Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/oXo9tqW2U3ZilsnPIpOKVL2cxF0.roa
File: oXo9tqW2U3ZilsnPIpOKVL2cxF0.roa (raw, json)
Hash identifier: YNstpNHH+sELANm+YEOoEvvtvy88II7+kUoKUYwTjIo=
Subject key identifier: A1:7A:3D:B6:A5:B6:53:76:62:96:C9:CF:22:93:8A:54:BD:9C:C4:5D
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F67E7A998802A318C7ED0D27CABA5824
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/oXo9tqW2U3ZilsnPIpOKVL2cxF0.roa
Signing time: Thu 01 Oct 2026 08:04:39 +0000
ROA not before: Thu 01 Oct 2026 08:04:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203331
IP address blocks: 82.144.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:7e:7a:99:88:02:a3:18:c7:ed:0d:27:ca:ba:58:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 08:04:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a17a3db6a5b653766296c9cf22938a54bd9cc45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2b:00:ab:dd:60:23:f1:a8:26:74:b3:80:ee:
1c:ee:d7:15:e1:35:f2:6c:71:e3:82:fd:28:18:03:
12:83:a3:48:19:ce:a3:ad:4f:e6:34:1b:32:ca:e6:
af:45:f1:ef:99:f3:e7:a2:08:cc:80:7e:fc:f5:14:
21:fe:1e:a8:4c:df:ab:ea:d8:40:33:2d:57:be:6c:
1f:d1:4b:d3:88:5b:b5:d2:9b:b6:8b:75:04:86:0d:
9b:dd:b0:f8:88:9e:59:4f:1c:bc:24:72:61:7b:f4:
f2:bc:9e:0f:f8:05:5d:32:dc:3d:74:60:3e:a1:86:
e2:7f:a6:12:07:7d:7f:07:ac:4e:c5:cf:7f:e9:f1:
66:b0:93:4d:d7:49:7a:cf:6f:a4:11:0c:1e:57:df:
ef:ce:55:56:71:22:6e:de:5a:16:e5:79:45:1a:d3:
8a:1c:d3:43:07:56:74:71:db:16:2b:cb:01:2e:d1:
b5:d2:06:80:3f:a3:9a:72:7a:d3:43:60:bf:fe:20:
6d:a2:71:53:22:79:4d:66:c9:20:5e:06:84:bf:d7:
ac:1c:2c:87:7d:a2:15:48:2a:ea:53:0a:73:a4:fc:
5e:02:ee:90:98:ea:30:11:28:61:54:ff:f0:2b:42:
23:66:b2:e1:be:8f:17:5b:7d:80:fe:79:b2:19:8d:
54:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7A:3D:B6:A5:B6:53:76:62:96:C9:CF:22:93:8A:54:BD:9C:C4:5D
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/oXo9tqW2U3ZilsnPIpOKVL2cxF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.144.186.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b3:79:38:2c:99:78:03:b5:4c:01:bb:2a:b6:9b:8d:4c:45:
3a:86:f1:ae:99:5e:45:c6:72:6c:e4:18:b0:02:1b:71:aa:cb:
e1:bb:15:68:a8:d3:08:fd:db:8c:ee:11:3f:fd:f3:91:ad:ef:
e7:b1:e7:3e:46:52:2f:48:88:17:c0:75:bb:52:a3:1c:d1:61:
36:97:84:e8:38:55:2e:2c:d9:da:93:7a:98:05:33:59:2c:4e:
26:6b:f7:b4:15:5f:f7:cb:ea:cd:12:37:d6:38:12:5f:46:74:
ea:12:32:00:be:a6:3e:0e:b0:00:a2:80:37:d3:cf:a8:c3:13:
9a:00:b6:86:4d:19:00:a4:46:58:70:9d:75:b2:c2:65:44:32:
aa:43:4a:dd:93:8c:a6:74:cb:98:6d:44:8f:bd:ea:56:64:9c:
e8:84:c4:5e:37:c3:6c:4d:73:25:f5:23:ca:23:ef:2a:6b:88:
5e:3c:1c:53:0d:5f:1b:8a:38:90:87:21:d4:43:5e:99:19:b9:
a0:85:c6:c9:ce:7a:2a:22:37:56:a6:78:18:b9:14:37:ad:aa:
d6:63:23:10:2f:d2:9e:91:fa:61:1e:45:15:a7:e5:9a:a1:69:
d8:b6:06:97:49:16:9e:c0:6c:7c:a8:8c:9a:dc:a7:5a:99:90:
be:8e:b9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 20:19:10 2026 by rpki-client