Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/OvQCPbU7xaexN6KNG98gTxBlPZ8.roa
File: OvQCPbU7xaexN6KNG98gTxBlPZ8.roa (raw, json)
Hash identifier: B+7vMRgtRKWIYiyObWJnR9TPAurOqhLva4J/rVDJQSQ=
Subject key identifier: 3A:F4:02:3D:B5:3B:C5:A7:B1:37:A2:8D:1B:DF:20:4F:10:65:3D:9F
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019C2A566D67980083A7BFF877D2A994369E
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/OvQCPbU7xaexN6KNG98gTxBlPZ8.roa
Signing time: Wed 04 Feb 2026 20:27:12 +0000
ROA not before: Wed 04 Feb 2026 20:27:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214024
IP address blocks: 88.80.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2a:56:6d:67:98:00:83:a7:bf:f8:77:d2:a9:94:36:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Feb 4 20:27:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3af4023db53bc5a7b137a28d1bdf204f10653d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f9:ee:a8:93:a1:25:e8:2c:ab:d8:b1:8c:05:
be:20:71:1a:e6:d0:0b:26:ee:86:a6:ce:31:7c:b5:
55:78:80:27:12:c9:72:ef:15:10:f0:cd:21:33:0f:
27:9a:0e:de:e6:90:7b:ac:22:58:36:44:93:34:a8:
86:8a:3c:a0:9d:a7:fa:c6:86:b9:6b:e6:bd:6c:ae:
f2:3b:52:d4:dc:73:05:e5:af:44:85:95:c8:fa:08:
27:80:a2:17:2b:1a:17:af:be:bf:e1:b3:ec:21:98:
28:a1:07:5b:04:b2:0a:69:63:81:72:a1:40:56:9b:
d0:29:3a:04:88:56:7f:69:bc:e9:91:0e:8f:76:f4:
a9:2c:57:eb:85:4f:7b:c1:b8:10:19:87:58:50:94:
4a:3b:51:1e:3c:35:84:35:1d:cc:d8:fe:08:b3:90:
ac:dd:67:ca:0b:ff:2a:aa:8a:24:0d:61:e8:7f:19:
69:c0:23:7d:4b:0d:6a:75:3d:3b:6e:d6:47:a3:ed:
a1:ee:ef:f5:69:60:54:bb:4b:aa:46:64:7b:8a:04:
89:9c:80:5f:b7:ac:dd:06:bc:a3:15:22:61:77:ab:
b4:79:c5:8a:88:96:a7:09:17:e2:41:ee:73:67:28:
c1:af:5c:a2:aa:7c:f1:af:88:b5:98:17:04:25:72:
6c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F4:02:3D:B5:3B:C5:A7:B1:37:A2:8D:1B:DF:20:4F:10:65:3D:9F
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/OvQCPbU7xaexN6KNG98gTxBlPZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.137.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:21:a2:ef:25:52:6f:46:fd:a8:49:de:bd:5f:a8:9f:e3:2d:
05:21:11:1c:c2:98:15:85:87:3c:3d:ae:5f:89:33:ce:21:cd:
67:ac:5c:75:14:e7:4a:ba:e1:cf:cd:39:1b:61:7c:67:86:95:
2c:59:c5:90:48:e9:5d:76:97:55:6d:ac:00:13:92:da:22:8b:
95:68:7e:44:71:cb:09:f7:33:f0:9b:82:b8:b4:02:78:61:bb:
48:2d:3f:b1:87:5f:d5:9b:a5:85:c0:2f:9b:91:d8:2b:8a:e3:
81:81:23:7d:fe:60:a4:b9:97:73:df:57:39:70:a0:65:1f:f0:
92:06:5e:51:14:bf:b6:ee:29:20:93:b2:50:8c:09:f0:ad:c4:
d1:f8:aa:79:e1:3a:40:af:2d:2b:8c:d7:cd:8d:cf:c6:78:8a:
b9:8f:b1:59:4d:85:e2:3d:38:56:4c:8d:56:15:fa:23:33:ec:
0f:9f:27:09:7d:fe:c7:4e:0c:72:2f:85:67:91:1e:fc:5e:e9:
64:d5:44:16:53:25:bc:c1:69:29:9b:e5:a5:0b:16:8f:8d:db:
6f:24:da:f8:52:3a:64:d4:a0:d0:9b:bb:6a:52:53:f1:1a:45:
0b:a6:80:c5:d8:c7:5f:73:ae:56:e1:4f:e7:d8:0e:e2:ab:21:
c8:4f:3c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:45:02 2026 by rpki-client