Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/OvLceknpF7Ust4dohXHWTvFfxXQ.roa
File: OvLceknpF7Ust4dohXHWTvFfxXQ.roa (raw, json)
Hash identifier: MU6UFaguqe6PrH6/Uy9nW9MU7YtJmW+UWWM7KB2psMM=
Subject key identifier: 3A:F2:DC:7A:49:E9:17:B5:2C:B7:87:68:85:71:D6:4E:F1:5F:C5:74
Certificate issuer: /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Certificate serial: 01A0620C7AB01E5BA25A5B6171F682F39944
Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/OvLceknpF7Ust4dohXHWTvFfxXQ.roa
Signing time: Wed 02 Sep 2026 12:16:20 +0000
ROA not before: Wed 02 Sep 2026 12:16:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200632
IP address blocks: 195.242.0.0/23 maxlen: 24
2a13:5940::/32 maxlen: 32
2a13:5943:20::/44 maxlen: 44
2a13:5947:133::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:0c:7a:b0:1e:5b:a2:5a:5b:61:71:f6:82:f3:99:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Validity
Not Before: Sep 2 12:16:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3af2dc7a49e917b52cb787688571d64ef15fc574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:60:a4:29:88:24:f2:ae:3b:34:e6:79:a7:
ef:22:d1:64:a5:cd:f6:53:fe:c6:84:3d:0c:a8:7b:
1f:1d:64:4a:59:2f:f6:30:92:88:a8:bc:fd:f6:fe:
e6:22:1a:52:7d:75:4b:ce:62:5a:82:74:28:b7:c1:
f5:ca:74:33:6f:e6:b0:79:76:31:b1:42:db:33:e4:
22:4a:64:d2:2e:d0:50:37:cc:09:d0:d4:d7:d8:3e:
eb:4b:d9:87:e4:8b:7b:cb:53:5d:d4:dd:22:7b:d6:
8f:0f:16:62:ca:ce:df:be:79:47:3c:e9:7a:8e:79:
e3:ed:fc:e3:be:e6:02:a0:29:fd:45:a7:90:e1:13:
d5:9b:39:81:73:45:b1:0b:1e:22:38:3c:33:5f:c7:
b9:e2:21:9d:72:5c:3e:d3:49:80:95:f6:b3:c7:93:
77:91:3e:66:ca:0b:b0:e4:d5:c7:46:7a:0a:f3:17:
38:49:f1:d0:c7:59:45:05:ec:ce:6f:6c:7c:0b:f0:
b1:26:8b:09:bd:cf:9b:79:52:0e:e8:4f:45:54:00:
d6:f5:0b:56:bb:91:6d:8e:ca:a6:fd:0d:ef:79:36:
ba:15:c5:41:aa:0d:4e:96:e9:4e:32:0c:b0:ac:9b:
2e:a9:61:e7:08:6e:f7:cf:66:5e:87:b9:8e:b5:5c:
86:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F2:DC:7A:49:E9:17:B5:2C:B7:87:68:85:71:D6:4E:F1:5F:C5:74
X509v3 Authority Key Identifier:
keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/OvLceknpF7Ust4dohXHWTvFfxXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.0.0/23
IPv6:
2a13:5940::/32
2a13:5943:20::/44
2a13:5947:133::/48
Signature Algorithm: sha256WithRSAEncryption
08:20:be:47:10:f0:5c:3b:d2:8f:94:93:ec:5c:f6:fd:d1:8f:
fa:1a:52:b7:90:03:4b:fd:93:26:83:ba:82:05:67:4c:ea:de:
37:ae:e9:78:95:1a:d2:ec:95:0d:3f:93:e5:fe:8c:d2:ae:41:
4c:d6:e3:12:5e:a5:fe:75:43:ff:4e:96:30:47:96:f3:1d:e4:
b5:57:d9:0c:56:89:9c:ec:c3:7e:17:0d:f9:2c:6c:d1:72:14:
32:19:8d:cc:67:11:57:ce:a1:2c:b8:bc:3f:0e:fc:bc:24:94:
19:de:de:a8:2a:ad:9b:5b:8d:de:98:ee:42:48:d0:dd:6f:a0:
10:ba:27:a2:f5:ec:16:95:76:82:b8:28:d0:cf:0c:f3:96:6c:
24:d5:50:a9:39:de:1e:fd:15:8a:7b:8a:18:29:d0:74:b3:9c:
c8:53:c5:4d:e3:d5:69:fc:08:16:d8:36:40:85:df:b5:ec:92:
44:60:fe:92:32:86:48:44:d4:0a:7e:09:ad:2a:da:16:87:3e:
2e:44:66:18:0a:04:6b:76:0e:54:99:26:d4:c0:06:3d:3d:80:
7c:1f:22:98:b7:a7:31:25:1a:92:ab:c6:e2:e7:65:ea:1e:a0:
38:b4:ba:67:c4:4b:90:e3:4c:74:ab:60:d8:3d:42:1a:fc:ee:
f8:cf:f3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:49:09 2026 by rpki-client