Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/0OIw04jA-6UF-ERijY-2ggVUcew.roa
File: 0OIw04jA-6UF-ERijY-2ggVUcew.roa (raw, json)
Hash identifier: qniIDqAv7/iTzkZINsqzjZpUIYWaCznnn1tfp7FuJh4=
Subject key identifier: D0:E2:30:D3:88:C0:FB:A5:05:F8:44:62:8D:8F:B6:82:05:54:71:EC
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A125106A8E6CF346AFA2B092453C8DD7CB
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/0OIw04jA-6UF-ERijY-2ggVUcew.roa
Signing time: Sat 10 Oct 2026 09:06:35 +0000
ROA not before: Sat 10 Oct 2026 09:06:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218911
IP address blocks: 194.163.71.0/24 maxlen: 24
212.224.6.0/24 maxlen: 24
217.172.168.0/24 maxlen: 24
217.172.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:10:6a:8e:6c:f3:46:af:a2:b0:92:45:3c:8d:d7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Oct 10 09:06:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0e230d388c0fba505f844628d8fb682055471ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:57:7f:cb:9e:8f:f8:ed:b2:d8:9c:d1:23:8e:
2d:d3:e4:eb:e3:1f:29:7f:55:5b:ee:2e:58:66:ec:
b2:7e:a3:71:cd:0a:e4:6b:ae:2b:14:b5:1e:bd:75:
8b:43:12:1e:f0:85:27:ae:5e:5e:2c:2a:46:30:cb:
0a:e1:60:d5:24:72:59:a9:c8:3c:80:77:e5:a6:ee:
3e:50:4a:ce:eb:1c:03:4b:30:b9:6c:6d:6c:92:96:
40:07:f1:28:84:a9:54:0d:4d:58:bd:10:eb:ca:9b:
d7:4d:af:c4:c3:63:b6:e3:47:8c:45:a8:6e:8a:13:
4d:bf:9d:c6:49:8e:01:4c:f5:89:9e:46:cf:6d:27:
1f:65:f7:19:4f:ba:b1:dd:37:e6:9d:96:b8:8d:f2:
58:f0:1d:7e:b7:5d:9c:2e:fe:92:16:6c:22:53:fe:
b9:15:2c:e3:9c:6c:ec:8a:8b:65:c8:84:ee:eb:e4:
e8:c1:9e:5a:20:20:91:c9:a9:34:95:14:16:5d:ce:
bf:fc:8c:a7:1e:a6:e9:c4:ae:07:a2:fc:70:30:09:
ef:36:c5:05:8e:b0:08:86:c3:9c:40:ac:24:0e:c8:
71:96:cb:60:93:d5:bf:be:6e:2c:3a:b8:dd:4f:cf:
af:ea:f1:0d:a1:29:2b:b6:b7:ed:8e:d9:94:03:76:
94:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E2:30:D3:88:C0:FB:A5:05:F8:44:62:8D:8F:B6:82:05:54:71:EC
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/0OIw04jA-6UF-ERijY-2ggVUcew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.71.0/24
212.224.6.0/24
217.172.168.0/23
Signature Algorithm: sha256WithRSAEncryption
59:cb:19:c9:b8:d0:8d:35:db:9c:ee:b7:40:dd:19:62:7f:ed:
b0:58:74:a8:c8:d0:a5:e7:0c:e4:f2:c9:9e:ef:27:49:6d:b6:
74:dd:b1:05:1b:5b:a5:55:55:d9:e0:9b:08:08:41:cf:13:76:
11:e1:1a:22:fd:3e:30:5f:9f:27:ff:0d:bd:fb:2c:da:27:34:
fa:24:bb:50:3d:ea:c7:09:37:cf:2c:ba:57:93:15:67:aa:8f:
21:c3:72:e1:e3:e6:12:f9:1e:88:7d:35:28:78:74:14:79:33:
e7:40:08:75:76:80:50:f0:ad:60:fb:ad:1c:85:10:10:3e:3e:
ee:37:22:c5:ef:d1:a1:ba:1f:19:9c:9c:6e:ad:a9:66:93:2e:
84:01:c7:55:9c:36:a4:0e:cd:03:32:a4:e4:3d:51:c6:10:ca:
93:3c:ed:7e:1a:9b:20:7c:40:0d:03:ad:3a:66:10:c1:fb:fb:
62:2e:cf:b9:12:0f:2c:11:1a:ee:16:9a:18:a2:d6:b9:b5:47:
c1:7d:56:81:1a:e6:fc:39:28:3d:8e:4c:ae:c1:4f:21:ec:fb:
de:fe:e9:10:60:68:d1:5c:ea:40:dd:7b:0b:a4:56:20:af:de:
1d:ad:4a:30:34:d7:92:28:fd:a0:aa:5b:d3:c0:70:8d:8f:94:
1a:b1:f4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:23:43 2026 by rpki-client