Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/oKoXOOmpzJrUGHUgP3nTP78DjrU.roa
File: oKoXOOmpzJrUGHUgP3nTP78DjrU.roa (raw, json)
Hash identifier: rhHYDFryCBw+zMaDvkTRZUKKLZTJQ6aJiRbn4bMPHzo=
Subject key identifier: A0:AA:17:38:E9:A9:CC:9A:D4:18:75:20:3F:79:D3:3F:BF:03:8E:B5
Certificate issuer: /CN=b6b77ec224c0b98ef979d0b0c5e587e4cb41f6c2
Certificate serial: 019DB9612D367FB9212AC14FF7A8F20CA992
Authority key identifier: B6:B7:7E:C2:24:C0:B9:8E:F9:79:D0:B0:C5:E5:87:E4:CB:41:F6:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trd-wiTAuY75edCwxeWH5MtB9sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/oKoXOOmpzJrUGHUgP3nTP78DjrU.roa
Signing time: Thu 23 Apr 2026 08:07:26 +0000
ROA not before: Thu 23 Apr 2026 08:07:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 31.171.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/trd-wiTAuY75edCwxeWH5MtB9sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b9:61:2d:36:7f:b9:21:2a:c1:4f:f7:a8:f2:0c:a9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b77ec224c0b98ef979d0b0c5e587e4cb41f6c2
Validity
Not Before: Apr 23 08:07:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0aa1738e9a9cc9ad41875203f79d33fbf038eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c9:d4:9e:be:39:80:cf:1c:d4:aa:a4:1b:13:
fa:b0:87:5d:3d:80:72:cd:2b:e4:e9:99:0c:d9:ba:
3e:20:95:05:f1:7f:14:d7:88:dc:77:9c:8a:d9:77:
11:02:df:9b:fb:a3:12:16:90:d9:b2:a4:e9:e3:8b:
13:4f:05:05:e3:e8:77:c3:13:30:5a:ac:b3:94:33:
99:37:ff:b3:9e:89:16:c7:e7:a9:d1:23:d1:31:d0:
7d:e2:02:77:c3:4a:7b:a6:81:e3:17:bf:ea:5b:58:
08:b0:71:41:a9:a4:7e:23:6d:51:55:31:26:f3:35:
8c:a3:3d:8d:c0:c4:fb:2a:40:1f:61:5b:9d:8e:72:
48:bf:b1:dd:a4:4a:bd:4f:b8:26:67:41:ef:59:ee:
95:ed:99:50:8e:8d:54:3f:1f:02:05:fd:ca:51:12:
9b:2f:d7:08:49:24:5f:7d:e9:53:a8:dd:e8:37:10:
b9:e1:e1:25:02:b5:ed:04:23:e4:0a:a8:a9:94:db:
38:d5:fa:6f:af:6d:80:9a:b1:4b:52:2f:37:4a:ab:
31:94:41:3e:b9:65:84:88:cd:f7:08:fc:4a:32:c0:
8b:f0:90:c6:e9:ce:83:67:63:24:c1:a1:9e:64:31:
f8:bd:03:40:09:83:ed:e1:2c:f2:f3:92:03:5a:cc:
14:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AA:17:38:E9:A9:CC:9A:D4:18:75:20:3F:79:D3:3F:BF:03:8E:B5
X509v3 Authority Key Identifier:
keyid:B6:B7:7E:C2:24:C0:B9:8E:F9:79:D0:B0:C5:E5:87:E4:CB:41:F6:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trd-wiTAuY75edCwxeWH5MtB9sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/oKoXOOmpzJrUGHUgP3nTP78DjrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.214.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e8:32:31:ce:ac:a3:25:fa:64:53:4a:cb:28:df:99:b8:00:
