Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/IpOk2-baAJmBq3G0sGeE5MDiPGw.roa
File: IpOk2-baAJmBq3G0sGeE5MDiPGw.roa (raw, json)
Hash identifier: DK5qUCU0NDdVm+egXm1v6a3rNwDmd+BapaCsSxr03wQ=
Subject key identifier: 22:93:A4:DB:E6:DA:00:99:81:AB:71:B4:B0:67:84:E4:C0:E2:3C:6C
Certificate issuer: /CN=37f93e468066666d05bb54c54abe35025d36defe
Certificate serial: 019F23687A90D75853EAA08BAC927D32924B
Authority key identifier: 37:F9:3E:46:80:66:66:6D:05:BB:54:C5:4A:BE:35:02:5D:36:DE:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_k-RoBmZm0Fu1TFSr41Al023v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/IpOk2-baAJmBq3G0sGeE5MDiPGw.roa
Signing time: Thu 02 Jul 2026 15:17:57 +0000
ROA not before: Thu 02 Jul 2026 15:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 91.242.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_k-RoBmZm0Fu1TFSr41Al023v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7a:90:d7:58:53:ea:a0:8b:ac:92:7d:32:92:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37f93e468066666d05bb54c54abe35025d36defe
Validity
Not Before: Jul 2 15:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2293a4dbe6da009981ab71b4b06784e4c0e23c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2f:29:6c:64:61:49:a4:2e:fc:b7:44:e7:e0:
be:0e:4b:9a:97:f0:3c:8d:b7:05:bc:f1:33:cf:ef:
85:76:95:f7:ba:a8:13:c9:ad:72:c8:82:39:83:75:
71:c3:d0:4b:dd:54:26:18:d2:95:49:64:b3:1b:d6:
77:7d:ea:a6:17:8e:a0:c6:e2:2a:00:ee:c7:29:ed:
cf:ce:bc:b6:71:8f:cf:53:a9:66:aa:30:77:ec:5b:
10:88:1c:21:1f:91:25:80:44:6d:1a:e6:d5:74:ac:
8d:81:51:8e:81:a1:92:2d:6c:21:b3:1d:df:09:30:
fa:f5:00:1f:f4:55:9a:9d:03:19:8b:af:45:dc:2f:
d4:2c:f5:10:23:bf:7c:91:44:d4:46:6d:bf:85:63:
86:68:35:4e:ed:68:65:d0:ad:cf:2b:8c:47:1c:4c:
3f:af:97:e4:20:d8:72:99:bb:af:a7:f8:19:7c:69:
b5:f0:60:1f:55:5f:03:56:de:60:97:6d:95:c5:75:
55:e5:30:55:2f:3d:37:d3:eb:54:29:e0:46:83:6a:
3c:ad:12:74:aa:e1:99:f4:9a:94:49:00:32:f1:b9:
1d:99:25:ed:fe:b7:bd:60:33:73:64:15:47:28:e3:
f4:1d:e1:2d:58:56:3a:df:78:f1:7b:fb:92:78:e4:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:93:A4:DB:E6:DA:00:99:81:AB:71:B4:B0:67:84:E4:C0:E2:3C:6C
X509v3 Authority Key Identifier:
keyid:37:F9:3E:46:80:66:66:6D:05:BB:54:C5:4A:BE:35:02:5D:36:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_k-RoBmZm0Fu1TFSr41Al023v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/IpOk2-baAJmBq3G0sGeE5MDiPGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.222.0/24
Signature Algorithm: sha256WithRSAEncryption
40:be:de:cf:63:fa:74:f5:5c:c5:34:24:d7:52:5d:3b:b2:4b:
9c:8e:3c:6f:75:ea:1c:70:36:8f:c9:a8:71:bb:77:48:53:13:
7b:a3:64:8e:90:cc:2f:59:9a:44:98:1c:55:dd:d6:8f:b0:38:
63:27:3a:67:b8:f3:9d:20:ea:fa:21:e3:ee:1d:04:01:21:90:
6a:f5:ee:95:22:6c:57:e9:e9:7a:a8:3f:33:dd:9a:c9:37:c6:
74:5b:60:2c:0d:64:7e:e2:90:d3:36:11:39:7c:f0:de:3f:23:
90:95:c3:bd:e0:05:99:70:9a:d9:c6:cb:d0:af:ea:75:0f:6b:
78:04:dc:06:8c:87:03:49:6f:d9:16:8f:35:58:1a:de:e7:d4:
e9:5d:cf:77:8c:28:f8:5f:49:14:b7:02:c3:45:fb:16:fb:68:
ba:3d:c3:6c:67:04:7f:37:e2:1f:b7:b5:89:fc:80:cc:88:53:
88:e6:01:27:91:86:03:3a:c8:d6:0a:3f:06:09:0c:5f:06:56:
3a:e7:88:20:fa:ac:ed:b1:c3:fb:3c:38:27:b8:67:64:f8:bd:
8b:f6:f0:13:7e:97:15:a5:52:e5:e5:7b:8d:16:0d:b0:c9:d7:
e8:86:6b:a0:ab:9c:e8:4b:d5:89:fd:59:c3:05:77:62:bd:7b:
51:c8:e1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:53:12 2026 by rpki-client