Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/OpgFBnj58YZNhjqrjMPFmcXkMoM.roa
File: OpgFBnj58YZNhjqrjMPFmcXkMoM.roa (raw, json)
Hash identifier: x3izVxL+JnWf1wZ+LfTZxTJhtpQOQ2pahlLAm7S6090=
Subject key identifier: 3A:98:05:06:78:F9:F1:86:4D:86:3A:AB:8C:C3:C5:99:C5:E4:32:83
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019C7D17067B37514A86A1D2DAD1E40DFA1A
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/OpgFBnj58YZNhjqrjMPFmcXkMoM.roa
Signing time: Fri 20 Feb 2026 22:06:26 +0000
ROA not before: Fri 20 Feb 2026 22:06:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215030
IP address blocks: 2a10:fa82:f200::/40 maxlen: 40
2a10:fa82:f210::/44 maxlen: 44
2a10:fa82:f220::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7d:17:06:7b:37:51:4a:86:a1:d2:da:d1:e4:0d:fa:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Feb 20 22:06:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a98050678f9f1864d863aab8cc3c599c5e43283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:f2:3e:d8:1d:75:99:65:8a:c5:1e:19:a9:
4d:1d:9d:f4:65:f9:64:3b:1f:85:c5:d3:1e:9e:8a:
a4:69:10:58:5c:6e:b9:5a:78:b5:94:30:b3:5c:b4:
36:fb:0f:f9:01:46:d9:15:e3:52:14:fd:9b:00:d2:
02:83:0b:d2:82:d4:93:c1:48:92:4a:ff:da:93:99:
1c:04:5c:cb:c8:0d:8d:17:e5:ee:77:98:19:2b:33:
77:8a:1d:2f:00:06:bb:2a:4e:fe:a5:e1:ba:7c:17:
24:82:55:e4:36:b5:ca:79:5f:20:af:23:0d:1b:a5:
1d:a7:24:d5:30:fd:40:a6:0e:22:b7:57:ac:2c:65:
79:e2:67:cd:5d:ae:ab:d2:35:4d:04:ee:fe:97:92:
9b:cf:0c:b3:fa:b3:e2:d9:eb:9e:57:ae:f9:d5:cb:
6d:04:c5:89:98:90:87:d7:ed:44:26:cf:97:68:f0:
66:d7:12:2d:eb:2a:f8:e1:63:c4:62:8e:7e:ca:78:
52:dd:11:1e:fa:11:5e:3a:a1:7f:9b:44:b2:63:97:
6d:3e:4a:4d:b1:30:2f:30:31:d6:b9:b2:85:6e:07:
1d:79:ae:5e:f7:ef:fe:15:45:1b:04:e9:f6:dc:28:
fe:8d:d9:c0:3f:60:76:03:93:5b:0e:c5:8b:89:a2:
a7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:98:05:06:78:F9:F1:86:4D:86:3A:AB:8C:C3:C5:99:C5:E4:32:83
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/OpgFBnj58YZNhjqrjMPFmcXkMoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa82:f200::/40
Signature Algorithm: sha256WithRSAEncryption
66:b2:c3:9c:f6:cd:2e:98:f0:14:f4:f9:8c:93:24:29:34:d7:
e6:37:fa:bc:2f:49:47:3b:c6:93:5e:e3:a9:07:86:52:6c:43:
7a:a7:51:f2:c2:e6:9d:31:eb:ad:3f:e8:ab:6c:c5:c7:ee:71:
bb:13:42:67:94:09:ce:d7:1d:3b:32:46:85:a5:fb:ee:db:fa:
b2:80:12:a1:e5:92:44:1e:51:93:6d:9f:a3:d8:ea:8c:a8:23:
df:94:4f:4e:23:b5:88:3b:43:dc:5c:1c:0d:9f:b3:78:91:04:
ac:c0:a5:52:d1:60:0c:18:0c:ca:3a:6c:ad:d5:a2:6a:1d:af:
3d:65:fa:81:95:45:d3:29:99:2b:08:4c:52:ca:c4:a2:04:03:
8c:3b:e2:64:ef:d7:d7:36:c0:83:10:54:9d:2c:5b:6d:87:52:
3c:f4:31:2f:c3:f3:40:a9:c0:7b:86:5b:87:05:bf:0d:da:d2:
99:37:b9:06:83:3b:05:6c:ec:b3:0e:4b:e2:03:9c:b2:b1:cb:
45:85:81:c2:2d:96:06:03:a8:ee:08:7a:7f:30:c6:b8:89:aa:
c4:c4:d9:dd:53:47:8f:62:f3:c6:bc:49:cf:4b:40:f6:e2:25:
77:d8:ae:d6:62:7b:3a:a7:c5:11:5d:9d:cd:36:83:04:d4:23:
5e:6d:04:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:06:36 2026 by rpki-client