95:a6:e9:e2:71:2a:c1:81:83:53:8c:47:a4:9e:29:75:54:7b:
7e:47:66:20:95:6c:72:02:2f:ab:a5:6b:96:7f:a3:af:a1:76:
e5:c0:0f:3f:f4:d7:6f:5c:54:50:62:69:e6:ca:ee:b2:16:2b:
fd:a1:7c:58:a1:14:03:f1:72:9e:c9:c2:4b:5c:98:2a:14:74:
b3:84:55:88:35:12:f6:ac:e5:c6:fc:20:ab:46:7e:ae:63:88:
90:57:3e:83:40:1a:fd:ae:97:66:7d:ca:ec:82:92:2e:49:80:
05:d6:de:d0:c9:c8:9d:0c:85:09:7b:df:c0:c7:50:df:6e:32:
64:80:9a:d1:4d:f5:df:ec:fc:0c:c3:f8:82:67:87:a8:dd:34:
90:d2:9f:69:c9:12:6b:55:3b:fd:49:6f:b5:03:1f:0f:52:39:
99:e3:74:20:bb:66:42:35:b1:68:1d:10:16:74:32:bf:f7:e9:
ba:29:d0:92:c9:b9:c9:26:c3:d0:65:65:fa:69:7a:50:98:2d:
71:45:f8:14:e3:cc:93:8a:39:6e:7c:02:98:f8:c9:99:53:f8:
2f:fe:10:4a:e4:88:ed:bb:51:00:ce:69:71:c7:58:3b:35:a8:
b2:fc:bf:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ25YS02f7khKsFP96jyDKmSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2Yjc3ZWMyMjRjMGI5OGVmOTc5ZDBiMGM1ZTU4N2U0Y2I0
MWY2YzIwHhcNMjYwNDIzMDgwNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGFhMTczOGU5YTljYzlhZDQxODc1MjAzZjc5ZDMzZmJmMDM4ZWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMnUnr45gM8c1KqkGxP6sIddPYBy
zSvk6ZkM2bo+IJUF8X8U14jcd5yK2XcRAt+b+6MSFpDZsqTp44sTTwUF4+h3wxMw
WqyzlDOZN/+znokWx+ep0SPRMdB94gJ3w0p7poHjF7/qW1gIsHFBqaR+I21RVTEm
8zWMoz2NwMT7KkAfYVudjnJIv7HdpEq9T7gmZ0HvWe6V7ZlQjo1UPx8CBf3KURKb
L9cISSRffelTqN3oNxC54eElArXtBCPkCqiplNs41fpvr22AmrFLUi83SqsxlEE+
uWWEiM33CPxKMsCL8JDG6c6DZ2MkwaGeZDH4vQNACYPt4Szy85IDWswUfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKCqFzjpqcya1Bh1ID950z+/A461MB8GA1UdIwQY
MBaAFLa3fsIkwLmO+XnQsMXlh+TLQfbCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHJkLXdpVEF1WTc1ZWRDd3hlV0g1TXRCOXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC82MDRhNTMtYzY1OC00ZWYyLThjZWIt
ZDdhODI5Y2U3NmU3LzEvb0tvWE9PbXB6SnJVR0hVZ1AzblRQNzhEanJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC82MDRhNTMtYzY1OC00ZWYyLThjZWItZDdhODI5Y2U3NmU3
LzEvdHJkLXdpVEF1WTc1ZWRDd3hlV0g1TXRCOXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH6vWMA0G
CSqGSIb3DQEBCwUAA4IBAQAf6DIxzqyjJfpkU0rLKN+ZuACVpunicSrBgYNTjEek
nil1VHt+R2YglWxyAi+rpWuWf6OvoXblwA8/9NdvXFRQYmnmyu6yFiv9oXxYoRQD
8XKeycJLXJgqFHSzhFWINRL2rOXG/CCrRn6uY4iQVz6DQBr9rpdmfcrsgpIuSYAF
1t7QycidDIUJe9/Ax1DfbjJkgJrRTfXf7PwMw/iCZ4eo3TSQ0p9pyRJrVTv9SW+1
Ax8PUjmZ43Qgu2ZCNbFoHRAWdDK/9+m6KdCSybnJJsPQZWX6aXpQmC1xRfgU48yT
ijlufAKY+MmZU/gv/hBK5Ijtu1EAzmlxx1g7Naiy/L+I
-----END CERTIFICATE-----
Generated at Mon Apr 27 15:43:40 2026 by rpki-client