Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/0EGKe0995adtGodwLQUy75fQoGY.roa
File: 0EGKe0995adtGodwLQUy75fQoGY.roa (raw, json)
Hash identifier: jtkoh3ZOntntizZK4rrSnBbPnG8009BC0Rd+xgp9OMI=
Subject key identifier: D0:41:8A:7B:4F:7D:E5:A7:6D:1A:87:70:2D:05:32:EF:97:D0:A0:66
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 01A13A75AE9BEF4C1BA1A0ACD7B6714EDF75
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/0EGKe0995adtGodwLQUy75fQoGY.roa
Signing time: Wed 14 Oct 2026 12:49:13 +0000
ROA not before: Wed 14 Oct 2026 12:49:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201160
IP address blocks: 185.121.124.0/24 maxlen: 24
185.121.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:75:ae:9b:ef:4c:1b:a1:a0:ac:d7:b6:71:4e:df:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Oct 14 12:49:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0418a7b4f7de5a76d1a87702d0532ef97d0a066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8f:c1:8e:b7:05:b7:ca:5c:e6:b4:a2:33:97:
88:99:4d:b8:22:83:97:25:d3:a5:94:e7:30:84:78:
cd:c3:03:dd:78:a1:b2:80:af:a3:25:de:e9:4a:66:
42:bd:24:30:bd:62:18:4a:e8:40:61:6a:22:f0:f6:
71:39:f4:d3:cd:14:41:39:4c:b1:7d:34:49:6b:e2:
6f:ae:5b:2a:34:3d:57:58:92:08:71:9c:12:4a:23:
12:58:9a:b1:6f:0a:71:cb:0b:17:23:b6:57:04:34:
84:21:ae:19:d6:8d:72:de:2a:36:d9:41:34:9f:51:
b1:63:c2:f5:ef:42:03:82:43:2c:d7:b6:d5:41:76:
f3:b7:0f:d8:ba:24:7c:95:6a:c7:e6:f6:f3:06:9d:
05:c9:56:f7:00:21:1b:3f:2e:68:89:8c:5f:23:b8:
a6:db:02:ce:d8:05:32:55:01:68:b3:b2:c3:e9:2f:
27:7d:af:a2:37:24:09:5b:e5:52:75:6e:d9:60:62:
23:e5:d6:29:1c:62:5e:d2:a9:a8:7c:8b:68:87:c9:
74:65:85:ce:24:12:62:57:14:33:31:be:29:a0:11:
c3:52:27:69:ff:51:73:a5:2d:36:9a:79:3a:16:f6:
c1:06:5e:22:5d:63:01:89:67:32:fb:a8:da:6c:0f:
61:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:41:8A:7B:4F:7D:E5:A7:6D:1A:87:70:2D:05:32:EF:97:D0:A0:66
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/0EGKe0995adtGodwLQUy75fQoGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.124.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:37:e5:e0:9a:11:b7:0a:a3:f5:ee:33:d7:12:a2:09:a0:1e:
8a:ad:bb:10:4f:26:93:26:3c:bf:c3:0a:ab:96:20:7f:dc:77:
3a:3b:a1:d3:ff:44:9b:f5:f7:02:d2:f2:5d:5c:76:4e:81:21:
b7:97:bb:8b:b2:3a:c6:66:05:70:d5:15:14:5d:b0:04:7f:70:
c2:10:e5:96:db:08:dd:3e:f0:dc:52:4f:4d:a3:c9:d5:06:f0:
13:9b:eb:7a:d2:15:40:a8:58:55:1a:d3:73:ec:e8:2d:93:f7:
37:1c:7d:27:64:5a:e6:0e:3b:d3:77:99:59:f0:cb:c2:b8:b3:
14:db:4a:cf:b6:a7:ca:c7:1d:80:14:f6:0c:86:81:32:69:d5:
50:c1:17:c7:d3:ad:c8:14:86:b1:83:65:ad:4e:a7:15:7e:2c:
ad:e3:3e:6d:c6:e3:06:ed:af:40:f0:04:ae:32:9a:e0:52:71:
9e:0b:f4:2e:14:f3:04:17:60:bb:cd:09:f3:84:b1:41:7f:96:
75:41:93:67:d0:3b:0d:29:c6:9b:24:1c:af:d2:47:59:f7:54:
f3:bd:39:0c:f5:93:0c:02:19:d9:59:df:2a:59:87:83:03:c0:
4e:f8:6f:8c:3f:a4:bd:f6:c2:f7:95:9b:48:6c:0b:24:df:3c:
d6:06:06:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:23:30 2026 by rpki-client