Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/oveUA1uBv2ehHsokfHtBlO5t1OM.roa
File: oveUA1uBv2ehHsokfHtBlO5t1OM.roa (raw, json)
Hash identifier: qHYZMnXE/ptQNsblCotL5I56Q3u2k4i1sIRc61QdOc4=
Subject key identifier: A2:F7:94:03:5B:81:BF:67:A1:1E:CA:24:7C:7B:41:94:EE:6D:D4:E3
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 019D4A5B88B93BEAFE1854108C0EA4EDE086
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/oveUA1uBv2ehHsokfHtBlO5t1OM.roa
Signing time: Wed 01 Apr 2026 18:43:25 +0000
ROA not before: Wed 01 Apr 2026 18:43:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 91.236.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4a:5b:88:b9:3b:ea:fe:18:54:10:8c:0e:a4:ed:e0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: Apr 1 18:43:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2f794035b81bf67a11eca247c7b4194ee6dd4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e9:d7:88:32:6a:6b:e3:83:1e:77:15:22:7a:
18:ee:5d:3e:0f:04:8d:c2:9f:55:c2:6e:3d:44:2f:
d4:8c:b6:22:45:c4:e4:3e:73:6f:2f:91:15:a2:79:
d3:63:2a:5d:8c:8c:f9:d2:81:df:f8:6d:bf:c9:82:
04:fe:65:4d:2a:47:94:6d:a6:99:25:1a:47:dd:c7:
99:1c:cf:e3:43:b9:e1:08:59:d9:39:6e:f9:2c:09:
32:15:6e:c8:12:8b:37:eb:9a:dc:e7:6d:26:39:8b:
2e:df:ad:89:ba:39:d8:84:c0:cd:aa:f5:ea:2d:82:
31:6e:e9:bd:e9:37:5d:4a:3e:cc:7b:0b:53:3c:49:
14:62:b8:b5:2c:87:70:fe:75:c6:4f:fa:95:45:69:
00:c5:6a:ea:9e:60:6a:47:00:e1:35:ad:56:ed:5f:
78:23:64:3b:73:a9:5a:41:ed:3e:7e:5c:61:cd:7e:
a2:36:3b:f1:d8:79:f5:92:1b:1b:aa:09:c2:39:15:
d6:cf:ee:1c:66:a6:60:fd:98:91:35:ca:c1:2a:1f:
90:9e:bb:4a:45:f8:36:0d:89:5e:b4:59:5e:dd:bc:
b9:16:9f:66:34:0e:be:46:dc:4d:7e:1c:4b:16:05:
c4:7e:8e:7e:bd:1b:ba:0e:f7:c9:cb:a4:fe:68:8c:
2c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F7:94:03:5B:81:BF:67:A1:1E:CA:24:7C:7B:41:94:EE:6D:D4:E3
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/oveUA1uBv2ehHsokfHtBlO5t1OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.186.0/24
Signature Algorithm: sha256WithRSAEncryption
28:2f:e8:dd:ab:1c:e7:cb:69:60:c0:1c:f9:c7:f7:12:95:a6:
95:2f:83:25:df:06:26:c7:69:20:ca:74:a6:0a:e6:93:f4:af:
64:09:c0:7c:d2:cb:83:c4:ae:21:67:86:51:b8:3d:eb:e5:3b:
58:ec:ee:59:b7:ba:5b:b6:33:f1:0e:da:70:08:a0:4f:c3:2e:
3a:f4:46:7b:17:5f:68:fd:d1:e8:52:49:04:00:7e:93:82:b3:
e7:8b:47:54:9d:11:ba:27:df:da:d8:43:4e:77:51:b5:f4:03:
5b:38:e9:45:9c:67:f1:d9:55:f5:19:de:fc:d7:ff:46:84:c9:
48:5c:e2:e5:6f:80:0c:04:ea:71:11:77:a0:14:36:85:bb:75:
6d:27:73:6c:a8:b0:b8:16:e7:0b:51:af:98:d3:ba:64:26:57:
5d:94:54:21:96:9d:fe:e7:35:6a:72:8f:44:70:93:ae:72:87:
7e:3a:d6:1e:bd:28:e5:28:87:34:ec:a3:d3:01:9d:60:ad:45:
63:64:e2:d8:f2:65:84:8a:7e:60:ef:cb:f1:ad:d4:8d:5a:b2:
dc:0d:a3:a0:33:f6:4b:c8:79:29:13:e0:f4:28:1a:17:e7:2b:
0f:ea:b7:1a:7e:66:6e:00:ec:7e:cf:d3:e4:c3:12:2a:72:c4:
45:bd:78:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:13:45 2026 by rpki-client