Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/OlHHMfPygKkyr7HTvCn4K8p01_U.roa
File: OlHHMfPygKkyr7HTvCn4K8p01_U.roa (raw, json)
Hash identifier: N9V2kxguErly1WsufOsx/epgV4HMlIpbzSH7yTgCKok=
Subject key identifier: 3A:51:C7:31:F3:F2:80:A9:32:AF:B1:D3:BC:29:F8:2B:CA:74:D7:F5
Certificate issuer: /CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Certificate serial: 019C9ED422343FB38C45F941E81554FEA4CF
Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/OlHHMfPygKkyr7HTvCn4K8p01_U.roa
Signing time: Fri 27 Feb 2026 11:20:28 +0000
ROA not before: Fri 27 Feb 2026 11:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207328
IP address blocks: 147.78.60.0/24 maxlen: 24
147.78.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:d4:22:34:3f:b3:8c:45:f9:41:e8:15:54:fe:a4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Validity
Not Before: Feb 27 11:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a51c731f3f280a932afb1d3bc29f82bca74d7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:a8:d8:7f:9d:62:87:f6:f6:e2:ef:c3:36:
fa:fd:9a:4c:ee:d8:48:89:24:e2:ce:f2:fc:06:a5:
eb:9a:86:24:69:d5:c3:7a:e3:29:d4:95:fc:ba:f4:
e4:c3:e0:fe:21:8c:75:b2:65:81:42:43:62:89:8b:
9a:67:fb:04:4c:73:50:e0:2e:ca:0e:23:af:6f:29:
30:1d:bc:94:c8:dc:2f:0d:76:d5:5c:73:23:71:b2:
f1:05:66:d0:92:82:29:aa:2e:b0:8a:00:b1:ec:8d:
03:4b:64:cd:f4:b5:c5:2f:ee:c1:85:2c:ef:f2:3d:
52:b8:9b:74:a0:45:8b:c4:2f:93:26:10:57:b7:d7:
6f:68:4a:8b:c2:fa:69:d5:5b:f2:c6:42:13:17:c0:
2d:4c:a2:a4:31:7a:95:67:68:43:b2:26:23:6c:4d:
9a:3e:21:5d:39:38:39:8b:ca:3d:f8:f1:c5:19:0e:
39:bd:33:11:3e:57:21:68:d0:f7:20:ef:72:19:76:
fe:5f:9d:d8:a0:48:06:ad:b5:6c:a9:96:5a:bb:ac:
41:fe:27:96:fd:45:ee:15:6f:aa:54:2d:94:d4:1e:
ef:30:e6:18:dd:fa:0c:15:0e:44:07:ce:3b:73:87:
d7:62:ae:d7:2f:47:d6:f5:8e:be:88:d1:88:9f:f7:
93:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:51:C7:31:F3:F2:80:A9:32:AF:B1:D3:BC:29:F8:2B:CA:74:D7:F5
X509v3 Authority Key Identifier:
keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/OlHHMfPygKkyr7HTvCn4K8p01_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.60.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:8d:8b:89:85:93:28:e0:7b:01:21:e5:48:ab:b2:bb:3d:6f:
69:2b:89:4f:2c:9f:d4:2e:33:34:09:7b:2a:10:ff:72:f4:80:
33:8b:c6:a1:49:57:83:b1:58:54:98:8a:40:94:12:16:18:db:
b1:ad:27:8e:40:26:22:64:f0:50:8f:7a:a6:2b:25:d7:b9:8c:
1e:7b:0f:6d:69:65:bb:7d:88:42:c8:dc:ee:b1:48:11:7c:0f:
a2:76:b9:0d:08:c4:b3:dc:cb:fc:cc:9c:69:4e:87:c5:58:e0:
71:9d:bb:9b:43:a5:a9:8b:ae:b8:1f:b6:ae:86:9a:18:73:5e:
55:fb:91:61:4d:8a:ff:a6:22:84:09:82:68:68:ee:fc:bf:48:
96:63:eb:26:2b:93:a7:fb:77:54:17:78:a2:e6:c7:35:cc:d0:
48:34:23:99:51:f1:89:29:1a:6f:70:fb:89:26:8e:df:a4:7a:
44:56:eb:ba:af:8d:02:23:37:a1:8c:16:1a:46:46:3f:99:a0:
4c:20:11:ba:26:a8:20:c3:09:58:c5:27:37:3b:4d:20:5d:bd:
41:19:48:58:eb:4c:b0:84:94:74:10:21:89:a8:4b:27:1c:20:
31:ae:a0:b6:6c:82:5d:1a:63:48:97:fd:f3:60:58:1a:ed:9e:
e1:d2:30:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:08:42 2026 by rpki-client