Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/1O_isFkbjRx7LiGPYoSMj9JokOc.roa
File: 1O_isFkbjRx7LiGPYoSMj9JokOc.roa (raw, json)
Hash identifier: 4HVwoJuUqC0gQjGWOCvx3iWAA/+auVoOqpkKqT2DOP8=
Subject key identifier: D4:EF:E2:B0:59:1B:8D:1C:7B:2E:21:8F:62:84:8C:8F:D2:68:90:E7
Certificate issuer: /CN=040c6496edb2c7ed76981805e954d72baf2d8e82
Certificate serial: 01A0D7E3A2F343257655E89A6C1ADE0A0BD9
Authority key identifier: 04:0C:64:96:ED:B2:C7:ED:76:98:18:05:E9:54:D7:2B:AF:2D:8E:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BAxklu2yx-12mBgF6VTXK68tjoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/1O_isFkbjRx7LiGPYoSMj9JokOc.roa
Signing time: Fri 25 Sep 2026 09:26:54 +0000
ROA not before: Fri 25 Sep 2026 09:26:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 176.74.24.0/21 maxlen: 24
185.184.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/BAxklu2yx-12mBgF6VTXK68tjoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/BAxklu2yx-12mBgF6VTXK68tjoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BAxklu2yx-12mBgF6VTXK68tjoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:e3:a2:f3:43:25:76:55:e8:9a:6c:1a:de:0a:0b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040c6496edb2c7ed76981805e954d72baf2d8e82
Validity
Not Before: Sep 25 09:26:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4efe2b0591b8d1c7b2e218f62848c8fd26890e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:17:4c:3b:74:49:97:61:dd:1b:e2:20:05:
9b:7e:dd:44:40:e4:2a:66:87:63:36:19:1a:20:0c:
0b:85:77:be:ed:6c:e9:d9:22:5a:b5:a2:1a:34:63:
63:8e:dc:0e:f1:cc:4f:19:c1:4e:e3:d2:60:cf:e3:
34:d3:05:72:01:23:83:b0:ad:26:60:1c:48:30:8d:
88:dc:23:a3:d0:65:62:20:33:70:12:06:69:f5:9b:
b2:e4:4c:49:cd:87:95:e0:c5:33:2b:dd:60:5f:b6:
9a:6f:15:ed:54:d7:be:db:d2:a0:f4:16:19:03:04:
a6:76:ad:39:e7:5c:c6:04:dd:db:0f:44:49:49:5c:
56:c6:b3:ab:73:63:67:e7:f4:8c:e4:f1:0d:84:11:
80:8f:dc:6a:f1:e2:b4:f0:24:0f:60:87:06:2a:96:
35:e4:75:c6:1f:57:e5:27:47:79:f0:f0:cd:63:5f:
34:e7:2e:21:22:31:13:99:ed:4e:0b:21:41:24:a6:
38:dc:81:ed:30:d0:17:1e:aa:6f:80:76:7b:99:6c:
7e:06:46:4d:e9:41:51:68:01:c3:d2:74:46:4d:6b:
6a:61:35:e4:4e:ce:59:c5:68:ec:62:ec:ac:d1:13:
78:b0:4f:ec:c3:68:01:b3:17:af:f3:57:fd:65:e6:
b5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EF:E2:B0:59:1B:8D:1C:7B:2E:21:8F:62:84:8C:8F:D2:68:90:E7
X509v3 Authority Key Identifier:
keyid:04:0C:64:96:ED:B2:C7:ED:76:98:18:05:E9:54:D7:2B:AF:2D:8E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAxklu2yx-12mBgF6VTXK68tjoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/1O_isFkbjRx7LiGPYoSMj9JokOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/BAxklu2yx-12mBgF6VTXK68tjoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.74.24.0/21
185.184.152.0/22
Signature Algorithm: sha256WithRSAEncryption
d4:56:9c:fe:73:30:d6:f9:37:ed:9f:40:c3:0f:fe:31:47:09:
3d:33:62:dc:89:76:1a:ae:06:c6:8d:0d:37:70:b1:d8:3f:6f:
e6:6c:5f:d9:49:bf:71:a6:2c:99:8d:44:52:c8:90:87:a7:38:
63:6c:c0:f2:76:6e:6c:1c:10:93:02:41:cc:f6:72:e3:18:34:
96:4d:1c:fe:9c:e0:cd:55:13:2c:0f:a5:f8:af:db:74:51:06:
93:79:99:6e:da:a2:95:e4:83:73:94:65:e3:31:fb:20:f8:ef:
84:ed:5a:76:c7:6c:29:ef:7f:b1:0e:d5:6f:ea:06:74:5d:90:
37:33:3e:14:9a:79:17:ac:1d:6d:40:03:62:4d:ad:dc:12:74:
69:28:e3:a9:f2:e0:f8:24:bd:78:9b:82:cc:00:20:ef:5b:1b:
c5:a6:88:ce:ab:a6:d0:f9:c7:5a:60:86:8d:ee:67:34:28:37:
f2:d6:f4:0d:ac:c5:4e:92:71:a6:39:fb:c1:89:50:cd:55:a5:
1c:d3:09:c5:32:7b:bc:04:de:37:3b:87:0a:88:13:aa:21:e5:
8d:96:9c:e3:a7:36:0c:6a:3c:42:5e:54:a3:dc:3e:d2:45:9b:
70:0a:11:0b:17:50:06:92:70:c1:7f:eb:7d:92:e9:8a:de:2f:
62:25:56:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:47:05 2026 by rpki-client