Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/oPRftB4EZtrsQBIZftaGLH2JImI.roa
File: oPRftB4EZtrsQBIZftaGLH2JImI.roa (raw, json)
Hash identifier: bS7NKvEIFKjKdH8JbKNy6+4FrYZVsFmLR+QRWSJr1d0=
Subject key identifier: A0:F4:5F:B4:1E:04:66:DA:EC:40:12:19:7E:D6:86:2C:7D:89:22:62
Certificate issuer: /CN=60c6fb447aed726d2ef931a4296444456262a7fa
Certificate serial: 019F23694131907BF3E7528E95F32C25AF7A
Authority key identifier: 60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/oPRftB4EZtrsQBIZftaGLH2JImI.roa
Signing time: Thu 02 Jul 2026 15:18:48 +0000
ROA not before: Thu 02 Jul 2026 15:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209194
IP address blocks: 45.94.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 06:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:41:31:90:7b:f3:e7:52:8e:95:f3:2c:25:af:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c6fb447aed726d2ef931a4296444456262a7fa
Validity
Not Before: Jul 2 15:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0f45fb41e0466daec4012197ed6862c7d892262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:11:90:f0:1a:7b:82:42:3f:9a:9a:43:ef:6b:
c9:84:03:a4:e7:7d:7f:7a:49:2e:cf:51:90:f8:b9:
5d:e3:67:c5:e8:ce:da:bc:ae:94:bc:24:d3:cb:00:
05:fb:c0:59:15:70:2f:db:a4:93:6b:9d:d8:b8:01:
3a:43:0c:44:7b:75:22:ff:78:bb:62:1c:62:60:20:
06:9c:2b:11:d4:e6:c8:fe:4f:0c:8c:d9:d4:76:86:
06:8c:9b:e8:40:8c:86:2c:4f:69:95:fd:4a:86:df:
fd:27:82:5e:88:fd:c0:e9:1a:6e:57:44:cb:f8:9b:
75:56:ab:73:60:8a:f8:3f:9f:76:69:a4:d5:a1:dc:
2d:2d:9d:6f:a5:50:9d:5e:55:4c:2f:9f:4f:01:da:
78:01:19:60:b7:e0:3c:24:11:2a:fb:5d:d3:f5:d4:
fa:37:88:53:b2:e7:05:85:10:a5:6b:a8:a6:34:75:
19:b7:f0:85:8c:dd:73:dc:89:c9:aa:1e:b6:cb:91:
51:e6:d0:ca:60:fc:3b:43:5d:03:2e:0b:e5:4d:45:
96:5b:5b:ca:ef:bd:be:d2:48:62:03:53:ff:b4:7f:
4c:8d:d2:93:14:cf:90:fb:99:de:39:f7:62:d3:f5:
22:dc:f6:ab:b9:63:95:27:43:08:e8:59:c4:2c:05:
97:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F4:5F:B4:1E:04:66:DA:EC:40:12:19:7E:D6:86:2C:7D:89:22:62
X509v3 Authority Key Identifier:
keyid:60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/oPRftB4EZtrsQBIZftaGLH2JImI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.55.0/24
Signature Algorithm: sha256WithRSAEncryption
41:99:85:f5:51:46:20:fd:11:a1:c0:f5:ba:ff:b3:62:b8:1d:
9a:05:a2:ce:b6:35:93:35:73:24:3f:91:06:34:ab:75:44:90:
10:1d:76:d3:0c:e4:24:c8:ed:08:2c:4a:de:af:e3:31:39:8d:
66:84:55:38:fc:6e:ae:5e:72:a9:77:e5:21:03:d0:8e:7c:e5:
60:86:ca:a5:af:7d:cc:cd:b5:59:71:ac:74:36:05:79:c0:c4:
cd:d1:e7:fb:5f:76:45:41:0e:e9:98:92:96:c5:65:81:55:01:
3b:8c:2e:9c:bc:87:cd:44:41:39:23:16:03:d1:ce:80:d7:42:
28:dd:dc:2f:ba:c6:ab:e2:bd:25:70:49:9a:d3:b1:ba:c2:93:
c5:98:d4:9e:1f:65:49:68:95:b3:1d:9c:f0:7c:48:e9:ea:c4:
ea:65:de:7b:b5:98:8f:0d:c3:a1:fa:f7:db:f8:f0:6a:e0:c6:
f7:da:ce:19:a2:22:33:58:d5:d1:a9:c2:98:13:ed:15:84:c0:
db:3b:03:36:3d:57:fd:db:d4:fa:4f:98:ff:b4:9b:45:29:12:
55:f7:a5:1b:5c:3c:36:bc:b7:df:06:62:40:a0:25:9a:97:2e:
5e:d7:db:47:57:4a:f7:71:94:22:83:18:d8:60:8c:79:8f:33:
26:1a:b7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 10:49:16 2026 by rpki-client