Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/odGmnWHV8DvWoy1JIU0WX6KSpRQ.roa
File: odGmnWHV8DvWoy1JIU0WX6KSpRQ.roa (raw, json)
Hash identifier: KVh++uKmrCKdQJxhd1HSXSf6Faxjd8tG0oNOioQCVgk=
Subject key identifier: A1:D1:A6:9D:61:D5:F0:3B:D6:A3:2D:49:21:4D:16:5F:A2:92:A5:14
Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial: 019DBA14A01CE56DDF90B1E58799A47AE2A5
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/odGmnWHV8DvWoy1JIU0WX6KSpRQ.roa
Signing time: Thu 23 Apr 2026 11:23:26 +0000
ROA not before: Thu 23 Apr 2026 11:23:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21266
IP address blocks: 80.90.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ba:14:a0:1c:e5:6d:df:90:b1:e5:87:99:a4:7a:e2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Validity
Not Before: Apr 23 11:23:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1d1a69d61d5f03bd6a32d49214d165fa292a514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e9:70:e2:35:fd:bf:28:37:38:cb:ea:0c:ed:
c9:8c:9c:18:3e:59:4b:8c:c0:05:ed:85:ac:85:51:
2d:80:dd:aa:39:7a:a6:e1:63:78:bc:6e:ad:9d:cc:
0c:52:2d:57:50:7f:67:97:d2:32:4f:ef:78:be:0a:
95:f6:00:a6:36:d2:e3:aa:d3:33:8e:bd:c2:e0:a2:
02:3b:cc:e3:4a:14:00:31:50:07:d9:9c:f7:f4:42:
c1:4b:7f:cb:0c:92:99:7f:8a:6a:1a:51:5f:c6:e4:
19:ea:4e:07:67:62:b1:2d:a0:af:f5:75:bf:54:c3:
c5:a4:b7:32:8c:01:ca:30:08:7b:1d:0d:29:3f:c1:
e2:98:ab:fd:a3:ad:fc:5f:14:f9:e5:60:e4:b5:81:
f1:05:0b:b6:6b:03:00:5f:6b:38:fb:57:a6:44:94:
ef:08:70:d4:f9:90:1c:86:d1:e7:80:aa:c4:b4:f2:
52:cf:19:a2:47:ec:4b:05:bb:3f:69:ba:48:88:47:
fc:3d:bd:e5:f7:2b:a1:e5:0d:3e:04:65:13:d7:b7:
58:11:66:19:0a:47:e9:99:38:6b:4c:31:7e:48:8e:
09:be:04:0b:f5:57:04:f9:b0:a8:c4:da:ff:67:62:
77:bc:03:b3:86:ea:30:d1:a6:c1:3d:70:15:6a:d6:
ac:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D1:A6:9D:61:D5:F0:3B:D6:A3:2D:49:21:4D:16:5F:A2:92:A5:14
X509v3 Authority Key Identifier:
keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/odGmnWHV8DvWoy1JIU0WX6KSpRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.65.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ce:9c:49:9a:b6:c8:9f:f0:c0:98:b8:6b:81:3c:c9:77:d4:
ef:ff:94:85:0b:02:a3:d5:2b:7d:c4:48:1e:1a:b8:0d:a5:66:
e6:f9:10:df:fe:ec:00:cf:5a:f4:86:e9:be:f2:6e:46:e1:76:
71:10:b2:6a:9e:6a:34:28:87:45:48:02:69:fe:de:1c:b3:66:
3d:c2:82:84:06:f4:bc:8b:9d:ce:95:64:45:75:83:c5:98:00:
1d:a0:a0:c3:c5:9a:5d:61:f9:0f:cd:9a:de:5c:22:67:e8:b6:
77:bc:ef:56:d7:af:d3:e0:68:c1:7c:fd:40:4f:3b:c7:cd:14:
ab:74:2c:a2:91:1e:3b:25:e3:91:ec:e3:30:1f:26:5b:a4:74:
d1:81:63:de:7b:85:a7:a6:81:b8:86:47:ea:c0:31:b5:ba:14:
75:4b:c0:3f:f1:ad:6c:f9:95:70:84:9c:2d:02:eb:b0:2d:7e:
f4:f0:4c:7c:01:d0:d6:91:26:1b:7b:ab:08:c6:76:5b:f5:2a:
65:9d:c3:ae:b5:c6:1c:7a:cd:61:12:40:6e:0a:74:af:78:c7:
28:dd:87:f7:2b:46:b1:2e:d9:9a:4a:63:62:0a:d4:ee:1b:db:
26:5f:be:77:41:1b:ad:43:7a:90:01:7c:5f:2f:b7:8f:11:8b:
18:a6:e4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 23:42:44 2026 by rpki-client