Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/OzQYkhg3U6SPEppTB5KeCir3I54.roa
File: OzQYkhg3U6SPEppTB5KeCir3I54.roa (raw, json)
Hash identifier: pkZLPVt0U4vONG6pCB0IupbzzE3+kAThVfHoxE9CIfo=
Subject key identifier: 3B:34:18:92:18:37:53:A4:8F:12:9A:53:07:92:9E:0A:2A:F7:23:9E
Certificate issuer: /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Certificate serial: 019E6E35E8B02799D06B65DB40AC96811420
Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/OzQYkhg3U6SPEppTB5KeCir3I54.roa
Signing time: Thu 28 May 2026 10:51:26 +0000
ROA not before: Thu 28 May 2026 10:51:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21105
IP address blocks: 193.8.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:35:e8:b0:27:99:d0:6b:65:db:40:ac:96:81:14:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Validity
Not Before: May 28 10:51:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b341892183753a48f129a5307929e0a2af7239e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:73:e3:e5:2c:33:99:2f:5f:03:3f:9f:3c:03:
fd:61:e2:50:dc:51:ce:81:0e:3c:68:c6:45:0f:69:
f9:15:9f:89:8c:87:1a:33:61:49:58:72:dd:a1:23:
a6:a1:f0:fd:2d:9c:36:d7:52:e5:6e:c4:08:be:3c:
5c:e4:69:09:e7:03:12:a8:73:89:29:b0:b5:f9:c0:
57:3e:94:6e:70:8e:3b:ad:5e:18:ff:ef:8d:92:74:
f1:14:b2:f9:f5:bb:f1:ea:08:93:c8:44:d3:df:74:
c0:c7:e0:e5:a4:95:bc:dc:5e:f7:69:79:1f:5c:8b:
13:bf:47:18:d9:a6:89:d4:e5:e2:4f:83:91:9a:5a:
4d:fd:b6:b6:25:c2:6d:cb:15:63:0d:e5:0e:7e:de:
3d:4b:e0:5d:d8:86:00:5c:ec:b1:14:6c:88:fd:f5:
cf:61:4b:c0:35:3f:d0:a9:f8:7d:b1:4d:5a:86:3e:
10:29:44:75:f7:f3:2b:a7:ca:3e:4f:d7:62:2f:ca:
19:51:7b:25:66:3b:87:ea:90:f2:d1:3e:b8:0c:ab:
5c:f5:b9:bf:74:12:c8:ec:4e:98:cc:49:16:32:15:
96:a6:bc:9c:3e:cc:5f:3e:ce:ca:78:40:3f:97:17:
55:01:5b:9c:8d:0b:47:17:d6:c8:f2:5f:ac:0e:25:
a0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:34:18:92:18:37:53:A4:8F:12:9A:53:07:92:9E:0A:2A:F7:23:9E
X509v3 Authority Key Identifier:
keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/OzQYkhg3U6SPEppTB5KeCir3I54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.201.0/24
Signature Algorithm: sha256WithRSAEncryption
63:7b:7f:45:4f:41:5b:39:01:00:b6:f1:3f:05:e0:5e:88:fa:
28:44:d0:29:60:40:7e:38:e3:a4:f9:0e:ca:36:50:cb:22:43:
22:43:9f:af:91:81:3f:45:6b:c8:ef:9f:e0:ce:97:3a:fc:71:
4e:72:98:69:ff:fc:52:7a:19:18:24:87:a8:46:15:10:7f:50:
bf:b6:ef:ca:84:95:e1:0a:c7:f1:d1:0c:a8:24:01:26:2d:eb:
d0:75:07:a6:13:4b:8e:ec:2f:c5:e0:ba:7f:8e:df:76:5e:29:
1d:ad:ab:1f:df:2e:6a:79:81:85:f1:7d:7c:9a:02:38:83:3b:
8c:c1:da:c7:96:4b:9d:39:66:a4:3d:4a:2a:53:52:f0:91:34:
b8:48:ad:19:d5:6d:4b:df:a0:83:64:8f:c0:f3:22:b7:17:e1:
6e:e1:28:f1:fb:88:59:12:db:5c:94:50:aa:0c:8a:f2:85:e8:
a8:0c:be:aa:3f:77:29:e3:06:6d:56:26:cc:9f:26:97:ce:63:
dd:52:d6:3c:59:94:d9:24:77:65:3f:cc:f8:61:04:c1:82:cd:
b0:70:de:9c:0c:70:24:2f:82:80:98:37:6f:81:3b:2c:e3:02:
e5:13:a9:17:b4:72:ee:b8:96:0b:8d:6c:cf:4b:0c:ab:3c:64:
b5:17:7a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:53:53 2026 by rpki-client