Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/oGvecxChE9PvAr_dJh5s6G_15uM.roa
File: oGvecxChE9PvAr_dJh5s6G_15uM.roa (raw, json)
Hash identifier: CJ9Dwla0xxRWMrW9UQklY6shlGWQmLDV86+ixrs3Kxk=
Subject key identifier: A0:6B:DE:73:10:A1:13:D3:EF:02:BF:DD:26:1E:6C:E8:6F:F5:E6:E3
Certificate issuer: /CN=8e0d2572adfb72344ead4c53b557b40eca5e97a2
Certificate serial: 019E44DE8E7A61D1472F1E26B13FC53BB824
Authority key identifier: 8E:0D:25:72:AD:FB:72:34:4E:AD:4C:53:B5:57:B4:0E:CA:5E:97:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jg0lcq37cjROrUxTtVe0Dspel6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/oGvecxChE9PvAr_dJh5s6G_15uM.roa
Signing time: Wed 20 May 2026 10:11:36 +0000
ROA not before: Wed 20 May 2026 10:11:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29492
IP address blocks: 37.143.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jg0lcq37cjROrUxTtVe0Dspel6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:de:8e:7a:61:d1:47:2f:1e:26:b1:3f:c5:3b:b8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0d2572adfb72344ead4c53b557b40eca5e97a2
Validity
Not Before: May 20 10:11:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a06bde7310a113d3ef02bfdd261e6ce86ff5e6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:e3:e0:46:11:f3:6c:56:f7:af:26:04:4d:
88:81:15:32:79:bc:74:05:0e:12:e2:fa:ec:9e:9d:
36:80:ee:ad:4e:bf:3c:14:33:80:e0:48:32:0d:44:
72:ec:f0:e0:f3:13:0e:81:58:b0:65:f0:ab:88:16:
2a:4d:af:e2:9c:12:f0:98:17:18:f1:56:c8:b7:ea:
cf:89:ff:01:7f:26:d5:b8:60:a7:8e:db:50:c7:bc:
2c:95:cf:79:42:b9:e1:40:8a:ec:8b:33:fb:61:f1:
7b:0b:60:d6:ef:b0:4b:f4:f7:6f:18:9f:2f:ce:75:
4f:8c:5e:41:12:57:61:cb:eb:64:75:b0:96:fe:80:
5d:3c:5c:5d:41:44:b1:f5:f1:23:5f:4f:9b:ef:80:
9e:29:d9:7c:e2:ff:4a:d1:4f:ab:e0:bb:9f:7a:36:
44:35:2c:6f:86:f0:cb:55:99:f2:dc:98:0e:36:28:
2f:32:ff:f8:3c:34:b7:9c:25:54:88:2d:60:0e:61:
b8:2f:4b:90:b6:dc:04:b7:f2:6a:aa:24:66:d0:4f:
c4:b6:04:97:a4:b6:5a:f1:54:4a:31:63:df:32:8f:
8e:32:98:51:79:68:69:8c:c4:e3:17:97:99:7c:7b:
d8:8c:d6:61:f6:49:0d:ad:27:82:5f:78:71:f8:dc:
4f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6B:DE:73:10:A1:13:D3:EF:02:BF:DD:26:1E:6C:E8:6F:F5:E6:E3
X509v3 Authority Key Identifier:
keyid:8E:0D:25:72:AD:FB:72:34:4E:AD:4C:53:B5:57:B4:0E:CA:5E:97:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jg0lcq37cjROrUxTtVe0Dspel6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/oGvecxChE9PvAr_dJh5s6G_15uM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.48.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:a0:16:89:b6:61:ab:86:ab:4a:2f:eb:55:07:84:67:c0:a0:
cf:77:69:8e:9a:24:43:6e:6a:5f:d5:6c:5f:5d:85:e6:75:e1:
ab:1b:fa:e0:1a:70:5c:b4:ad:8a:74:fd:0b:a5:85:60:d9:77:
66:a1:b5:0b:51:e7:e5:78:0a:d1:4c:b4:f9:55:f4:34:27:a6:
44:cc:1c:33:86:ca:48:c0:95:a8:24:49:78:62:fd:29:23:b6:
38:f4:c1:2b:9c:b8:0d:55:12:82:77:88:d7:e4:62:4a:6c:5b:
ae:db:0a:a0:ad:df:ad:2c:0e:57:c5:49:92:71:03:9a:38:b1:
8a:75:d1:8f:27:0b:95:b1:10:3c:5e:dd:b6:c2:69:8e:a1:51:
d0:2b:0f:80:7b:73:a8:3a:84:cb:e1:6a:29:c2:8f:6f:99:f8:
6f:05:1e:35:a8:9e:fd:c5:42:73:ec:9c:ec:ea:55:93:cf:fb:
15:ce:1f:98:61:b8:f3:58:e9:bb:10:63:1a:36:01:a5:66:ad:
88:f8:71:79:38:7d:5e:ef:c0:b3:36:00:31:5c:2c:ab:96:b8:
cb:fd:7f:7a:c4:c8:11:70:d7:90:99:7b:0e:bd:f0:81:41:ed:
95:1d:79:a7:55:1e:4f:9e:d9:0f:aa:f0:bc:e8:69:c9:55:cb:
3f:cc:ce:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:38 2026 by rpki-client