Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/0TOGoITQ9Ik_N8kBW5HDc1Ulpis.roa
File: 0TOGoITQ9Ik_N8kBW5HDc1Ulpis.roa (raw, json)
Hash identifier: xTzbRDANcY3RLwXHYz67DcVR+3jjeeccSY8zNXC372U=
Subject key identifier: D1:33:86:A0:84:D0:F4:89:3F:37:C9:01:5B:91:C3:73:55:25:A6:2B
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A14029BBF190A44E793BFE36BD90829150
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/0TOGoITQ9Ik_N8kBW5HDc1Ulpis.roa
Signing time: Thu 15 Oct 2026 15:23:59 +0000
ROA not before: Thu 15 Oct 2026 15:23:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209183
IP address blocks: 91.245.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:29:bb:f1:90:a4:4e:79:3b:fe:36:bd:90:82:91:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 15 15:23:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d13386a084d0f4893f37c9015b91c3735525a62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:5a:9e:22:83:2b:f3:e2:ba:46:35:9a:1a:
00:5f:73:79:b8:ee:5f:17:b6:ae:7e:60:ac:30:47:
4f:44:78:4f:36:22:1f:d3:8d:e8:c3:12:eb:90:c9:
78:18:c4:5f:ce:59:f6:05:a3:89:89:af:06:ff:56:
a0:eb:30:89:0f:46:18:be:75:9e:da:69:4a:12:46:
e8:8c:7b:6b:ad:cf:bd:ac:36:d7:2f:cb:c1:1f:28:
be:84:94:5b:c9:bb:a9:cd:b2:5e:2f:57:b7:a0:a7:
ce:07:52:c6:c3:c8:35:a5:d4:1a:06:ff:f2:12:e3:
1b:83:45:d9:5b:8b:24:bd:0d:04:24:06:76:8b:03:
4f:22:b7:59:86:a6:b4:40:7d:34:b5:95:63:93:c3:
87:35:c7:39:4f:8a:54:0d:f0:ee:8a:17:18:a3:21:
74:ef:c1:a7:67:87:b8:3f:9e:8e:95:b0:8e:c5:ea:
85:ae:cc:91:a0:55:63:e6:27:d4:5b:50:38:29:ff:
b0:03:7c:98:2b:0d:f9:29:1a:c7:9c:4c:7b:98:3a:
e9:d1:07:e5:8d:93:80:d0:4c:da:cc:b1:4e:e8:c0:
bc:f1:34:c4:c9:4d:77:00:99:d5:bf:be:26:81:58:
8f:af:df:0a:58:34:41:ee:93:60:9d:bc:02:79:5e:
bd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:33:86:A0:84:D0:F4:89:3F:37:C9:01:5B:91:C3:73:55:25:A6:2B
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/0TOGoITQ9Ik_N8kBW5HDc1Ulpis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.237.0/24
Signature Algorithm: sha256WithRSAEncryption
69:b5:39:75:3a:3c:00:9e:2a:90:ff:e4:93:ae:fd:f6:e9:24:
93:f2:e2:6c:49:0c:9e:cc:42:47:56:30:2b:10:73:d0:7c:b3:
84:9e:11:ed:0a:05:93:3e:cb:29:a8:a6:20:b9:c2:ba:5f:b6:
24:f3:f5:c0:4b:34:20:96:76:07:84:34:f8:57:5b:a6:f3:e0:
54:60:49:8d:f8:a7:1d:9d:3a:f3:25:23:0a:8e:f7:4a:12:67:
32:3f:1b:b1:7e:9d:9f:4b:5f:24:f0:80:69:35:d5:33:7f:91:
3c:7a:fb:13:c9:b4:da:b8:d0:bf:c5:69:d5:68:0a:6a:4e:9b:
8b:67:dd:24:da:78:e0:87:4d:c1:f3:be:01:88:d7:b7:be:68:
37:6b:0e:5b:62:9e:62:47:4a:f6:e1:a2:b3:1c:e5:72:61:89:
d5:ae:02:ce:fe:19:97:6b:8f:e1:8b:43:91:dc:20:37:79:4c:
2a:1b:5f:fa:ec:78:65:66:3e:f8:02:4c:ad:1c:e8:07:3e:19:
f0:ca:f5:1b:4d:13:93:76:e3:d3:7f:71:79:8d:68:1f:64:45:
0a:7c:39:d8:e1:3c:ab:4e:59:8c:71:1c:d8:3f:a8:6c:f0:c2:
8d:57:6b:21:f4:39:0c:3c:61:aa:50:ad:fc:84:28:7f:c8:b4:
29:a7:88:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 21:24:09 2026 by rpki-client