:97:2e:8f:57:b9:46:44:ed:4e:db:53:
d5:ed:fc:7b:c0:a4:b8:8d:6d:b9:be:61:de:a7:c5:
fc:a5:4e:6b:16:b4:fd:fb:1d:61:2c:c5:c7:f8:97:
e1:0c:2f:59:b2:75:71:d4:de:f6:88:a2:9b:93:cc:
8f:75:f5:ed:82:7b:ac:96:92:d9:af:79:ce:8b:c3:
cf:8e:c0:13:e3:ba:92:b1:65:89:ac:48:10:bf:d7:
55:cb:ae:26:5a:a8:da:8a:e8:2b:95:d1:48:8c:9a:
2e:72:9a:59:81:10:da:40:b1:b5:e5:62:d8:42:b4:
5a:ab:ed:82:66:b3:db:3b:2d:5b:29:18:ba:8a:56:
54:1f:31:b5:4c:a3:8f:e4:7d:ad:07:81:08:b6:cb:
1d:3f:6a:a7:56:ed:ee:a1:8a:c1:e6:e4:ab:27:e4:
5c:a6:7c:79:70:1e:e8:c0:ce:0f:06:da:22:c9:f3:
9f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E4:E6:48:3C:FD:72:DE:C1:6A:CB:86:B0:2D:C4:81:3F:9B:71:06
X509v3 Authority Key Identifier:
keyid:AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/OOTmSDz9ct7BasuGsC3EgT-bcQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.184.0/23
IPv6:
2a0b:1440::/32
2a0b:1447::/32
Signature Algorithm: sha256WithRSAEncryption
3b:82:f9:fc:d7:9b:8d:22:0c:f0:f1:9d:b6:dd:4a:2b:eb:fe:
77:12:5d:8e:79:c4:a1:c4:2e:98:b0:0e:86:48:9e:15:6e:08:
32:3e:f4:bb:d9:7d:86:37:b8:2c:49:34:65:9e:bf:f7:8f:1c:
ea:87:59:5e:f0:9e:e0:78:2d:3a:0b:02:26:9b:fc:1c:ba:d5:
98:53:d5:8d:ce:94:b3:87:e6:0a:a1:09:65:1d:73:a5:5f:4f:
b2:7a:ec:c0:bb:9b:96:44:bb:4b:c9:7f:19:11:92:b8:58:52:
5f:9a:4b:49:ed:a8:44:79:f9:e8:db:97:df:fb:dc:87:d8:d6:
00:b2:8a:9c:3b:63:29:e0:f4:13:9d:42:38:ba:57:d5:d0:78:
af:d6:67:28:24:a8:bd:f8:2f:66:d7:81:47:16:37:42:f5:f0:
ab:89:2e:e6:0a:cd:8d:08:a7:e8:8d:89:ef:4d:30:ac:a1:2a:
ab:85:d6:ec:2b:15:9b:ea:71:df:5b:19:44:b2:1b:67:3a:f8:
92:fa:a7:d2:85:c0:cf:55:7f:7a:03:93:47:fa:cd:28:aa:1c:
03:fb:da:1d:e7:36:b9:45:94:fb:83:0a:75:8f:5f:0a:eb:42:
8e:32:3c:05:10:4a:33:f1:a6:30:b2:93:19:d5:44:63:2b:75:
0a:8d:6b:15
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAaAZqWfCQ8FelGwQVA2rz34GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNGEyOWM2MTM4ZTJkOTNkNTRhMzYzMjhiOTRjYjFmOGEz
ODJhNmIwHhcNMjYwODE5MTA1NTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGU0ZTY0ODNjZmQ3MmRlYzE2YWNiODZiMDJkYzQ4MTNmOWI3MTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IgyT2ppkZp35w6uXJFUESrjdDbR
vQsiF99ZrF3A8Y7cSZekexDO+RuAlCxfBdgpm1VyLZxN2IgpzDhVterrarYjrKkq
USQTONUi0933ly6PV7lGRO1O21PV7fx7wKS4jW25vmHep8X8pU5rFrT9+x1hLMXH
+JfhDC9ZsnVx1N72iKKbk8yPdfXtgnuslpLZr3nOi8PPjsAT47qSsWWJrEgQv9dV
y64mWqjaiugrldFIjJoucppZgRDaQLG15WLYQrRaq+2CZrPbOy1bKRi6ilZUHzG1
TKOP5H2tB4EItssdP2qnVu3uoYrB5uSrJ+Rcpnx5cB7owM4PBtoiyfOf0QIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFDjk5kg8/XLewWrLhrAtxIE/m3EGMB8GA1UdIwQY
MBaAFK5KKcYTji2T1Uo2MouUyx+KOCprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmtvcHhoT09MWlBWU2pZeWk1VExING80S21zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zNWJlMDQtZDViNy00NGFhLWFkZTQt
MTM0MDFkMWYyMmQyLzEvT09UbVNEejljdDdCYXN1R3NDM0VnVC1iY1FZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zNWJlMDQtZDViNy00NGFhLWFkZTQtMTM0MDFkMWYyMmQy
LzEvcmtvcHhoT09MWlBWU2pZeWk1VExING80S21zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQBuSC4MBQE
AgACMA4DBQAqCxRAAwUAKgsURzANBgkqhkiG9w0BAQsFAAOCAQEAO4L5/NebjSIM
8PGdtt1KK+v+dxJdjnnEocQumLAOhkieFW4IMj70u9l9hje4LEk0ZZ6/948c6odZ
XvCe4HgtOgsCJpv8HLrVmFPVjc6Us4fmCqEJZR1zpV9PsnrswLublkS7S8l/GRGS
uFhSX5pLSe2oRHn56NuX3/vch9jWALKKnDtjKeD0E51COLpX1dB4r9ZnKCSovfgv
ZteBRxY3QvXwq4ku5grNjQin6I2J700wrKEqq4XW7CsVm+px31sZRLIbZzr4kvqn
0oXAz1V/egOTR/rNKKocA/vaHec2uUWU+4MKdY9fCutCjjI8BRBKM/GmMLKTGdVE
Yyt1Co1rFQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:55:18 2026 by rpki-client