Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/o1blwiigqp6YD4PDrkIGxlhq134.roa
File: o1blwiigqp6YD4PDrkIGxlhq134.roa (raw, json)
Hash identifier: QUIARNJbrimiP7DYbWBfDRiKVAy6AubMKzNRC1Tgb40=
Subject key identifier: A3:56:E5:C2:28:A0:AA:9E:98:0F:83:C3:AE:42:06:C6:58:6A:D7:7E
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 01A13B83C4AD3A0DC025F56E6DE364F5CAA1
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/o1blwiigqp6YD4PDrkIGxlhq134.roa
Signing time: Wed 14 Oct 2026 17:44:13 +0000
ROA not before: Wed 14 Oct 2026 17:44:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:83:c4:ad:3a:0d:c0:25:f5:6e:6d:e3:64:f5:ca:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Oct 14 17:44:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a356e5c228a0aa9e980f83c3ae4206c6586ad77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:98:42:27:47:fd:2d:8f:a2:61:4a:fe:86:
88:df:db:0c:ef:b3:17:5c:d5:f7:fe:b5:4b:2b:a7:
84:cc:3a:33:a6:c4:d9:67:52:e3:e3:97:1d:bc:b2:
5d:77:5c:0a:d4:d2:6d:60:8d:dc:fa:a5:96:fb:b3:
85:2b:e5:c2:b3:a4:f2:1e:1a:4b:9a:f4:e3:67:e2:
b4:2c:96:97:2f:b6:07:8b:3b:bb:81:65:71:96:d7:
90:e1:24:eb:b7:38:83:0a:8c:2b:9d:1f:ee:1c:d1:
4b:38:74:53:9d:cd:2b:7b:65:5d:c1:2c:0c:31:8c:
3f:fb:51:da:8a:12:15:e8:43:88:d1:a1:b0:c4:9d:
88:38:e6:26:0a:9f:9a:77:83:bc:39:58:9d:0a:94:
06:10:43:d8:ef:b5:30:7a:d3:19:31:45:47:50:85:
de:ce:96:3c:35:09:dc:19:bb:b8:25:7b:18:c4:fa:
23:b3:d1:ee:2a:7e:ad:11:c3:05:77:09:77:50:d9:
62:67:c3:dd:d1:41:38:e7:ba:85:40:5a:e6:6b:a1:
ea:8c:d5:16:21:be:9d:5e:ed:d1:af:f1:9a:96:04:
63:42:92:6e:bb:e3:be:30:9f:fd:a2:78:22:7e:6e:
98:1d:28:c5:3c:01:17:57:39:a5:9d:20:77:1f:70:
8b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:56:E5:C2:28:A0:AA:9E:98:0F:83:C3:AE:42:06:C6:58:6A:D7:7E
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/o1blwiigqp6YD4PDrkIGxlhq134.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.42.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:58:07:69:f5:f8:c6:f1:09:c9:c8:fd:87:a8:ad:8b:29:5c:
26:76:15:29:fa:56:20:c2:f9:d2:a7:d0:f2:67:13:cb:48:1c:
2f:92:1d:0f:b7:79:d4:6e:65:3f:0d:f5:36:ce:9e:cb:a5:90:
1a:f3:57:62:5c:4a:18:11:18:cc:70:fa:f1:0d:65:41:27:c5:
d5:1a:af:a8:25:69:02:ec:93:39:fc:0a:49:0e:ed:ec:75:5b:
3c:54:29:ae:dd:49:7e:1d:15:e4:d0:79:b8:10:e1:56:0b:60:
fe:8a:8f:0d:96:d9:09:bf:80:cb:1f:12:4f:88:6f:e1:77:d9:
09:a8:8e:4a:7f:00:6b:54:b9:58:e4:cb:43:5a:d6:ea:de:c2:
04:7b:de:01:4d:9a:d2:28:62:95:91:d7:fe:42:7d:09:6b:04:
6a:f3:fa:06:f6:44:9c:00:ed:5c:a5:d3:62:c1:43:8e:cb:77:
40:c2:dc:91:fc:72:93:fe:fc:8c:ad:a8:0e:b4:43:a6:59:98:
9e:2a:97:20:7f:00:45:8d:3a:d5:9b:d4:ea:12:50:f5:eb:5d:
04:31:82:93:4c:9b:c1:b9:65:22:16:21:2e:a6:0a:af:a9:ae:
2e:2b:cc:1c:7f:3d:90:9e:07:49:7e:0e:7c:20:8f:23:b9:f2:
a0:fa:b4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:38:25 2026 by rpki-client