Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/oAdWlO5aBrB8akL1Srt464NTbzU.roa
File: oAdWlO5aBrB8akL1Srt464NTbzU.roa (raw, json)
Hash identifier: +Wwx9cEYa9sfdNB3CoTm0+tvHRyKKkaoFo3waMo/ums=
Subject key identifier: A0:07:56:94:EE:5A:06:B0:7C:6A:42:F5:4A:BB:78:EB:83:53:6F:35
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F67BBB1F11909A83195258F332A830EF
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/oAdWlO5aBrB8akL1Srt464NTbzU.roa
Signing time: Thu 01 Oct 2026 08:01:38 +0000
ROA not before: Thu 01 Oct 2026 08:01:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211595
IP address blocks: 79.120.220.0/24 maxlen: 24
82.141.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:7b:bb:1f:11:90:9a:83:19:52:58:f3:32:a8:30:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 08:01:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0075694ee5a06b07c6a42f54abb78eb83536f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:13:e3:d1:d5:33:71:3c:20:f9:45:67:e0:
22:86:b6:d8:ce:38:87:83:8d:b4:a9:ca:f2:6e:86:
69:00:54:ff:a6:17:75:29:dc:d3:77:47:0c:d3:5a:
09:d4:2e:93:00:8f:c9:09:9f:b0:c9:a9:ca:5b:3d:
bd:6d:d5:de:32:17:2f:01:0f:d1:5f:db:22:e1:99:
19:25:63:ad:be:dd:a5:36:93:8c:f4:fb:16:81:e1:
95:65:1d:4f:1b:9d:51:53:bf:19:d6:d7:42:f9:a2:
ea:3b:23:0f:a6:de:2e:13:21:2a:ea:0a:24:90:6a:
88:b5:35:73:80:3a:e1:d1:2c:da:5b:1b:16:c5:bd:
6d:4d:e3:3b:39:99:7a:f6:fb:23:a6:8b:7f:4e:14:
36:ca:7b:7d:11:ba:88:e6:d8:12:04:39:82:f9:26:
19:e9:a7:a0:67:40:ec:77:27:5c:b0:2e:4e:a3:b5:
e2:ce:43:b9:33:e1:7b:b7:63:db:db:c8:e7:cb:36:
99:25:b7:ae:a8:96:fd:13:9e:a0:28:5f:69:e7:50:
f8:46:09:9b:7c:0c:c0:83:52:d9:76:0e:4e:07:39:
7f:13:bc:f7:c3:45:57:b9:fe:09:5b:63:5f:ba:c6:
c5:1b:c4:1d:f4:18:fb:47:62:c8:59:3f:4c:02:d1:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:07:56:94:EE:5A:06:B0:7C:6A:42:F5:4A:BB:78:EB:83:53:6F:35
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/oAdWlO5aBrB8akL1Srt464NTbzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.120.220.0/24
82.141.139.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:4d:a4:00:e3:9d:26:9d:b9:2e:3e:cf:f0:cb:37:af:6e:62:
86:3c:93:74:5b:a6:fe:87:27:25:1e:cf:3d:df:92:8c:f8:f1:
e0:17:bf:95:dc:ab:e9:63:61:f7:20:29:ca:e6:15:a1:a7:5e:
63:f5:0b:3d:76:db:06:36:e3:3c:02:25:d7:c0:98:c0:25:45:
a8:c0:54:70:8a:f1:f4:bf:ce:79:2e:5d:cd:eb:de:55:3e:79:
0f:0b:ce:ca:ed:e6:8b:eb:1a:45:17:68:6c:5e:c8:f8:a1:f7:
22:d8:dd:a7:af:72:ed:0f:a5:11:c5:c4:d8:0a:b6:d6:6e:f9:
04:1d:bf:36:03:b0:41:a6:e7:95:1c:55:b4:9e:59:2d:f9:3c:
b7:7d:46:e0:3b:bc:5a:d6:f9:b7:1d:0e:19:0c:6d:76:81:84:
30:d5:9e:84:0b:bb:45:83:84:27:93:30:c3:00:93:d1:3d:8d:
b4:fa:44:37:8e:e2:25:31:65:50:65:02:31:b2:78:74:49:93:
82:c8:12:27:6d:7e:76:a0:05:50:d2:ab:83:ef:59:6c:c9:8c:
91:71:19:35:8d:7f:f3:8f:3f:28:e3:b9:d6:fc:fb:31:a9:93:
9a:df:17:d5:6d:b3:70:34:5b:63:81:42:b6:be:e2:43:a4:87:
e2:0e:62:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:41:14 2026 by rpki-client