Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/OFbPbs8o84Mx2w-OctCFEzyYygU.roa
File: OFbPbs8o84Mx2w-OctCFEzyYygU.roa (raw, json)
Hash identifier: K9++GIp3S1SPKzxtPCf5MbshLgMP0x4lB/emAZ332gc=
Subject key identifier: 38:56:CF:6E:CF:28:F3:83:31:DB:0F:8E:72:D0:85:13:3C:98:CA:05
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 019D35E781B18B9F0F9254D5C1DECE4B2A6B
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/OFbPbs8o84Mx2w-OctCFEzyYygU.roa
Signing time: Sat 28 Mar 2026 19:24:17 +0000
ROA not before: Sat 28 Mar 2026 19:24:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206174
IP address blocks: 2a12:3740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:e7:81:b1:8b:9f:0f:92:54:d5:c1:de:ce:4b:2a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Mar 28 19:24:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3856cf6ecf28f38331db0f8e72d085133c98ca05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bb:31:ba:3c:da:c8:73:50:42:1f:ad:7f:c2:
3a:24:b1:0b:b3:07:7f:93:3a:8d:88:cb:79:8d:0e:
1b:b5:89:02:c7:0c:84:38:e2:08:75:fd:59:37:e9:
d2:63:85:b5:3c:4c:14:29:97:7a:93:c1:69:8c:5d:
7a:03:4f:c1:49:e6:b1:23:19:33:dc:e0:6b:61:0a:
05:a1:81:45:0a:dd:54:33:91:76:9c:70:24:f0:ae:
91:b8:4f:0d:45:3b:d0:ae:6c:f7:50:07:4e:39:74:
a2:eb:95:89:40:34:7c:7f:e6:53:e6:eb:d9:d7:63:
f1:6e:ef:fe:68:0c:6d:5a:be:d6:28:c7:4a:34:e7:
3c:8f:66:21:c1:ec:a3:a6:d6:f8:b8:db:e4:92:58:
83:3a:d1:54:35:35:9b:3a:81:3b:97:a3:c3:39:77:
1a:e8:56:a8:63:a3:57:7a:b8:bb:74:2a:04:38:e3:
a0:26:2a:78:27:72:9c:88:67:72:bb:cd:3f:cc:e9:
c3:4a:41:72:36:8f:9d:de:6a:b6:3b:c5:12:d3:06:
27:e9:f6:7a:e3:32:33:7a:f2:31:3f:fd:8b:0e:ce:
81:ef:81:a6:0b:2f:eb:b7:76:c5:dc:31:1e:ea:82:
08:37:46:b3:32:e5:2f:7f:2a:1c:ed:a4:a5:69:41:
55:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:56:CF:6E:CF:28:F3:83:31:DB:0F:8E:72:D0:85:13:3C:98:CA:05
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/OFbPbs8o84Mx2w-OctCFEzyYygU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3740::/29
Signature Algorithm: sha256WithRSAEncryption
16:15:ab:41:60:25:73:7c:a1:28:dc:dc:da:54:51:d3:32:8f:
12:ec:44:c8:04:b1:49:67:85:d3:60:82:7d:73:4a:99:bb:9f:
67:dd:bb:5f:54:7c:0a:6a:36:73:05:92:81:5b:d0:c1:c5:fb:
4d:26:ba:5b:ed:a2:d4:dd:7c:93:5c:3e:c0:f0:0a:a0:09:5f:
c4:88:14:bc:8d:62:45:31:d6:94:68:ce:e1:c8:f9:e5:8f:64:
74:25:e7:ff:14:3a:12:aa:b3:95:12:84:3a:4f:5b:0a:eb:2f:
1e:70:14:01:65:13:4b:c8:5f:51:71:78:91:11:19:63:93:b6:
76:c1:5a:37:88:a0:3e:87:42:bb:ce:c4:66:17:0f:6d:2b:40:
c7:b3:f2:0d:0f:07:99:e3:6c:53:de:b2:80:a0:1e:79:5f:2f:
93:99:e1:f3:5b:9a:c0:97:11:cb:d8:7f:22:17:34:5a:83:aa:
d9:37:be:c2:a3:3b:a6:93:db:b2:a1:a5:ee:96:93:ff:d9:29:
ad:cc:02:03:c0:b1:c3:b6:bf:54:4b:c6:05:73:a1:5f:ff:9e:
4d:20:d7:ff:52:f5:fa:cc:ce:77:b3:2e:a6:ac:ae:d7:7f:a0:
57:f4:30:e6:a4:b6:f3:43:54:ba:25:f7:cd:96:74:00:a1:f6:
b7:26:8c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:45 2026 by rpki-client