Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/oX7WM59W_xUjFvJMYCvxSZBbZbQ.roa
File: oX7WM59W_xUjFvJMYCvxSZBbZbQ.roa (raw, json)
Hash identifier: jW8MZzhaUpzcebtjq5jIt3HMF7HjJl7jamf35OnVL9g=
Subject key identifier: A1:7E:D6:33:9F:56:FF:15:23:16:F2:4C:60:2B:F1:49:90:5B:65:B4
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01A11C5358AC4DE805D8CB67569A04E237D6
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/oX7WM59W_xUjFvJMYCvxSZBbZbQ.roa
Signing time: Thu 08 Oct 2026 16:23:06 +0000
ROA not before: Thu 08 Oct 2026 16:23:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30042
IP address blocks: 88.80.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:53:58:ac:4d:e8:05:d8:cb:67:56:9a:04:e2:37:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Oct 8 16:23:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a17ed6339f56ff152316f24c602bf149905b65b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:74:47:88:cd:03:c2:c2:cb:34:d6:56:2c:
ea:6f:e7:75:57:3e:79:66:f4:4f:fd:7c:f8:9c:24:
33:59:7b:22:ba:40:83:83:46:8a:36:17:35:fe:19:
c9:c8:af:0a:51:02:bc:85:af:0b:fc:fa:47:44:fb:
dd:2d:b2:94:e8:4d:cc:66:b3:50:50:92:1b:95:df:
12:66:6e:25:2a:c2:bf:35:2f:ac:0e:42:82:46:f4:
ad:97:54:9e:e6:e5:73:89:f6:5b:22:23:53:db:09:
30:13:ab:10:ce:29:5e:8b:07:f1:2c:60:bc:2f:3d:
66:2f:be:23:1f:96:c9:e7:68:64:a2:e4:e0:a7:4b:
86:e2:86:6a:5e:6c:b0:62:3b:44:84:d0:1d:cf:be:
17:95:a7:0f:f9:07:99:50:c7:69:27:53:5d:a4:60:
9b:84:c8:9f:cf:46:9e:63:9b:58:09:ee:71:c6:25:
c9:82:29:24:32:34:57:98:ce:15:10:99:98:50:a9:
f6:a0:a2:0b:aa:ed:04:15:80:c6:dd:38:0f:9f:09:
7c:22:71:4d:17:c3:f3:d4:4d:5e:7b:b7:3a:40:83:
68:5d:21:9a:c8:d8:e7:b7:34:37:d4:0c:97:40:5f:
10:a0:82:9b:2d:f5:55:c3:ef:49:4a:cf:bc:df:ed:
d3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7E:D6:33:9F:56:FF:15:23:16:F2:4C:60:2B:F1:49:90:5B:65:B4
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/oX7WM59W_xUjFvJMYCvxSZBbZbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.143.0/24
Signature Algorithm: sha256WithRSAEncryption
35:9c:0a:ca:84:e1:d0:c5:35:7c:51:ed:17:02:de:6a:97:f1:
ca:f4:d3:46:cc:a1:9d:b7:ad:03:92:25:b9:0e:27:a4:db:48:
c5:21:6c:08:ae:74:67:96:69:a2:85:f1:37:6e:95:8f:62:b2:
13:92:0e:fb:be:5c:ea:5b:f6:6c:65:2c:87:5c:fc:f6:9e:cb:
86:f8:dc:8c:db:09:20:90:2b:70:b3:4f:fa:d8:71:dd:06:ec:
a8:c6:c4:4c:65:78:f0:e2:53:0a:9c:44:86:62:8c:36:b3:b8:
58:86:fa:b0:dc:77:c4:6e:cf:d6:ef:52:26:9f:f5:8d:0c:8b:
c9:b1:bd:be:2e:c2:1d:07:3d:62:4f:af:22:0b:4d:07:78:82:
2b:50:07:6e:d1:1e:5f:9b:10:55:ed:ed:d6:19:8b:e2:c9:93:
44:e1:ef:c3:b1:6b:e4:f3:d4:0d:65:9c:d4:60:7c:9e:b2:49:
ad:61:be:3d:14:d1:5c:6b:64:03:18:27:15:d5:15:f7:92:10:
b9:97:53:00:36:cf:cb:1e:2a:87:9a:6b:40:cc:eb:ec:a7:88:
6c:bd:46:b4:d0:59:27:7b:85:2c:df:d3:0d:61:41:e1:fa:d2:
42:2c:8b:6f:22:8d:44:66:07:1f:b0:02:1f:db:6f:5f:2d:d3:
cd:23:46:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:43:46 2026 by rpki-client