Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/okPZ0EMnwJL524YI5m6pf0dydug.roa
File: okPZ0EMnwJL524YI5m6pf0dydug.roa (raw, json)
Hash identifier: 12kkW5rSqZtsaJDVjPRmMQKFWipqt44KCipTx0aZSLg=
Subject key identifier: A2:43:D9:D0:43:27:C0:92:F9:DB:86:08:E6:6E:A9:7F:47:72:76:E8
Certificate issuer: /CN=60e3d9721533bb5f7685c78ec98df814fad5d67c
Certificate serial: 01A000D5D0474FF46B87547205CC15B3A31D
Authority key identifier: 60:E3:D9:72:15:33:BB:5F:76:85:C7:8E:C9:8D:F8:14:FA:D5:D6:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOPZchUzu192hceOyY34FPrV1nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/okPZ0EMnwJL524YI5m6pf0dydug.roa
Signing time: Fri 14 Aug 2026 15:13:27 +0000
ROA not before: Fri 14 Aug 2026 15:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 185.135.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOPZchUzu192hceOyY34FPrV1nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:d5:d0:47:4f:f4:6b:87:54:72:05:cc:15:b3:a3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e3d9721533bb5f7685c78ec98df814fad5d67c
Validity
Not Before: Aug 14 15:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a243d9d04327c092f9db8608e66ea97f477276e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:82:84:7a:2b:01:03:fe:1a:cc:a9:ed:4e:
d2:de:89:19:0b:f4:a3:0f:5f:6e:2f:19:a4:7e:7e:
13:5b:13:1c:5e:cf:8b:97:5c:fd:fe:72:a3:ee:b4:
58:1f:76:57:61:cb:0c:1e:22:6a:50:e6:d2:b3:d6:
b3:7b:7a:00:fd:68:d5:fa:9a:77:df:36:35:ce:a3:
a9:33:03:6e:8d:21:c0:0f:a2:93:22:a8:6a:e3:66:
68:0c:4e:ff:95:bc:0e:8c:5c:09:65:38:1b:3d:15:
c3:0c:80:c7:4e:33:11:2d:7b:b0:36:2f:26:90:46:
5a:af:90:53:2b:0e:f2:e8:50:56:23:34:89:36:6f:
46:fc:a4:f3:39:a7:24:27:7c:38:10:14:0d:c1:16:
d9:93:08:3f:4d:7e:d6:c5:89:fb:cb:ce:a1:94:34:
41:93:8a:f5:cd:99:e3:62:8c:b1:a6:9d:47:9e:e8:
0f:be:b3:6d:5a:0a:25:ef:1a:ab:0c:a2:1d:f4:a4:
39:b0:34:bb:8c:44:e4:ce:d9:c8:12:87:66:86:0d:
9a:d2:75:8a:0e:31:9e:d2:b5:91:5c:41:67:10:39:
36:ae:9d:98:d9:ed:d4:7c:e2:f9:1d:29:67:02:f9:
b6:bb:eb:44:b4:e8:ba:c6:87:fd:60:7f:15:b3:a0:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:43:D9:D0:43:27:C0:92:F9:DB:86:08:E6:6E:A9:7F:47:72:76:E8
X509v3 Authority Key Identifier:
keyid:60:E3:D9:72:15:33:BB:5F:76:85:C7:8E:C9:8D:F8:14:FA:D5:D6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOPZchUzu192hceOyY34FPrV1nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/okPZ0EMnwJL524YI5m6pf0dydug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.202.0/24
Signature Algorithm: sha256WithRSAEncryption
82:4b:e0:e1:4f:ac:7a:a3:7d:93:57:8c:73:81:36:63:ed:c2:
e6:ec:b2:24:25:bd:3f:1e:02:59:f7:60:9d:c1:d4:d5:83:d2:
ca:12:01:52:65:0c:4b:81:e9:06:48:1f:cc:6a:ee:79:a4:66:
04:9a:fa:ff:c8:14:56:d8:f7:18:18:7d:1d:aa:b6:8a:6f:c1:
cc:db:6e:e2:29:91:28:ba:91:dd:e9:a9:58:35:b9:1c:d2:b7:
00:85:cc:f5:fb:d8:86:14:37:02:f0:88:07:1b:27:3b:27:73:
60:c3:17:d9:6e:de:10:e1:60:b2:76:ec:3a:35:c0:8a:21:5f:
b9:5a:57:d5:82:84:ba:a5:ea:86:3c:dd:85:14:25:11:5d:2e:
50:26:96:2a:d6:6a:93:80:3c:74:f8:f8:5d:ca:fa:c0:ef:aa:
fa:17:d6:9f:f8:6a:49:60:09:e4:d6:3f:ba:a1:b8:f2:5b:72:
7b:84:c8:2e:b4:3a:18:31:ef:a6:fd:fd:b3:d4:75:6a:e0:db:
11:28:aa:9b:7c:dd:d3:fa:df:5f:3a:14:ba:87:bb:55:d2:49:
13:fc:dc:56:a4:c5:a5:e7:b5:10:4c:f6:76:a6:bb:ce:ed:be:
61:a7:d1:78:b7:a6:80:92:8b:27:95:3e:cf:dd:59:f5:50:ac:
bd:5a:bd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:48:19 2026 by rpki-client