Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oc-4p3LHMvd8qShIGuFl1Xp0W4w.roa
File: oc-4p3LHMvd8qShIGuFl1Xp0W4w.roa (raw, json)
Hash identifier: G4uldypwSS9CHuRXC2crRg8V0JFbmpVivueP0+us8nM=
Subject key identifier: A1:CF:B8:A7:72:C7:32:F7:7C:A9:28:48:1A:E1:65:D5:7A:74:5B:8C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0EBFFA5C21A6A7E490BBB7EAE203DF1C5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oc-4p3LHMvd8qShIGuFl1Xp0W4w.roa
Signing time: Tue 29 Sep 2026 07:09:54 +0000
ROA not before: Tue 29 Sep 2026 07:09:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216334
IP address blocks: 45.154.246.0/24 maxlen: 24
103.91.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:ff:a5:c2:1a:6a:7e:49:0b:bb:7e:ae:20:3d:f1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 29 07:09:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1cfb8a772c732f77ca928481ae165d57a745b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:ee:fa:7d:54:d4:fb:aa:56:8a:f4:e1:91:
ae:fa:66:ce:0b:ba:8e:cb:65:a6:04:ac:15:1b:f3:
c4:26:7c:74:99:d8:c3:54:8d:0e:7a:4e:b8:a7:c9:
8c:11:e0:e5:d6:a8:e8:81:34:3d:34:ad:12:12:f5:
4d:68:79:4e:52:f7:8b:6b:52:86:a6:9e:a5:dc:20:
05:e5:46:49:3a:38:41:9b:6e:99:c5:83:99:18:57:
ba:d8:42:8d:a5:85:71:1e:03:11:e7:bb:34:7a:6e:
77:0d:7e:3f:2a:a9:ca:5c:dd:d5:1e:55:8e:30:ee:
d1:7d:e8:5f:b8:b5:60:22:a8:74:e6:6f:c9:07:77:
6a:50:76:9c:ce:bf:f1:d6:43:ef:e6:a2:fc:4f:83:
d4:fe:ae:3b:d4:9a:88:f9:ee:11:c6:20:be:52:ac:
d6:c2:83:5c:86:82:22:49:a2:ae:05:25:9d:36:9f:
40:da:c9:9e:37:bd:e4:d2:2e:d4:79:35:ba:e0:38:
5f:fd:7c:af:67:a7:61:82:10:64:a4:56:e6:0a:f1:
fa:08:f5:3a:20:33:94:6d:64:cf:85:35:18:4e:5d:
b7:df:bc:3c:23:c8:11:44:1d:c3:64:61:6d:1e:70:
d4:d4:24:d8:01:c8:50:a1:bf:e5:7a:00:fc:4a:9e:
24:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CF:B8:A7:72:C7:32:F7:7C:A9:28:48:1A:E1:65:D5:7A:74:5B:8C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oc-4p3LHMvd8qShIGuFl1Xp0W4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.246.0/24
103.91.147.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:c4:98:55:f6:e3:a9:2a:4e:b5:b1:c0:f2:36:c3:a8:69:60:
90:cd:dd:8b:73:d5:ee:fc:ad:07:f6:02:9b:34:0f:26:94:c1:
4d:e7:7d:4c:f6:11:00:13:52:89:a1:a5:bf:7e:5e:26:cc:5a:
1e:d9:59:b0:b0:e8:f3:23:79:8e:16:fb:3d:13:f4:a8:fc:6c:
9c:9d:bd:49:b0:75:9c:db:6a:d0:af:66:ee:c5:81:75:33:71:
cf:ec:8b:60:87:ef:8b:90:25:26:a7:f5:64:8c:f6:f4:ac:bc:
ac:24:0d:e7:39:c2:09:13:4e:7f:02:c4:05:59:19:9f:22:3d:
8f:b9:50:48:8c:ed:d3:44:05:fe:0f:ff:49:5f:eb:a3:11:49:
7e:aa:62:50:fc:eb:91:6f:16:aa:25:bd:00:56:4d:5c:9a:41:
81:e7:9f:ad:ae:74:0e:d5:85:57:56:5a:0a:2c:1c:ce:5e:d2:
ac:a3:4e:6a:49:a3:cc:82:4b:31:99:f2:b3:2b:57:7d:bc:03:
66:28:f0:6f:c4:3c:40:ec:38:1d:8f:93:37:c4:b7:bf:45:5f:
7d:83:81:e4:1f:c4:50:af:88:45:ee:42:2a:74:f4:12:bb:3f:
8d:5a:bb:5d:89:b6:f9:86:f9:83:cb:68:7d:fe:a4:ff:c4:cb:
1d:fb:4f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:32:10 2026 by rpki-client