Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/OSrf5qcxUbY0hV3sZqS7LvbOmmg.roa
File: OSrf5qcxUbY0hV3sZqS7LvbOmmg.roa (raw, json)
Hash identifier: UItxyB8a7+2XHmVgldm4j68uQQsyiCP/3E0yigGfFhw=
Subject key identifier: 39:2A:DF:E6:A7:31:51:B6:34:85:5D:EC:66:A4:BB:2E:F6:CE:9A:68
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01A06120950A6B42FCB09DB46DC5901F39C0
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/OSrf5qcxUbY0hV3sZqS7LvbOmmg.roa
Signing time: Wed 02 Sep 2026 07:58:40 +0000
ROA not before: Wed 02 Sep 2026 07:58:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218826
IP address blocks: 81.29.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:20:95:0a:6b:42:fc:b0:9d:b4:6d:c5:90:1f:39:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Sep 2 07:58:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=392adfe6a73151b634855dec66a4bb2ef6ce9a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:4c:99:15:b3:5d:e8:d6:9d:5a:e5:d0:46:
e5:58:fb:9d:40:11:3e:67:18:99:83:01:ce:90:bf:
48:8d:ff:d2:cb:56:b9:a5:1e:41:a8:ee:90:aa:f2:
49:14:25:00:02:b4:bd:37:cf:ac:b6:6c:77:10:cd:
29:49:89:ca:e8:fb:e3:2c:cc:dc:eb:28:8c:ff:39:
50:52:33:3d:9f:1e:cc:ef:71:be:10:97:9a:64:2c:
ff:2b:26:e4:81:b6:54:6c:97:8e:f4:05:08:bc:bf:
fc:99:1a:5c:10:d8:7b:b0:bd:60:b6:d9:5c:b3:5f:
bb:cf:d5:ff:07:38:68:96:4d:b7:2b:df:d0:18:05:
83:38:53:97:67:1c:ff:dc:ad:b9:f2:38:78:48:3b:
aa:07:25:25:f9:c0:95:1d:39:a7:af:27:56:31:6e:
c7:45:7d:07:61:27:ea:34:f2:a2:c8:ce:24:b8:0e:
56:f9:b4:f2:01:a0:1c:58:99:d0:b3:c6:6b:bb:e4:
90:ce:32:44:3f:2a:b2:b6:f1:a1:15:f0:25:ea:66:
bf:ba:0f:4b:96:11:0e:33:a7:76:b2:d5:ec:a0:4c:
e6:2a:d5:c0:63:74:4c:f2:d8:2a:e3:80:dc:d8:b5:
12:d6:bd:8e:1b:08:1c:71:e4:13:79:39:80:75:cf:
db:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2A:DF:E6:A7:31:51:B6:34:85:5D:EC:66:A4:BB:2E:F6:CE:9A:68
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/OSrf5qcxUbY0hV3sZqS7LvbOmmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.151.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:93:70:9a:c8:a1:8b:8e:c9:8e:d1:0c:8e:d2:79:cf:d8:c4:
d5:2e:c8:35:69:57:37:c1:f6:63:87:6a:07:eb:21:d2:ac:60:
e4:9a:f2:5a:86:90:e1:9b:bd:0a:f3:b0:4f:c5:ce:1b:b8:60:
88:c0:7e:6d:60:d6:a1:1d:56:ca:05:64:fb:c5:01:51:e3:e8:
4b:cb:f9:7f:59:1d:a7:65:be:6a:ae:ba:3f:39:6f:e4:64:66:
0f:89:ac:06:71:dd:9a:87:14:cf:67:1e:78:41:29:52:f1:77:
e0:23:98:00:6c:c5:0f:a5:33:0c:27:4a:f3:7a:a7:03:7c:35:
8e:cd:49:db:64:38:fb:dd:4b:ad:35:f3:45:d6:e8:83:6a:44:
78:25:82:08:5b:24:a0:5d:66:55:56:8c:18:e4:56:29:c6:bb:
13:a0:88:c6:b9:7f:24:2c:5e:72:41:b5:57:79:d3:3e:07:4a:
43:fc:42:65:ff:84:44:34:3f:ee:ea:49:ce:45:81:0a:91:23:
14:07:eb:3f:cb:54:17:dc:f8:7e:bb:db:c1:08:0a:36:19:64:
cf:90:d4:b7:1d:64:b2:e9:a4:ea:8f:ae:e0:94:e5:85:b1:60:
a3:93:58:8d:c3:9c:74:9a:5b:94:4b:11:a4:d5:2a:fb:88:03:
b8:b8:e9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:02:17 2026 by rpki-client