Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/ocHryKy0JCZoZXuWFydbiaPAXvA.roa
File: ocHryKy0JCZoZXuWFydbiaPAXvA.roa (raw, json)
Hash identifier: VJkfS4R1R0/kVOkQFygl/eqzEOXMlTWCdbkGDaHwbCQ=
Subject key identifier: A1:C1:EB:C8:AC:B4:24:26:68:65:7B:96:17:27:5B:89:A3:C0:5E:F0
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 019CAE9243841D899B0EE0978E28652E7625
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/ocHryKy0JCZoZXuWFydbiaPAXvA.roa
Signing time: Mon 02 Mar 2026 12:42:27 +0000
ROA not before: Mon 02 Mar 2026 12:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212953
IP address blocks: 45.10.151.0/24 maxlen: 24
45.143.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:92:43:84:1d:89:9b:0e:e0:97:8e:28:65:2e:76:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Mar 2 12:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1c1ebc8acb4242668657b9617275b89a3c05ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:48:9f:85:fe:89:50:78:1d:bd:f1:99:f3:07:
97:a8:62:a2:6d:2a:9b:30:31:44:f1:f2:4c:4f:25:
1c:3f:0f:8d:61:ce:5b:38:58:ee:96:39:54:5a:07:
23:0a:e2:e5:a8:c0:ac:1a:de:df:e3:5a:d3:d2:c3:
eb:f9:33:de:48:6a:56:40:cf:5c:85:36:96:0c:84:
6d:1c:45:72:19:03:50:53:84:64:df:df:84:57:90:
3d:d6:cf:7d:21:48:49:1f:d9:4e:08:6f:86:a7:f2:
68:42:bd:00:92:dc:29:66:06:17:95:d8:c7:8e:eb:
75:a8:35:2b:59:bb:d6:7f:aa:48:73:52:c1:b1:f5:
c0:3d:df:54:4c:d7:d7:5c:12:83:95:27:91:c6:2f:
12:48:57:d3:b9:f5:85:2c:89:14:65:d9:8f:6c:2a:
99:a2:32:d5:2f:35:ca:0d:8e:1b:f0:57:29:6c:cf:
6b:00:f2:b9:0a:f7:9d:bf:f0:e6:cb:d2:00:8e:39:
18:5c:2d:5c:b1:79:14:8f:a8:e2:66:06:15:eb:b3:
be:71:77:9a:4f:15:f3:4f:30:cf:60:3d:2b:4d:f5:
34:cb:30:b7:6e:ad:79:5a:b6:67:d3:49:ea:a3:bd:
10:c9:67:b7:82:d4:12:f7:51:64:9c:5e:58:d7:eb:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C1:EB:C8:AC:B4:24:26:68:65:7B:96:17:27:5B:89:A3:C0:5E:F0
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/ocHryKy0JCZoZXuWFydbiaPAXvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.151.0/24
45.143.98.0/24
Signature Algorithm: sha256WithRSAEncryption
61:97:a2:5d:d1:7b:ec:36:a6:ad:68:76:69:63:24:e0:ee:dd:
ba:c5:52:94:a3:7a:53:96:97:48:5c:b7:6e:5e:29:4f:1b:c6:
0a:75:b9:b8:4a:97:31:d3:29:00:0d:a3:e6:76:38:59:6d:ed:
6c:68:c5:91:b4:17:79:69:82:b5:7e:92:8c:9c:aa:56:31:dc:
0b:e7:99:90:63:3f:52:03:19:80:b4:21:25:55:3c:06:3b:dc:
e0:ee:d2:ac:f7:82:99:a2:a9:d0:1f:82:9d:09:50:b9:45:c7:
15:37:c9:c0:f0:c6:29:30:2e:4e:2d:fd:4c:8b:20:6d:b2:d5:
03:ec:2a:25:46:87:44:da:56:c2:c3:32:c3:9f:9b:40:45:ec:
e8:d2:b6:09:1c:48:c2:57:23:1b:34:dd:44:c0:42:ea:f5:fe:
be:06:70:ab:86:2b:ab:1f:81:44:25:23:15:8e:6c:bd:7f:8f:
70:28:47:0a:eb:57:64:80:8f:27:eb:1c:c5:75:6b:41:88:a4:
72:92:98:56:d2:9d:51:26:c2:39:ab:6e:f3:94:c9:7f:11:14:
3e:3d:05:39:63:2d:0b:35:54:c8:e2:42:ac:03:7b:2e:37:b4:
ff:18:d4:b9:ec:dd:77:fe:19:50:ba:82:a4:3b:4d:a9:88:5b:
d7:db:37:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 15:00:10 2026 by rpki-client