Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/pa3opz9FEVN3xgZaujMzqrRl8YI.roa
File: pa3opz9FEVN3xgZaujMzqrRl8YI.roa (raw, json)
Hash identifier: OetN7xHdNvnXLgbDqc0M0UgvEidreg3kIK2Q4ktbaCM=
Subject key identifier: A5:AD:E8:A7:3F:45:11:53:77:C6:06:5A:BA:33:33:AA:B4:65:F1:82
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 01A03D8AE55834E6C9D36019D16390E0A3B6
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/pa3opz9FEVN3xgZaujMzqrRl8YI.roa
Signing time: Wed 26 Aug 2026 10:08:27 +0000
ROA not before: Wed 26 Aug 2026 10:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 84.236.189.0/24 maxlen: 24
88.148.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:8a:e5:58:34:e6:c9:d3:60:19:d1:63:90:e0:a3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Aug 26 10:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5ade8a73f45115377c6065aba3333aab465f182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:1d:9a:dd:c0:92:a1:54:aa:68:22:d9:fd:
fa:a8:38:15:8c:7a:83:0e:9c:57:b9:71:e6:4e:6e:
4f:b7:db:0c:93:10:87:18:b1:08:56:53:a4:5b:b1:
3c:a8:13:ca:8c:a4:fb:13:5d:68:83:3b:a3:43:c1:
df:4e:de:17:1f:51:53:63:67:0f:92:12:2c:15:56:
22:f8:ce:32:79:e8:e5:1f:0c:c3:53:fd:2d:e8:cb:
89:21:ff:a7:7e:06:80:34:e1:6d:94:a7:01:78:98:
c9:3c:41:b0:f7:f2:e7:50:5f:66:41:7a:f3:aa:d7:
59:52:b5:cf:f1:97:95:af:2b:59:66:8d:e3:41:df:
af:42:11:b4:1f:fc:37:8f:2d:f5:c8:41:17:20:81:
8f:7a:7f:f4:95:05:de:a2:ac:3c:8e:e4:f0:b4:89:
89:c2:44:8d:f0:29:0a:e5:7b:e2:d4:4b:5d:a1:a4:
6f:09:49:a8:04:69:90:a7:46:df:59:7d:0c:1b:49:
e7:7e:b7:61:cc:e2:d8:53:9d:da:0c:69:b7:a0:aa:
3a:ce:1b:a5:17:5b:af:1d:27:dc:66:80:e5:b1:a3:
8b:cd:8f:28:83:9f:5e:68:25:19:3a:15:02:77:9e:
f1:30:7e:d0:cf:3d:0d:98:8c:3e:66:b5:b3:c6:4f:
15:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AD:E8:A7:3F:45:11:53:77:C6:06:5A:BA:33:33:AA:B4:65:F1:82
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/pa3opz9FEVN3xgZaujMzqrRl8YI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.236.189.0/24
88.148.34.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:bb:3f:fd:0f:2b:0f:7a:b3:94:59:9e:f0:08:90:f5:eb:c9:
33:1b:9d:7a:b1:ab:8c:10:22:11:bc:25:01:1e:c7:20:60:27:
5c:14:59:06:08:09:f9:a3:aa:8a:8d:b5:d9:a4:10:cc:3e:2d:
32:9a:06:62:fb:59:73:e4:f0:7e:dd:fe:97:95:0f:4a:05:00:
e5:3f:d2:5e:e8:b2:b5:b6:3f:36:9c:1d:27:39:26:9a:03:b2:
30:90:2d:65:f0:59:5a:47:3d:4c:2c:63:40:c3:26:9b:60:3e:
3b:85:b9:c9:69:88:06:57:fa:c2:e5:93:d4:7f:37:b9:db:da:
c1:46:6e:50:25:7a:39:7e:c8:9d:64:dc:dc:4b:d0:32:9c:e0:
6e:6d:9f:cc:5d:09:45:dc:b4:78:8e:f6:2d:5d:85:b1:f2:3d:
45:51:0f:0d:55:48:85:91:34:ef:06:3c:66:fd:6a:b1:9d:ba:
c3:e1:a2:04:93:ec:34:e0:00:09:81:ea:95:5d:37:52:87:bb:
55:63:f7:c3:b3:db:1c:aa:20:d5:3d:8f:a9:b5:1a:8c:52:6d:
20:4f:47:90:6d:1a:78:22:ae:38:fe:b6:b3:b3:4a:d3:db:4f:
c7:64:37:19:af:90:1b:7e:1c:f4:5d:79:12:6b:e1:98:ee:5c:
5d:dc:c2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 05:16:35 2026 by rpki-client