Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/oGtomrkF_2guRZRNgunVvIHZqKU.roa
File: oGtomrkF_2guRZRNgunVvIHZqKU.roa (raw, json)
Hash identifier: DPK5ezMhNr3aTF5oM42oIZQ2I35fhnQu6u3RGRoCSH0=
Subject key identifier: A0:6B:68:9A:B9:05:FF:68:2E:45:94:4D:82:E9:D5:BC:81:D9:A8:A5
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 019C94D44BD0CABD90ABFC6C436B305957B9
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/oGtomrkF_2guRZRNgunVvIHZqKU.roa
Signing time: Wed 25 Feb 2026 12:44:26 +0000
ROA not before: Wed 25 Feb 2026 12:44:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2a14:ae00:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:d4:4b:d0:ca:bd:90:ab:fc:6c:43:6b:30:59:57:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Feb 25 12:44:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a06b689ab905ff682e45944d82e9d5bc81d9a8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:90:ee:9d:77:39:3c:02:0d:cf:83:63:52:
68:e4:75:58:ba:78:74:87:d1:ea:41:29:f7:ad:97:
1e:0a:2c:e1:46:57:1c:a7:e3:34:5c:6d:85:e6:f7:
ad:8c:87:19:03:e8:11:fe:b2:e7:ac:d8:59:10:ce:
89:41:8d:ee:0d:ac:9b:f2:9d:c2:a3:f7:cd:2c:cf:
cb:5a:d4:2a:2f:ae:ee:46:c8:dd:f4:6c:d6:6a:d0:
9f:eb:a8:31:5c:9a:18:a6:b5:9e:38:ea:8b:9f:60:
d9:98:21:2d:34:b1:20:de:14:15:d6:21:39:c1:31:
07:e2:d3:ce:13:8a:83:7e:f1:fb:17:53:4e:b3:a3:
75:88:b3:aa:aa:4d:92:65:7d:48:11:84:71:47:4b:
b0:b0:c2:f0:0f:ec:ce:27:44:0e:68:30:dc:73:8b:
fd:91:aa:ba:59:0c:49:c9:2f:44:90:46:b2:a0:76:
55:53:4a:c0:18:ab:25:f3:af:df:e6:c5:27:62:ad:
6b:3b:ed:1a:21:03:59:0e:b0:35:31:1f:4e:2d:f5:
8b:66:bc:86:80:7b:c4:12:e0:c8:c1:5d:69:0e:14:
07:46:b1:7f:9d:19:35:6d:3b:78:7e:a2:30:f7:d7:
ea:82:fe:a1:80:02:c1:56:2a:6a:6f:a0:c8:55:f4:
fc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6B:68:9A:B9:05:FF:68:2E:45:94:4D:82:E9:D5:BC:81:D9:A8:A5
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/oGtomrkF_2guRZRNgunVvIHZqKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:d::/48
Signature Algorithm: sha256WithRSAEncryption
08:4a:a7:3c:96:71:47:18:fd:ee:83:59:42:9f:60:29:0f:02:
ff:9b:29:b3:bf:73:36:c8:ee:96:c3:e2:29:a7:02:68:7e:0a:
56:41:7d:f4:93:92:6e:a3:2e:9f:4c:e1:0f:22:f4:d9:83:67:
d9:f5:83:4c:00:59:e8:90:60:1d:50:07:26:a4:b0:fa:c5:fb:
ae:53:11:e4:a8:e3:4b:50:6f:97:fa:4a:a9:e0:1a:d3:cc:8f:
7d:4d:14:1f:dd:80:ae:ee:62:b9:e2:c7:0d:bf:70:77:b9:06:
ff:92:d7:3d:14:b5:9d:63:81:d1:ac:52:5c:d1:64:2e:bc:6a:
61:f9:b0:d4:ff:18:e9:08:fb:ca:d2:47:eb:1a:ef:bc:63:51:
ad:7f:71:ac:bf:d7:08:2c:17:65:98:a5:d0:92:74:92:9f:73:
94:48:1b:ea:11:5b:19:03:71:4c:2b:16:f6:ee:0b:fb:66:6c:
5d:ca:06:bf:36:d3:80:f6:83:8a:92:eb:a8:c6:70:a5:88:5a:
0f:f6:cc:21:0c:a7:37:62:79:c0:55:00:5a:81:33:5f:f0:74:
0c:72:78:64:34:a9:2f:c0:8e:6d:4d:cf:18:b7:8b:2e:db:8d:
92:70:8c:9d:4f:72:0e:e9:79:ca:52:a7:54:63:bf:33:fb:11:
e2:a6:48:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:42:27 2026 by rpki-client