Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/oaPiDgiUp4N6eHimpviCBvIRiXs.roa
File: oaPiDgiUp4N6eHimpviCBvIRiXs.roa (raw, json)
Hash identifier: gi5GPHcvQqzHHbSUnrSphPBhz1cqoAOg4ko/yRoF0WM=
Subject key identifier: A1:A3:E2:0E:08:94:A7:83:7A:78:78:A6:A6:F8:82:06:F2:11:89:7B
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 01A0AF9A6840F7CA74563ADE4F75BAB78472
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/oaPiDgiUp4N6eHimpviCBvIRiXs.roa
Signing time: Thu 17 Sep 2026 13:42:07 +0000
ROA not before: Thu 17 Sep 2026 13:42:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213861
IP address blocks: 2a12:3bc1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:9a:68:40:f7:ca:74:56:3a:de:4f:75:ba:b7:84:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Sep 17 13:42:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1a3e20e0894a7837a7878a6a6f88206f211897b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4b:53:07:f8:40:79:c3:22:90:ed:50:ad:cf:
ba:49:a4:3f:b6:76:9c:29:03:d5:67:3f:2b:e2:d3:
32:21:e9:d8:6f:df:95:14:0b:37:c8:f4:0c:ad:11:
e1:ef:b0:a3:c3:9a:b1:b8:5f:d2:7a:85:68:8e:7f:
fa:59:d9:d6:31:cb:30:c1:ae:9c:39:68:66:03:43:
5a:e9:4c:e1:af:ff:01:67:52:f8:17:d8:cb:f7:df:
8b:78:3d:66:2a:1b:f9:d6:00:35:41:ea:68:bf:98:
1a:d2:a0:4a:91:b6:2a:5d:6e:67:74:7b:63:b0:2b:
d7:26:f1:b0:9e:42:4a:34:6e:f3:84:af:dc:f2:1b:
1c:f0:19:d2:8f:8e:f6:6a:2c:ed:65:08:09:48:86:
87:b2:f4:44:23:23:cc:ff:f4:c4:f3:42:06:45:0b:
70:13:1b:03:0b:1c:b4:b9:ef:e2:1b:ef:8f:54:72:
67:7b:e6:44:03:6f:a1:57:86:2a:c0:75:1a:91:9a:
53:ad:a0:59:a5:b5:a8:8d:46:b1:74:49:a4:40:f6:
f0:3c:7b:eb:8e:e6:f2:f3:15:7e:1d:99:a4:98:59:
c7:fc:80:e6:c9:4c:87:98:07:ca:fb:76:84:2a:74:
5a:34:3b:74:b2:c7:94:47:8c:7f:0c:f1:e1:a7:f3:
46:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A3:E2:0E:08:94:A7:83:7A:78:78:A6:A6:F8:82:06:F2:11:89:7B
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/oaPiDgiUp4N6eHimpviCBvIRiXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3bc1::/32
Signature Algorithm: sha256WithRSAEncryption
81:90:91:d2:d0:50:97:7a:4c:a2:c8:32:2b:9b:a4:2e:a4:c0:
d2:8f:78:cf:f0:87:0b:29:85:f6:0d:5e:75:ed:f9:61:52:24:
fa:d1:c4:84:26:cc:3a:86:03:d6:6c:b4:51:b3:60:71:97:81:
1c:9f:cc:34:ae:50:da:1f:44:4e:76:79:9e:f4:c3:37:a8:97:
60:38:30:1b:9a:0d:ae:71:a9:2e:da:7c:10:b2:5f:86:68:57:
3d:a5:c4:11:3b:0c:7c:96:b9:84:dc:f3:93:48:08:91:f3:0a:
4c:df:f1:55:74:7a:73:9a:30:d8:72:ca:d8:92:0c:d6:dc:d3:
0e:0a:bc:13:e5:59:76:2d:e5:7a:b2:69:8e:a9:26:6e:8b:64:
f0:16:c8:dc:0e:f4:c2:cb:ea:5e:84:7e:e9:a4:b1:23:74:78:
b1:7f:2a:17:8e:18:4a:56:e9:8f:d7:2c:e5:f8:f6:70:6f:4c:
86:c5:d8:8e:45:0b:2c:08:d3:98:9f:98:08:1b:7e:bb:e0:68:
15:32:fe:16:1f:84:30:26:da:b6:ba:02:5a:14:47:dc:29:1d:
ad:ca:22:63:98:f8:ae:a2:6e:6f:2a:5c:61:59:b4:cb:59:5b:
1f:3c:f0:92:e9:47:df:c8:50:df:d0:b1:84:55:5e:52:07:71:
0d:a0:77:ea
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaCvmmhA98p0VjreT3W6t4RyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk
NTBjM2YwHhcNMjYwOTE3MTM0MjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWEzZTIwZTA4OTRhNzgzN2E3ODc4YTZhNmY4ODIwNmYyMTE4OTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UtTB/hAecMikO1Qrc+6SaQ/tnac
KQPVZz8r4tMyIenYb9+VFAs3yPQMrRHh77Cjw5qxuF/SeoVojn/6WdnWMcswwa6c
OWhmA0Na6Uzhr/8BZ1L4F9jL99+LeD1mKhv51gA1Qepov5ga0qBKkbYqXW5ndHtj
sCvXJvGwnkJKNG7zhK/c8hsc8BnSj472aiztZQgJSIaHsvREIyPM//TE80IGRQtw
ExsDCxy0ue/iG++PVHJne+ZEA2+hV4YqwHUakZpTraBZpbWojUaxdEmkQPbwPHvr
juby8xV+HZmkmFnH/IDmyUyHmAfK+3aEKnRaNDt0sseUR4x/DPHhp/NGaQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFKGj4g4IlKeDenh4pqb4ggbyEYl7MB8GA1UdIwQY
MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt
OWZjZWI0NWQ2ZmRiLzEvb2FQaURnaVVwNE42ZUhpbXB2aUNCdklSaVhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi
LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhI7wTAN
BgkqhkiG9w0BAQsFAAOCAQEAgZCR0tBQl3pMosgyK5ukLqTA0o94z/CHCymF9g1e
de35YVIk+tHEhCbMOoYD1my0UbNgcZeBHJ/MNK5Q2h9ETnZ5nvTDN6iXYDgwG5oN
rnGpLtp8ELJfhmhXPaXEETsMfJa5hNzzk0gIkfMKTN/xVXR6c5ow2HLK2JIM1tzT
Dgq8E+VZdi3lerJpjqkmbotk8BbI3A70wsvqXoR+6aSxI3R4sX8qF44YSlbpj9cs
5fj2cG9MhsXYjkULLAjTmJ+YCBt+u+BoFTL+Fh+EMCbatroCWhRH3CkdrcoiY5j4
rqJubypcYVm0y1lbHzzwkulH38hQ39CxhFVeUgdxDaB36g==
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:17:10 2026 by rpki-client