Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/otx1Io37oh9NkMmno6SH6mQtQco.roa
File: otx1Io37oh9NkMmno6SH6mQtQco.roa (raw, json)
Hash identifier: PBFwoS2uav00hD1dNdxhQ4X+XRciea3zR2h+M8kBMpU=
Subject key identifier: A2:DC:75:22:8D:FB:A2:1F:4D:90:C9:A7:A3:A4:87:EA:64:2D:41:CA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A03347599707A26E3C5F46FEFC273B21B0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/otx1Io37oh9NkMmno6SH6mQtQco.roa
Signing time: Mon 24 Aug 2026 10:18:28 +0000
ROA not before: Mon 24 Aug 2026 10:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 45.128.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:47:59:97:07:a2:6e:3c:5f:46:fe:fc:27:3b:21:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 24 10:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2dc75228dfba21f4d90c9a7a3a487ea642d41ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9a:6d:dc:cb:07:41:c6:d8:1e:e6:a2:2a:11:
84:5d:47:96:1a:eb:44:30:29:ee:4e:9c:82:20:af:
44:ed:21:79:34:13:39:18:66:e1:5c:83:c2:f5:27:
e5:f0:f6:29:81:13:30:d9:ae:1b:6f:79:6d:15:7f:
67:ec:23:50:17:6e:35:0f:bf:5f:11:3e:5b:72:df:
d0:e4:e2:2c:4f:ce:f0:db:f4:7f:76:1e:d3:2e:14:
fd:dc:46:cc:91:20:e0:4c:b1:24:bf:b2:e9:d7:f2:
74:01:d4:51:c4:c8:a2:87:1b:48:1d:25:45:35:35:
ef:8f:ef:91:92:de:9e:c9:34:16:e3:90:af:12:cf:
a8:13:f3:d0:69:41:d1:89:07:cc:70:19:1c:8d:a6:
6a:f9:39:1b:4f:ca:d7:43:a5:e5:62:7d:a9:a2:89:
b1:c2:78:32:33:f5:a0:4f:15:d3:f0:a5:88:b9:a8:
7d:16:f8:95:80:92:52:5a:13:e8:dc:7b:a0:f3:c4:
89:c1:90:cd:6d:15:cf:d9:d9:75:9f:83:0b:8d:dd:
fa:71:f9:1c:b8:b6:81:d5:d4:55:3f:21:a7:5a:a6:
4b:9d:15:1d:e0:e6:ec:85:d0:40:b6:60:19:3c:8e:
13:9a:f7:c3:9a:51:aa:5e:5b:27:99:8a:58:b3:b9:
ae:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DC:75:22:8D:FB:A2:1F:4D:90:C9:A7:A3:A4:87:EA:64:2D:41:CA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/otx1Io37oh9NkMmno6SH6mQtQco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.234.0/24
Signature Algorithm: sha256WithRSAEncryption
47:1c:2c:d4:e8:f7:0f:eb:0a:5f:27:13:74:13:09:1d:63:36:
60:c1:c1:d9:d3:c6:d6:a3:92:b0:89:96:fa:8a:d0:05:b3:89:
0a:7b:bf:9b:3d:21:46:5b:3c:5d:96:f6:52:bc:41:95:c9:ca:
a8:c0:ce:38:a7:35:ca:34:92:0b:be:22:6a:99:a0:db:de:c1:
11:93:16:0b:af:50:f5:fc:a8:74:ec:a6:2f:28:5e:cc:b8:7f:
07:2a:59:f1:04:84:bd:80:23:5e:6d:c4:37:75:2a:b4:96:06:
f9:2a:33:b3:fb:8c:de:c2:1c:36:c4:85:8c:29:e4:c9:63:dd:
33:d4:de:4e:4d:c8:e9:a8:34:ec:d7:69:d4:9b:2b:f9:73:30:
0f:86:d4:29:24:95:53:9d:b5:2c:93:ba:55:f4:7a:d9:7a:b8:
aa:ed:f6:6b:a7:c4:ed:02:b6:9d:b8:69:df:fe:86:cf:ab:d7:
88:28:26:b2:74:9e:47:fc:4f:cc:4e:e7:2e:2b:54:bf:75:6c:
2a:4d:f2:fe:16:68:82:72:c1:54:9c:74:86:58:44:77:17:4e:
e7:57:f5:e9:58:d4:6a:14:7f:3a:21:ac:a5:f4:cd:d4:fe:b7:
33:cf:5d:25:d2:6d:9f:fa:3b:d8:1e:39:aa:11:c9:27:16:b7:
8e:f2:0e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:13:28 2026 by rpki-client