Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/o1L0CugU71fV5pO84mxBRaaQeQk.roa
File: o1L0CugU71fV5pO84mxBRaaQeQk.roa (raw, json)
Hash identifier: qnYAGCZJ0F0DI4UrtoQwlYSzkp5ks3Mj7SJWatFkq3A=
Subject key identifier: A3:52:F4:0A:E8:14:EF:57:D5:E6:93:BC:E2:6C:41:45:A6:90:79:09
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019E642B5F63E0210799AB765A467D206FA8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/o1L0CugU71fV5pO84mxBRaaQeQk.roa
Signing time: Tue 26 May 2026 12:03:44 +0000
ROA not before: Tue 26 May 2026 12:03:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209693
IP address blocks: 45.88.88.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
87.121.86.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
176.125.254.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 May 2026 12:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:64:2b:5f:63:e0:21:07:99:ab:76:5a:46:7d:20:6f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 26 12:03:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a352f40ae814ef57d5e693bce26c4145a6907909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e3:66:f5:8b:31:21:c8:79:6a:93:89:af:80:
b7:9b:2d:76:a5:c0:9b:3a:7d:0a:0f:dc:21:30:27:
67:90:81:bf:71:2a:99:22:ab:9a:ec:8e:cc:63:92:
27:58:61:4f:d0:61:18:64:f6:3e:db:f4:8b:35:e1:
ed:f2:79:95:dd:a1:48:a0:e6:5c:c2:8e:9f:d3:8a:
c4:37:94:8e:c5:d2:4f:a7:b3:0a:a4:80:d2:2d:52:
7f:48:25:ac:e2:fa:1d:ca:93:c4:00:7e:b4:66:c3:
cb:c3:da:b7:27:0b:ce:64:6e:9c:c0:d1:51:6e:49:
c9:63:ee:c6:f5:8c:93:bd:9d:c0:5d:3a:09:c0:7c:
3e:d4:a4:c7:14:c0:65:54:ad:48:43:3d:10:ba:91:
4d:65:58:3f:74:c9:b7:78:e9:10:b6:9b:06:07:76:
99:eb:49:7e:35:df:10:7f:fd:73:86:fa:f3:e1:18:
5e:dd:a5:47:19:01:fd:00:c3:c2:19:93:ff:cd:0a:
f4:00:07:9a:15:fc:c1:5f:f5:1c:85:4b:68:3e:f6:
1a:47:3b:f9:f5:45:31:dc:dc:e3:07:a9:4b:39:6a:
10:3d:85:b5:cb:85:46:45:94:fa:a3:65:1f:1c:13:
a0:ca:ac:3b:ab:ee:0a:81:50:61:9f:07:2a:e6:b9:
30:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:52:F4:0A:E8:14:EF:57:D5:E6:93:BC:E2:6C:41:45:A6:90:79:09
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/o1L0CugU71fV5pO84mxBRaaQeQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.88.0/24
83.219.97.0/24
87.121.86.0/24
87.121.221.0/24
176.125.254.0/24
185.252.177.0/24
194.48.250.0/24
Signature Algorithm: sha256WithRSAEncryption
45:5d:8e:e8:03:e6:d4:dc:6a:b0:73:92:d0:43:be:c3:86:6f:
e7:4d:41:7a:7e:64:9a:ea:ee:17:d8:7b:a3:4a:71:c9:2f:d1:
34:81:00:e7:4f:ca:e7:3d:25:75:91:be:d0:06:14:c6:eb:5d:
19:4b:74:20:58:ac:f5:85:90:8c:a3:03:5b:94:ad:cc:e3:cb:
41:9b:a9:e1:1d:11:4f:d4:ee:b7:01:9e:a1:32:5b:85:84:dc:
0c:da:7d:90:f4:c9:9e:e3:10:7c:ec:fb:13:1b:8a:96:55:92:
a1:f0:29:16:6f:00:92:66:7c:a4:fe:15:f0:ff:42:1a:0c:9f:
88:84:d4:bd:e4:45:06:3e:33:3d:34:a7:a5:42:f8:5c:e0:7f:
7b:0d:1c:da:13:31:d5:97:c1:86:bd:ca:58:20:ca:8f:d8:2d:
91:8c:9a:8b:f8:7b:4f:68:de:1c:3f:1e:e0:33:bc:3e:05:90:
c0:07:e9:c4:c2:f1:fa:73:81:49:bb:de:53:20:01:d0:60:c4:
ff:db:00:25:05:fd:35:f5:00:84:73:83:48:f7:d2:f0:0b:64:
06:b0:65:22:28:42:90:38:48:b3:60:5f:9a:cc:88:f5:3f:92:
99:a8:8d:5f:f2:89:a6:3d:da:2c:52:86:54:c2:16:29:47:61:
52:af:07:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 21:41:00 2026 by rpki-client