Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/OyjkYccu_CLKgxrEV7g_bFW-ous.roa
File: OyjkYccu_CLKgxrEV7g_bFW-ous.roa (raw, json)
Hash identifier: /S7gHpDK0DxMjnQ0e8Y2GVl3yAnFF9lshq6UILw6034=
Subject key identifier: 3B:28:E4:61:C7:2E:FC:22:CA:83:1A:C4:57:B8:3F:6C:55:BE:A2:EB
Certificate issuer: /CN=754efd81b4ee91478028ae35a414f46a91bd2fee
Certificate serial: 019FD6B8F8ACAA329FC835321181B33DEA9C
Authority key identifier: 75:4E:FD:81:B4:EE:91:47:80:28:AE:35:A4:14:F4:6A:91:BD:2F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dU79gbTukUeAKK41pBT0apG9L-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/OyjkYccu_CLKgxrEV7g_bFW-ous.roa
Signing time: Thu 06 Aug 2026 10:57:54 +0000
ROA not before: Thu 06 Aug 2026 10:57:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 766
IP address blocks: 150.244.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/dU79gbTukUeAKK41pBT0apG9L-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/dU79gbTukUeAKK41pBT0apG9L-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dU79gbTukUeAKK41pBT0apG9L-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:b8:f8:ac:aa:32:9f:c8:35:32:11:81:b3:3d:ea:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=754efd81b4ee91478028ae35a414f46a91bd2fee
Validity
Not Before: Aug 6 10:57:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b28e461c72efc22ca831ac457b83f6c55bea2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f7:98:65:76:1e:3f:7b:ef:60:ea:ac:6c:45:
21:48:be:b3:19:48:55:92:98:eb:d7:36:c4:8d:ac:
6d:60:38:e4:d6:42:f1:a0:63:50:31:b4:91:fb:ff:
ff:62:9c:cb:dd:ce:67:69:07:4f:98:cc:d6:0e:e8:
84:60:01:3e:8b:95:7d:e2:ca:b1:84:8c:10:73:7f:
ce:af:dd:e6:71:d1:80:96:8e:ab:aa:42:5e:39:b5:
d8:e5:aa:68:57:64:6d:fc:81:9e:bb:8c:e6:f7:92:
bf:40:00:bf:69:c7:9b:80:d7:77:7d:ef:38:6a:45:
38:77:df:e8:d1:8a:78:c6:5f:ff:e4:18:3a:f3:3c:
a9:07:e4:c0:d0:61:c6:20:f0:54:93:1b:20:dd:73:
56:67:f6:7f:2f:a5:62:6f:6c:e2:4e:8c:c2:92:62:
8f:67:68:b8:cb:50:33:8a:24:9e:45:b9:29:0d:b5:
62:59:18:9a:89:51:45:ea:f1:31:44:8a:0e:35:ec:
3a:07:87:4b:87:99:ba:22:b6:15:ad:7a:93:15:76:
b1:d6:cc:32:3b:79:2c:3e:cb:3f:89:c6:32:1d:5d:
77:a1:45:c8:65:58:f2:97:22:39:9b:b4:dc:5f:e9:
de:e8:01:a4:ca:28:d1:50:b3:be:41:3c:32:c0:e7:
d6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:28:E4:61:C7:2E:FC:22:CA:83:1A:C4:57:B8:3F:6C:55:BE:A2:EB
X509v3 Authority Key Identifier:
keyid:75:4E:FD:81:B4:EE:91:47:80:28:AE:35:A4:14:F4:6A:91:BD:2F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dU79gbTukUeAKK41pBT0apG9L-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/OyjkYccu_CLKgxrEV7g_bFW-ous.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/dU79gbTukUeAKK41pBT0apG9L-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.244.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:8c:64:9e:3e:a8:b6:5a:d6:9c:40:f5:49:5d:30:33:68:33:
d7:79:b9:d6:49:04:b7:d8:34:37:8d:3a:d8:74:e7:7d:ad:ac:
f4:58:8a:62:b4:0e:08:b6:a3:80:21:1f:72:5c:e8:0f:13:c4:
94:01:e8:40:a2:2b:8b:ab:a6:41:51:d2:01:98:0e:65:97:b4:
71:d7:27:cf:ce:57:3d:15:c8:2d:28:a9:ec:39:8e:20:dc:93:
1f:36:cc:11:50:62:d1:e6:13:cb:e7:f8:52:10:9a:b1:a0:1a:
12:ba:9a:fc:b0:e9:56:35:84:40:02:91:be:ab:66:77:ac:59:
3b:29:72:a5:76:4c:ad:41:63:c7:43:27:d5:04:14:c3:00:92:
e4:28:48:85:27:6a:86:e2:61:2a:4d:77:46:6d:d4:84:d6:55:
a0:56:38:cd:d0:53:cb:77:db:db:ca:b0:8f:e8:92:3c:1b:f8:
76:60:b5:3b:d7:98:1b:7e:08:00:17:8b:1a:09:82:32:17:f1:
45:6e:5b:ce:bb:35:66:e3:ec:cf:92:b6:9b:5c:1b:b8:0b:ed:
c3:03:34:ef:ad:21:a2:66:29:d3:c6:4e:4b:12:26:6d:75:99:
af:bd:03:b3:b1:36:d9:38:38:eb:75:2a:a5:f8:f2:b8:eb:89:
4a:87:51:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:36:16 2026 by rpki-client