Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9e416a-d130-4bd6-9831-f58901935583/1/OcaazuknVVv9htjLqCkiw8gaASk.roa
File: OcaazuknVVv9htjLqCkiw8gaASk.roa (raw, json)
Hash identifier: VSsbIorgM5fhcWj7NGAVqkb5NSM/UyATlQFN+0x+Xqs=
Subject key identifier: 39:C6:9A:CE:E9:27:55:5B:FD:86:D8:CB:A8:29:22:C3:C8:1A:01:29
Certificate issuer: /CN=13da8f1f761d6f8e14ff061cfab5050b873f4a07
Certificate serial: 019E5DECBDE5ADE4C1F6D1E4169E9A67D08D
Authority key identifier: 13:DA:8F:1F:76:1D:6F:8E:14:FF:06:1C:FA:B5:05:0B:87:3F:4A:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9qPH3Ydb44U_wYc-rUFC4c_Sgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9e416a-d130-4bd6-9831-f58901935583/1/OcaazuknVVv9htjLqCkiw8gaASk.roa
Signing time: Mon 25 May 2026 06:57:36 +0000
ROA not before: Mon 25 May 2026 06:57:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60132
IP address blocks: 2.58.120.0/22 maxlen: 24
2a09:e540::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/9e416a-d130-4bd6-9831-f58901935583/1/E9qPH3Ydb44U_wYc-rUFC4c_Sgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/9e416a-d130-4bd6-9831-f58901935583/1/E9qPH3Ydb44U_wYc-rUFC4c_Sgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9qPH3Ydb44U_wYc-rUFC4c_Sgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5d:ec:bd:e5:ad:e4:c1:f6:d1:e4:16:9e:9a:67:d0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13da8f1f761d6f8e14ff061cfab5050b873f4a07
Validity
Not Before: May 25 06:57:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39c69acee927555bfd86d8cba82922c3c81a0129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:19:71:b9:dc:94:f7:a4:1b:fe:9e:b6:20:
ff:af:aa:81:2f:d0:0e:a0:c9:c0:50:d3:a0:a0:ea:
55:f2:fb:34:c6:90:f9:52:11:a5:b1:a5:c2:65:3f:
5b:32:79:62:a3:ec:56:fb:78:94:c0:aa:0d:47:89:
fc:5c:71:b7:7c:f5:29:fc:f4:e4:f4:bc:5a:8f:02:
82:85:22:82:c9:f0:19:f9:6a:aa:19:80:e7:6a:43:
fb:f6:c4:fc:65:de:ab:f7:ec:8f:a9:fa:10:27:b2:
7b:bc:0c:5b:b3:f0:09:e7:58:49:13:c6:6d:30:2a:
3e:86:99:74:a4:79:f9:ae:ca:21:18:56:94:9d:25:
ff:96:38:ca:d5:98:16:46:36:40:3b:1e:8d:74:f5:
60:40:2d:27:24:aa:ce:f5:b2:2b:21:8a:97:13:91:
d5:aa:d4:88:3e:94:7f:a1:59:26:52:73:11:3d:d4:
d0:52:f9:f6:47:3a:de:31:3d:9b:47:37:d3:92:cf:
e7:17:ed:e8:14:30:b3:72:52:d6:a8:f3:7c:2d:9e:
c5:a2:80:cc:ff:80:ad:77:37:62:f4:0e:49:94:2a:
e3:e0:ea:04:d0:9f:41:df:52:0f:bc:fe:ed:f3:76:
e4:17:67:3d:d2:46:fe:6b:e9:bf:7e:6d:0b:14:39:
74:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C6:9A:CE:E9:27:55:5B:FD:86:D8:CB:A8:29:22:C3:C8:1A:01:29
X509v3 Authority Key Identifier:
keyid:13:DA:8F:1F:76:1D:6F:8E:14:FF:06:1C:FA:B5:05:0B:87:3F:4A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9qPH3Ydb44U_wYc-rUFC4c_Sgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9e416a-d130-4bd6-9831-f58901935583/1/OcaazuknVVv9htjLqCkiw8gaASk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9e416a-d130-4bd6-9831-f58901935583/1/E9qPH3Ydb44U_wYc-rUFC4c_Sgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.120.0/22
