Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/rOZu6wYLzhNpmg8j69cWttIEmiQ.roa
File: rOZu6wYLzhNpmg8j69cWttIEmiQ.roa (raw, json)
Hash identifier: yuT/NXTQJjp1YdXNP2jjlInGWMr7pc0nxgMJpIJbpWU=
Subject key identifier: AC:E6:6E:EB:06:0B:CE:13:69:9A:0F:23:EB:D7:16:B6:D2:04:9A:24
Certificate issuer: /CN=92477860477a5354b5a86965dd399e98987e590e
Certificate serial: 019F237600A5C70AB730B7BCEFF7CD9DFDB3
Authority key identifier: 92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/rOZu6wYLzhNpmg8j69cWttIEmiQ.roa
Signing time: Thu 02 Jul 2026 15:32:43 +0000
ROA not before: Thu 02 Jul 2026 15:32:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54253
IP address blocks: 81.126.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:76:00:a5:c7:0a:b7:30:b7:bc:ef:f7:cd:9d:fd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92477860477a5354b5a86965dd399e98987e590e
Validity
Not Before: Jul 2 15:32:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ace66eeb060bce13699a0f23ebd716b6d2049a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:6c:5a:33:fb:c4:8e:6d:64:1d:a3:e4:44:
f2:57:85:a5:37:52:83:b8:d5:b1:f6:cc:0a:b9:9f:
a8:19:7b:5c:21:33:01:f4:65:e2:7e:67:87:d4:e0:
d4:21:42:35:52:69:70:5b:34:5c:58:48:65:b1:6d:
d5:46:86:12:8e:16:0c:dd:30:92:b2:3e:b9:a1:98:
3d:a8:06:74:6d:ce:0c:21:1d:73:4b:06:d7:de:20:
7c:1b:20:57:c2:30:be:70:a7:0e:3e:1f:36:28:24:
27:b0:c4:92:21:7b:f1:d4:d5:10:45:ff:09:17:74:
8b:a4:8d:e0:e2:33:db:d5:60:ca:89:56:22:6f:7d:
d2:d3:3c:a5:bd:ca:1a:30:13:68:6f:fd:ec:49:02:
36:6b:75:a2:f9:f1:bd:85:35:07:0c:22:e9:45:97:
60:ec:62:0f:09:9a:92:98:d3:e7:5e:e8:b1:77:d6:
d3:a4:67:c3:4a:92:d8:5c:20:e9:82:19:c4:40:de:
90:42:bc:35:75:e6:16:24:f9:38:1a:4f:6c:60:3d:
d7:3d:ae:1b:01:3b:6f:db:94:e1:32:57:8c:70:0c:
24:7c:c5:2f:2d:b1:8b:b3:89:f1:db:19:3f:00:18:
ee:ae:13:75:cd:58:df:f7:e6:0f:59:15:6f:7e:38:
55:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E6:6E:EB:06:0B:CE:13:69:9A:0F:23:EB:D7:16:B6:D2:04:9A:24
X509v3 Authority Key Identifier:
keyid:92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/rOZu6wYLzhNpmg8j69cWttIEmiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.126.145.0/24
Signature Algorithm: sha256WithRSAEncryption
37:a9:69:80:21:25:9d:9a:0b:7c:ae:b2:19:53:e3:d3:f5:73:
f6:eb:25:81:ec:22:02:e0:63:9d:77:3b:36:eb:0d:15:da:0f:
e5:08:58:b7:81:e2:d9:ca:77:81:b1:13:9e:9f:59:28:b8:f8:
5b:4f:51:c5:0b:a7:1c:41:4c:5b:de:21:35:54:a9:03:53:42:
8d:96:eb:ac:3a:f9:83:01:33:3f:fb:14:5d:c6:7a:bf:1b:1e:
e6:fb:de:1c:07:c7:66:0f:88:57:25:04:7f:c8:45:a2:d3:26:
c8:f7:40:26:24:c9:3f:75:0b:3c:47:0e:55:5d:76:87:a6:a1:
24:ef:5c:21:9f:8b:3c:f9:7b:0f:4b:50:2f:7c:ba:9e:f2:75:
04:09:ce:e7:04:1a:4a:75:07:2a:9e:57:fc:41:16:ad:44:51:
2a:5d:d9:aa:f0:93:66:ac:51:e8:6a:95:33:08:1a:81:c2:3c:
ad:5a:fa:93:34:ab:4d:0b:df:18:53:33:b2:8a:f8:b9:47:44:
14:5e:ec:2f:60:ab:b8:cf:6b:5b:64:99:d6:9a:b4:4f:a0:63:
61:75:f5:a8:71:47:39:5b:18:10:65:82:91:9a:95:28:e0:50:
3d:71:fe:c3:d0:6f:be:de:c2:75:e7:4e:c2:dc:3a:b4:a8:9f:
70:ad:5d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 08:37:19 2026 by rpki-client