Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/OmXBsdyKLvWobJS6UEHYmGtw0xY.roa
File: OmXBsdyKLvWobJS6UEHYmGtw0xY.roa (raw, json)
Hash identifier: bPL04f4hDEsa2VqwMYGR1K4zPpf8tZLFe4QIfkTZGqU=
Subject key identifier: 3A:65:C1:B1:DC:8A:2E:F5:A8:6C:94:BA:50:41:D8:98:6B:70:D3:16
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019EBE84C201E390DF6AF0A295AF679AD88D
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/OmXBsdyKLvWobJS6UEHYmGtw0xY.roa
Signing time: Sat 13 Jun 2026 01:07:11 +0000
ROA not before: Sat 13 Jun 2026 01:07:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204085
IP address blocks: 2a12:bec4:1fa0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:84:c2:01:e3:90:df:6a:f0:a2:95:af:67:9a:d8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jun 13 01:07:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a65c1b1dc8a2ef5a86c94ba5041d8986b70d316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:28:ed:2e:8f:9a:0c:5a:99:82:d5:29:50:
59:79:f0:83:23:2b:11:8b:ed:c5:d3:d1:bc:de:94:
3e:f3:ce:e2:40:88:da:73:95:ac:e4:3c:60:51:a5:
ba:a4:aa:be:7d:dd:dd:28:aa:b1:75:3c:3e:61:ab:
ce:2f:e7:f3:8b:50:a6:84:d5:af:46:cf:f9:c6:74:
30:e2:70:50:b0:24:83:ea:0e:ec:dd:41:52:4c:1a:
f1:96:2d:6a:db:e7:e8:d2:15:a1:91:08:9a:5e:f2:
f0:55:c3:39:23:f6:12:7d:e5:1b:d0:c1:77:22:b8:
12:cd:f9:82:0e:9e:e1:34:ad:cb:75:19:68:d4:6f:
bc:dc:9c:da:f3:fe:4a:f2:81:ed:97:69:43:22:c0:
9f:80:dd:1b:b9:d3:09:49:57:5a:cd:a6:8a:64:22:
2a:9f:87:d5:46:b3:20:ae:d8:0e:88:99:36:cb:17:
a1:6b:4a:f2:fc:e2:46:bd:b3:96:4d:06:a6:67:ef:
fb:14:36:55:a4:bc:1e:57:8f:f4:1a:04:1c:7f:fb:
54:d1:68:da:a0:5d:88:eb:e0:37:06:30:11:32:6a:
1f:d3:82:f3:70:b0:5e:27:ea:0f:7d:70:52:c0:5b:
8c:70:a6:21:c1:4e:1b:73:e9:b1:b1:41:8a:ef:0f:
34:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:65:C1:B1:DC:8A:2E:F5:A8:6C:94:BA:50:41:D8:98:6B:70:D3:16
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/OmXBsdyKLvWobJS6UEHYmGtw0xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1fa0::/44
Signature Algorithm: sha256WithRSAEncryption
57:9b:57:2c:19:17:79:e4:24:9d:cd:c5:6b:ce:26:c4:9d:0c:
18:4b:05:48:10:e9:e9:b0:c1:ad:80:3a:e3:9a:79:d9:76:80:
c3:cb:99:2c:6c:ac:12:4d:cd:5f:9f:96:53:b0:3a:ad:d0:c8:
6d:42:9f:26:8b:20:d9:4d:79:89:79:a0:3d:17:c1:b0:a9:c9:
87:2f:44:97:96:9f:5f:6f:c2:cf:5d:33:e0:bf:aa:7b:41:52:
6d:8e:c4:6e:7c:c4:64:52:50:6a:5f:bf:08:b3:7b:f5:12:71:
f7:02:94:7e:d9:0f:94:8e:09:b8:9f:3c:d4:ad:d0:44:19:64:
fb:2e:3f:6f:d8:55:9b:d4:ea:59:23:ff:19:df:e9:2b:05:f5:
09:4c:6e:29:f1:29:76:57:ee:6d:e6:c6:c9:42:f0:cf:97:37:
48:e8:14:a2:0c:16:a8:f5:c6:6a:1c:42:92:9e:7a:a4:18:66:
ac:7b:20:d0:97:9d:06:06:27:24:07:5a:4a:4b:46:b0:5f:90:
b6:13:eb:28:ea:d4:bc:5b:8e:9a:5f:f8:ad:98:0a:c8:1b:19:
60:b4:5d:b0:94:3f:5c:c4:5a:9b:b7:f1:ff:a5:5b:d7:c8:3e:
31:eb:b5:14:6b:2f:a2:c6:b1:3a:6a:42:48:80:fe:c4:e2:56:
0d:6f:9e:8e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ6+hMIB45DfavCila9nmtiNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjYwNjEzMDEwNzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTY1YzFiMWRjOGEyZWY1YTg2Yzk0YmE1MDQxZDg5ODZiNzBkMzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8Io7S6PmgxamYLVKVBZefCDIysR
i+3F09G83pQ+887iQIjac5Ws5DxgUaW6pKq+fd3dKKqxdTw+YavOL+fzi1CmhNWv
Rs/5xnQw4nBQsCSD6g7s3UFSTBrxli1q2+fo0hWhkQiaXvLwVcM5I/YSfeUb0MF3
IrgSzfmCDp7hNK3LdRlo1G+83Jza8/5K8oHtl2lDIsCfgN0budMJSVdazaaKZCIq
n4fVRrMgrtgOiJk2yxeha0ry/OJGvbOWTQamZ+/7FDZVpLweV4/0GgQcf/tU0Wja
oF2I6+A3BjARMmof04LzcLBeJ+oPfXBSwFuMcKYhwU4bc+mxsUGK7w80lwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDplwbHcii71qGyUulBB2JhrcNMWMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvT21YQnNkeUtMdldvYkpTNlVFSFltR3R3MHhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xB+g
MA0GCSqGSIb3DQEBCwUAA4IBAQBXm1csGRd55CSdzcVrzibEnQwYSwVIEOnpsMGt
gDrjmnnZdoDDy5ksbKwSTc1fn5ZTsDqt0MhtQp8miyDZTXmJeaA9F8GwqcmHL0SX
lp9fb8LPXTPgv6p7QVJtjsRufMRkUlBqX78Is3v1EnH3ApR+2Q+Ujgm4nzzUrdBE
GWT7Lj9v2FWb1OpZI/8Z3+krBfUJTG4p8Sl2V+5t5sbJQvDPlzdI6BSiDBao9cZq
HEKSnnqkGGaseyDQl50GBickB1pKS0awX5C2E+so6tS8W46aX/itmArIGxlgtF2w
lD9cxFqbt/H/pVvXyD4x67UUay+ixrE6akJIgP7E4lYNb56O
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:14:50 2026 by rpki-client