Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/OFL0pfnWQKyP_vdNpruCki1Xn3o.roa
File: OFL0pfnWQKyP_vdNpruCki1Xn3o.roa (raw, json)
Hash identifier: N72V/YW8dr+6ZHypwJat0/c3Tm+0yEOrcJpyLdW7Gso=
Subject key identifier: 38:52:F4:A5:F9:D6:40:AC:8F:FE:F7:4D:A6:BB:82:92:2D:57:9F:7A
Certificate issuer: /CN=2e891cf711bf7e1c42e082d6a2f89a04beeb95d1
Certificate serial: 01A08C5E0662BF2DA9E8847FD4645CB26C2A
Authority key identifier: 2E:89:1C:F7:11:BF:7E:1C:42:E0:82:D6:A2:F8:9A:04:BE:EB:95:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lokc9xG_fhxC4ILWoviaBL7rldE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/OFL0pfnWQKyP_vdNpruCki1Xn3o.roa
Signing time: Thu 10 Sep 2026 17:29:27 +0000
ROA not before: Thu 10 Sep 2026 17:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57608
IP address blocks: 193.203.56.0/22 maxlen: 22
194.88.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lokc9xG_fhxC4ILWoviaBL7rldE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:5e:06:62:bf:2d:a9:e8:84:7f:d4:64:5c:b2:6c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e891cf711bf7e1c42e082d6a2f89a04beeb95d1
Validity
Not Before: Sep 10 17:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3852f4a5f9d640ac8ffef74da6bb82922d579f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:70:57:5f:17:6c:43:ff:77:b8:8d:42:37:
66:52:45:ab:e1:8d:66:58:9c:4a:07:2e:2e:09:fa:
ea:41:c8:08:49:21:1a:17:24:b8:c5:6b:5b:24:0c:
6c:d0:ce:9e:bd:dc:cb:4e:70:d1:f1:c0:4b:ec:0a:
c4:4b:6f:48:87:1b:01:78:27:83:58:bd:04:42:55:
2d:7f:5c:ec:73:2d:62:30:b7:18:6e:26:ef:3a:13:
90:e4:fd:ec:75:39:35:27:e5:1d:e4:73:5e:55:94:
2e:b2:da:87:cc:c9:4d:20:9c:cb:5b:36:65:26:0c:
97:cc:6e:9c:53:c9:c4:be:7d:9d:a4:be:6b:a4:3b:
ab:f1:16:0d:73:e0:16:37:76:a9:e8:15:d5:e3:9c:
6b:88:79:f9:37:a1:fb:ea:f8:4f:b1:0b:17:c3:7b:
26:73:cf:eb:22:e5:84:85:d8:f8:a9:c3:1f:61:d2:
46:1b:38:85:aa:e6:fc:0d:04:52:66:0c:11:7c:4a:
e2:78:6b:0b:58:93:2b:a9:7b:d1:ce:25:ce:d2:b6:
50:5a:b6:eb:d1:2a:67:20:1d:fb:7e:b3:e3:2b:98:
dd:29:e7:a2:af:a7:6a:f6:97:b6:f9:f4:3b:29:dc:
79:fc:f0:dc:e5:f2:06:03:b1:a8:a9:4b:23:d2:e3:
a9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:52:F4:A5:F9:D6:40:AC:8F:FE:F7:4D:A6:BB:82:92:2D:57:9F:7A
X509v3 Authority Key Identifier:
keyid:2E:89:1C:F7:11:BF:7E:1C:42:E0:82:D6:A2:F8:9A:04:BE:EB:95:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lokc9xG_fhxC4ILWoviaBL7rldE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/OFL0pfnWQKyP_vdNpruCki1Xn3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.56.0/22
194.88.214.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:55:20:3e:9c:e9:9c:9f:ba:c2:a9:7f:5e:74:70:68:d2:04:
ce:09:08:77:da:2a:bb:e4:64:b2:7f:fd:7c:77:ab:d4:30:7b:
39:3f:86:38:3b:68:7d:17:73:d1:ab:47:18:0e:fb:02:f5:6c:
64:cb:5f:34:70:e4:4f:01:ce:16:3a:48:2d:3a:fd:13:af:74:
8f:dd:b9:7d:37:6c:a4:31:7a:67:01:41:36:86:9e:49:cf:d7:
37:ce:19:c5:3c:b9:38:cd:f5:05:d7:83:b8:35:64:7b:be:96:
b6:31:f3:13:42:e4:c3:27:5f:bd:36:e1:68:a0:a8:41:c3:2e:
97:cc:f0:f5:38:94:fd:99:bc:8a:20:32:c4:0e:cc:86:34:01:
4e:5d:02:7b:02:61:95:c9:b4:f6:57:df:dd:04:0f:da:e2:e1:
62:1c:6a:b3:9c:28:a2:e6:38:5d:1e:34:95:dd:8e:f8:2f:5c:
ae:c9:f6:68:e5:f8:30:fd:71:fe:bf:ef:73:40:cc:ac:54:db:
a3:85:50:2d:91:82:74:58:84:b4:e8:c1:5d:d2:95:98:cc:27:
59:c8:ff:0b:60:66:1a:70:03:61:80:46:3c:44:e8:b8:16:fd:
63:2d:0a:00:b5:68:1c:e3:73:f1:b8:da:bd:30:f3:81:b9:92:
ae:ed:a1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:12:19 2026 by rpki-client