Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/OCOSxMuOE7etqm6ym3cnIhKe0pw.roa
File: OCOSxMuOE7etqm6ym3cnIhKe0pw.roa (raw, json)
Hash identifier: PN3RvFQgu5pZxlCTS4LWpAyJgk2AnIZ4RZiwMhHQpjM=
Subject key identifier: 38:23:92:C4:CB:8E:13:B7:AD:AA:6E:B2:9B:77:27:22:12:9E:D2:9C
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 019C97E6BC7D952A35FB0C1E18DB45A41050
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/OCOSxMuOE7etqm6ym3cnIhKe0pw.roa
Signing time: Thu 26 Feb 2026 03:03:26 +0000
ROA not before: Thu 26 Feb 2026 03:03:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203057
IP address blocks: 2a0b:21c1:601d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:97:e6:bc:7d:95:2a:35:fb:0c:1e:18:db:45:a4:10:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Feb 26 03:03:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=382392c4cb8e13b7adaa6eb29b772722129ed29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:ba:0a:2d:d3:dd:e1:70:9c:54:d7:62:cd:
02:40:eb:7c:21:f2:e4:c2:87:89:34:32:48:1b:12:
24:95:fa:e5:65:ab:f0:be:fd:c7:da:60:6a:0a:25:
5a:9c:0c:7c:15:1d:1d:cc:b7:be:1e:3a:cc:5e:09:
d1:11:a2:41:48:2f:bc:fd:e1:b3:cf:40:03:fd:eb:
21:6a:8a:8a:15:b1:cb:89:81:65:6b:7b:f7:3c:5a:
b7:b8:60:78:c7:ce:8c:1c:b6:eb:92:7d:30:14:e2:
46:a0:24:38:52:ff:b2:ca:a8:21:c6:b2:ef:45:61:
a8:ab:97:78:8e:af:7f:aa:ea:84:58:59:38:67:25:
a0:88:8a:7f:2a:ec:3b:ba:29:0d:ae:f9:a7:a7:84:
e6:4a:4e:b1:66:7f:45:d6:eb:1b:d3:39:cc:63:38:
6c:57:54:2e:92:37:9b:44:bf:07:7b:12:aa:38:a0:
3b:ac:0e:66:e0:ec:e1:08:6e:25:f7:b9:c6:64:31:
6b:73:15:d1:be:9b:7d:f0:47:48:59:9d:9b:92:8f:
97:20:83:a4:55:e9:a7:14:60:02:64:5e:8a:cf:50:
1c:a3:d2:93:1b:c2:5d:97:48:b2:40:d9:56:df:41:
86:4a:d3:57:e1:b3:a5:06:65:09:9b:8c:57:19:3c:
ba:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:23:92:C4:CB:8E:13:B7:AD:AA:6E:B2:9B:77:27:22:12:9E:D2:9C
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/OCOSxMuOE7etqm6ym3cnIhKe0pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:21c1:601d::/48
Signature Algorithm: sha256WithRSAEncryption
81:d9:14:3d:c0:a6:de:ac:db:92:5c:5a:28:ad:41:bc:4a:e5:
89:f4:0d:ee:fb:14:46:8e:4f:cb:87:62:02:42:7d:4e:20:6d:
04:15:5a:7e:e1:84:6e:ef:fa:81:e8:86:a7:0e:89:f5:ce:2c:
cc:19:a5:c5:60:f3:e1:64:36:41:87:00:05:74:2b:f4:3a:fb:
c5:62:1a:a8:51:a6:03:3e:e4:1a:8d:53:9c:08:e8:da:70:ff:
f3:5d:b2:28:b5:4a:76:95:38:41:3d:5d:03:93:14:47:04:29:
f5:f7:c4:23:08:8c:59:6b:22:62:b3:f9:a7:93:bb:58:c6:3d:
f2:f8:49:1e:c0:60:aa:16:c8:97:db:45:e6:c5:5e:4a:8e:5c:
85:d6:0d:a8:c6:c9:2a:ff:99:60:98:f4:cd:d9:ac:3b:76:96:
4c:af:ae:2d:ef:05:d0:07:04:44:55:a7:95:b5:42:7b:91:2a:
48:f9:eb:72:cd:ef:e2:3a:ad:58:67:bf:1b:28:d6:fe:38:05:
60:ef:70:43:0a:d8:ee:f0:76:de:c0:a4:3c:06:02:81:af:e4:
55:43:21:f6:3b:89:22:30:13:ee:28:4c:d1:e2:0d:2e:88:35:
06:87:ec:1f:26:3b:4d:9a:af:62:e8:2e:5c:b4:d0:59:5e:ef:
ba:a6:99:0c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZyX5rx9lSo1+wweGNtFpBBQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy
YjNhZWMwHhcNMjYwMjI2MDMwMzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODIzOTJjNGNiOGUxM2I3YWRhYTZlYjI5Yjc3MjcyMjEyOWVkMjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ+6Ci3T3eFwnFTXYs0CQOt8IfLk
woeJNDJIGxIklfrlZavwvv3H2mBqCiVanAx8FR0dzLe+HjrMXgnREaJBSC+8/eGz
z0AD/eshaoqKFbHLiYFla3v3PFq3uGB4x86MHLbrkn0wFOJGoCQ4Uv+yyqghxrLv
RWGoq5d4jq9/quqEWFk4ZyWgiIp/Kuw7uikNrvmnp4TmSk6xZn9F1usb0znMYzhs
V1QukjebRL8HexKqOKA7rA5m4OzhCG4l97nGZDFrcxXRvpt98EdIWZ2bko+XIIOk
VemnFGACZF6Kz1Aco9KTG8Jdl0iyQNlW30GGStNX4bOlBmUJm4xXGTy6OwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDgjksTLjhO3rapuspt3JyISntKcMB8GA1UdIwQY
MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt
ZTdkYWVjMTk0YTY5LzEvT0NPU3hNdU9FN2V0cW02eW0zY25JaEtlMHB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5
LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgshwWAd
MA0GCSqGSIb3DQEBCwUAA4IBAQCB2RQ9wKberNuSXFoorUG8SuWJ9A3u+xRGjk/L
h2ICQn1OIG0EFVp+4YRu7/qB6IanDon1zizMGaXFYPPhZDZBhwAFdCv0OvvFYhqo
UaYDPuQajVOcCOjacP/zXbIotUp2lThBPV0DkxRHBCn198QjCIxZayJis/mnk7tY
xj3y+EkewGCqFsiX20XmxV5KjlyF1g2oxskq/5lgmPTN2aw7dpZMr64t7wXQBwRE
VaeVtUJ7kSpI+etyze/iOq1YZ78bKNb+OAVg73BDCtju8HbewKQ8BgKBr+RVQyH2
O4kiMBPuKEzR4g0uiDUGh+wfJjtNmq9i6C5ctNBZXu+6ppkM
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:21 2026 by rpki-client