Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/1OK4aI4lxfRP_eKM46SeYukSIsI.roa
File: 1OK4aI4lxfRP_eKM46SeYukSIsI.roa (raw, json)
Hash identifier: XhpM1Qnz1pgC+nFBf4Pdgsfp6+CcaI13FUqYP4l5UT8=
Subject key identifier: D4:E2:B8:68:8E:25:C5:F4:4F:FD:E2:8C:E3:A4:9E:62:E9:12:22:C2
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 01A0F33AEBE93CCA8DB36D2076E6FA522094
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/1OK4aI4lxfRP_eKM46SeYukSIsI.roa
Signing time: Wed 30 Sep 2026 16:51:59 +0000
ROA not before: Wed 30 Sep 2026 16:51:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212667
IP address blocks: 46.150.248.0/24 maxlen: 24
46.150.249.0/24 maxlen: 24
85.235.81.0/24 maxlen: 24
176.103.82.0/24 maxlen: 24
192.109.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:3a:eb:e9:3c:ca:8d:b3:6d:20:76:e6:fa:52:20:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Sep 30 16:51:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4e2b8688e25c5f44ffde28ce3a49e62e91222c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:03:be:ff:16:31:48:92:5a:6f:7a:d9:13:81:
6b:93:c0:c7:b4:67:70:de:77:5f:fe:94:65:59:64:
8f:fd:3b:4a:6f:db:2a:fc:ee:57:f6:f4:df:6f:83:
a3:96:b9:7d:23:48:90:17:b6:ce:6e:c9:9c:c9:20:
5c:17:0b:f5:36:5e:da:b1:92:4d:fd:e0:d3:eb:d7:
a7:db:0c:d9:54:b4:43:b2:ec:93:7f:ff:d2:ae:41:
9b:08:32:1a:bf:a6:ad:00:58:e9:e8:da:60:76:53:
89:b0:91:84:ab:ee:78:fd:88:b9:84:cb:64:16:54:
68:f7:68:68:eb:b5:a7:49:09:31:05:f6:ed:5b:dc:
f5:0f:6f:27:3b:e5:30:ec:8b:89:cb:d4:d6:6e:c0:
11:60:a5:6e:b5:46:22:12:23:ac:ec:80:05:85:ed:
a3:17:52:49:fc:62:ef:8d:9d:67:0b:ec:12:46:e4:
ea:23:f2:2b:12:46:42:9e:c4:a2:ea:58:63:ff:53:
1b:ff:88:57:31:6f:56:3f:ab:ae:c7:ff:08:73:31:
80:e4:ea:e7:8a:03:e0:a8:89:06:7a:19:d6:23:1b:
a8:b6:40:99:d0:64:24:4a:fc:b3:82:e3:47:2e:c1:
2e:7d:ce:60:56:58:fb:86:d3:58:a3:c5:27:28:f7:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E2:B8:68:8E:25:C5:F4:4F:FD:E2:8C:E3:A4:9E:62:E9:12:22:C2
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/1OK4aI4lxfRP_eKM46SeYukSIsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.150.248.0/23
85.235.81.0/24
176.103.82.0/24
192.109.97.0/24
Signature Algorithm: sha256WithRSAEncryption
26:95:2e:b0:58:63:fb:8e:2c:33:b1:bc:b4:c0:e8:87:e3:44:
60:a2:17:b3:b0:78:b5:c8:c8:34:3d:e6:11:c6:b0:13:48:0d:
06:48:f9:cf:94:eb:62:e3:7d:a6:38:c1:bd:25:53:aa:38:21:
4c:0f:8c:e3:7f:a9:c9:c0:09:37:54:65:38:1a:81:6c:f3:ff:
2a:35:e1:72:b7:60:4f:5d:c8:6b:19:79:3a:9a:29:be:74:ba:
d8:eb:43:25:97:84:c7:57:bf:e5:52:13:4d:c2:c3:7e:30:5e:
d8:c7:9f:e3:63:bc:d1:5b:e0:f4:4c:de:52:68:49:2e:0e:d6:
1e:d3:79:b6:16:91:33:4d:4e:6e:4d:05:7e:bb:24:98:d2:9e:
32:93:34:c8:0a:46:74:81:c8:8f:2d:5a:44:c3:6a:ed:e0:0f:
1d:29:b1:6a:f7:eb:70:bc:1c:2f:cb:f8:1e:97:17:04:9b:72:
94:77:d1:8d:43:b8:b1:91:96:1c:47:56:29:4f:5d:b7:4e:5e:
3d:95:a8:d5:3e:a4:b1:31:6c:a3:fb:62:3b:1d:6b:53:13:d5:
a5:9f:67:25:ef:6f:89:24:15:7b:0c:9c:e5:5f:e0:46:78:a4:
b5:f6:a5:f9:5a:30:25:e5:bf:0c:ea:44:41:f4:2a:a2:18:36:
8f:42:ea:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 15:14:23 2026 by rpki-client