Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/oVwFkvdTGoRcoIaCVoJWao9067c.roa
File: oVwFkvdTGoRcoIaCVoJWao9067c.roa (raw, json)
Hash identifier: mNDuB88yYB2a1hk5GC2+5PKmqMUPggl9sv+jUF9m7GA=
Subject key identifier: A1:5C:05:92:F7:53:1A:84:5C:A0:86:82:56:82:56:6A:8F:74:EB:B7
Certificate issuer: /CN=6353829c061a8af26de946fc9e81885c74c174c7
Certificate serial: 01A061BA63AD269CDFA1347B3A475FC53E29
Authority key identifier: 63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/oVwFkvdTGoRcoIaCVoJWao9067c.roa
Signing time: Wed 02 Sep 2026 10:46:40 +0000
ROA not before: Wed 02 Sep 2026 10:46:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60294
IP address blocks: 82.198.64.0/19 maxlen: 19
156.67.160.0/19 maxlen: 19
185.65.192.0/22 maxlen: 22
2a03:1d60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:ba:63:ad:26:9c:df:a1:34:7b:3a:47:5f:c5:3e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6353829c061a8af26de946fc9e81885c74c174c7
Validity
Not Before: Sep 2 10:46:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a15c0592f7531a845ca086825682566a8f74ebb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:94:df:a3:2f:4b:ee:e0:f3:4f:ed:b1:35:
e2:f6:05:81:b4:22:64:c4:39:01:e9:d5:a7:0f:73:
f2:d8:83:c4:ee:44:9e:6d:55:d4:31:28:12:ee:6c:
f8:c7:e8:90:b7:1c:af:7f:c5:32:b9:c1:f3:70:fc:
48:c8:8f:9f:99:01:c8:85:88:78:09:03:f9:2e:3b:
99:a3:89:de:27:ae:8e:f4:cf:9e:9d:12:88:cb:cb:
c9:06:9f:bf:44:47:f4:d7:5c:eb:a3:1a:37:b6:58:
6e:74:1f:e4:e7:9b:72:d4:17:73:28:54:d4:ff:a3:
35:6f:e4:a8:f6:40:5e:6f:5d:77:c5:97:ae:07:b0:
de:de:d2:17:26:c2:39:e4:00:8d:0f:d4:7e:5e:d4:
8a:be:94:ce:eb:d2:6c:14:1c:7f:3c:7f:f8:c9:ba:
a0:90:e3:20:88:62:c6:03:ae:6a:94:5b:64:9d:12:
9d:05:41:87:49:41:dd:3e:84:e8:0a:4b:56:df:b0:
34:14:f8:00:ab:61:5a:3f:fc:f5:93:21:30:c7:1a:
34:79:8e:ee:18:4d:54:c1:d1:90:17:dd:c3:0c:89:
fa:51:8b:63:39:68:6e:98:fb:8c:c2:0d:62:85:ae:
da:7d:be:4d:b4:5b:1d:aa:36:b2:1f:5d:39:3e:80:
9f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5C:05:92:F7:53:1A:84:5C:A0:86:82:56:82:56:6A:8F:74:EB:B7
X509v3 Authority Key Identifier:
keyid:63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/oVwFkvdTGoRcoIaCVoJWao9067c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.198.64.0/19
156.67.160.0/19
185.65.192.0/22
IPv6:
2a03:1d60::/32
Signature Algorithm: sha256WithRSAEncryption
27:4a:9d:a1:dc:f0:4c:8b:09:33:69:ec:ee:f5:06:95:f9:4b:
e7:92:2c:6a:55:47:86:a0:c0:49:6c:d3:1a:a8:c6:4a:e3:1d:
3e:e9:9b:08:d5:e8:49:c8:b2:b3:42:64:3b:12:5d:b8:8d:7b:
85:15:c8:14:42:f5:cc:ed:34:0b:24:38:c2:3d:21:df:3c:bd:
00:bf:7c:0c:f3:73:0e:89:0c:c1:92:69:74:c7:4a:d3:b7:ab:
72:48:ec:78:71:b6:3a:dc:98:e1:0f:1d:31:78:27:b3:8d:9c:
37:02:9c:1d:ec:d0:ad:1d:4e:3b:26:bd:54:5a:fb:c0:ca:fc:
c2:1a:24:17:a8:25:d5:a8:c5:57:ff:e1:72:84:77:fe:c5:14:
45:90:20:e2:8b:9d:ef:8a:92:16:76:00:bf:32:46:5c:e1:62:
6d:d1:3f:ab:22:0e:8d:73:7b:8e:e1:40:37:b8:cc:75:38:6f:
12:38:9b:87:c8:ee:78:27:a2:45:01:9d:b3:db:05:b5:a8:66:
b9:50:da:69:43:98:87:17:77:8a:57:ae:75:10:94:a8:2d:ed:
18:13:a3:da:5b:bc:18:11:a4:d4:22:d0:56:da:34:31:47:a3:
89:b5:98:48:7b:80:54:07:30:84:5c:50:8b:ed:2f:b5:4c:90:
d5:60:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:02:17 2026 by rpki-client