IPv6:
2a09:e540::/29
Signature Algorithm: sha256WithRSAEncryption
2d:67:47:1c:5c:f4:c0:b2:c4:b8:ab:68:61:fc:6a:05:d9:f8:
3c:a2:b6:b3:c0:ac:98:b4:57:5b:2a:8c:60:24:a8:9a:28:4b:
2f:3d:0f:ee:3f:51:13:28:29:65:e8:b9:88:38:e6:b6:f4:39:
b3:b5:2c:7f:6d:3b:cc:e5:29:24:f3:9f:33:7b:c6:ca:d9:05:
35:c9:a8:84:13:46:19:21:42:20:12:16:e0:e5:40:d7:34:eb:
4b:34:bd:ff:30:56:82:20:7a:e3:38:0d:1f:6a:3e:95:4e:eb:
2d:1d:a5:b2:81:81:e7:9f:ed:22:6d:38:49:9d:35:96:2d:8f:
51:75:15:9e:f4:e5:80:e1:3f:a2:21:bf:82:07:7d:14:e0:2c:
c2:c5:92:f7:2a:60:59:17:22:33:1a:e7:13:d5:fc:67:38:67:
19:34:d8:f4:47:e9:8b:b1:bc:15:83:62:a8:da:59:d9:61:c3:
b0:2c:2e:e5:aa:ba:a3:59:7d:12:05:38:97:be:bc:58:6c:a8:
6d:c9:d2:bd:3c:89:68:91:2d:90:c0:87:b4:7f:42:f0:62:01:
ff:d7:df:79:5a:ff:4f:c9:d2:51:95:23:2a:a6:e3:9d:c7:39:
34:6c:ea:51:9e:49:f8:87:f0:af:42:a7:fe:85:35:62:b7:d7:
ab:91:73:95
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ5d7L3lreTB9tHkFp6aZ9CNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZGE4ZjFmNzYxZDZmOGUxNGZmMDYxY2ZhYjUwNTBiODcz
ZjRhMDcwHhcNMjYwNTI1MDY1NzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWM2OWFjZWU5Mjc1NTViZmQ4NmQ4Y2JhODI5MjJjM2M4MWEwMTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYsZcbnclPekG/6etiD/r6qBL9AO
oMnAUNOgoOpV8vs0xpD5UhGlsaXCZT9bMnlio+xW+3iUwKoNR4n8XHG3fPUp/PTk
9LxajwKChSKCyfAZ+WqqGYDnakP79sT8Zd6r9+yPqfoQJ7J7vAxbs/AJ51hJE8Zt
MCo+hpl0pHn5rsohGFaUnSX/ljjK1ZgWRjZAOx6NdPVgQC0nJKrO9bIrIYqXE5HV
qtSIPpR/oVkmUnMRPdTQUvn2RzreMT2bRzfTks/nF+3oFDCzclLWqPN8LZ7FooDM
/4Ctdzdi9A5JlCrj4OoE0J9B31IPvP7t83bkF2c90kb+a+m/fm0LFDl0CQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDnGms7pJ1Vb/YbYy6gpIsPIGgEpMB8GA1UdIwQY
MBaAFBPajx92HW+OFP8GHPq1BQuHP0oHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTlxUEgzWWRiNDRVX3dZYy1yVUZDNGNfU2djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85ZTQxNmEtZDEzMC00YmQ2LTk4MzEt
ZjU4OTAxOTM1NTgzLzEvT2NhYXp1a25WVnY5aHRqTHFDa2l3OGdhQVNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC85ZTQxNmEtZDEzMC00YmQ2LTk4MzEtZjU4OTAxOTM1NTgz
LzEvRTlxUEgzWWRiNDRVX3dZYy1yVUZDNGNfU2djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCAjp4MA0E
AgACMAcDBQMqCeVAMA0GCSqGSIb3DQEBCwUAA4IBAQAtZ0ccXPTAssS4q2hh/GoF
2fg8orazwKyYtFdbKoxgJKiaKEsvPQ/uP1ETKCll6LmIOOa29DmztSx/bTvM5Skk
858ze8bK2QU1yaiEE0YZIUIgEhbg5UDXNOtLNL3/MFaCIHrjOA0faj6VTustHaWy
gYHnn+0ibThJnTWWLY9RdRWe9OWA4T+iIb+CB30U4CzCxZL3KmBZFyIzGucT1fxn
OGcZNNj0R+mLsbwVg2Ko2lnZYcOwLC7lqrqjWX0SBTiXvrxYbKhtydK9PIlokS2Q
wIe0f0LwYgH/1995Wv9PydJRlSMqpuOdxzk0bOpRnkn4h/CvQqf+hTVit9erkXOV
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:58 2026 by rpki-client