Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/oOlRZiuYjpMLF0jK_dJbfZZ5QCk.roa
File: oOlRZiuYjpMLF0jK_dJbfZZ5QCk.roa (raw, json)
Hash identifier: Y0slDomWPv72J+u0DqhSKeUxfVp6w0f8rRCwbTA+7E8=
Subject key identifier: A0:E9:51:66:2B:98:8E:93:0B:17:48:CA:FD:D2:5B:7D:96:79:40:29
Certificate issuer: /CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab
Certificate serial: 019FA88BFCAB79EDA2031EA255E878C96B2E
Authority key identifier: 2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/oOlRZiuYjpMLF0jK_dJbfZZ5QCk.roa
Signing time: Tue 28 Jul 2026 11:46:14 +0000
ROA not before: Tue 28 Jul 2026 11:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20973
IP address blocks: 81.24.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:8b:fc:ab:79:ed:a2:03:1e:a2:55:e8:78:c9:6b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab
Validity
Not Before: Jul 28 11:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0e951662b988e930b1748cafdd25b7d96794029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:81:e1:11:78:2c:b8:29:02:ad:c7:87:55:
23:31:e7:f1:de:f6:23:65:5f:f8:7f:20:87:d6:27:
4d:47:d5:99:e2:1e:d9:e4:d3:50:2f:a3:f1:c5:eb:
b5:fc:9d:36:0e:e6:01:c5:7e:48:06:f7:ea:cf:2f:
80:65:b7:15:da:35:8a:c4:28:ac:9d:25:5f:48:b5:
a3:a7:7f:6a:b8:85:2e:20:42:aa:b3:87:10:2a:cb:
c3:56:9d:e8:ab:6d:c6:a0:cf:65:14:40:d3:9b:b3:
87:b8:f1:1c:be:11:0d:23:37:f1:e3:4b:4d:27:1f:
3c:ea:79:d3:40:f4:4c:90:36:f2:b8:3c:9a:a1:e9:
ec:3d:48:96:bf:cd:89:0a:15:80:45:40:46:d7:c6:
2f:de:03:4e:0e:21:9f:cb:0f:32:90:3a:8e:03:33:
50:c5:5b:41:e4:51:73:4b:25:a9:09:b1:5f:24:5b:
c9:00:b2:b5:3b:82:70:00:ac:8e:43:4a:fc:a6:ca:
d5:51:7f:19:93:32:d8:67:2b:3f:4f:16:a9:bd:4d:
4a:7a:d4:4b:34:42:cb:14:ff:2a:aa:db:1b:04:17:
b2:85:71:b6:c4:70:f2:85:ca:fc:80:71:34:95:9e:
ed:56:bd:24:13:a7:1a:25:68:65:52:cb:7b:1a:1d:
28:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E9:51:66:2B:98:8E:93:0B:17:48:CA:FD:D2:5B:7D:96:79:40:29
X509v3 Authority Key Identifier:
keyid:2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/oOlRZiuYjpMLF0jK_dJbfZZ5QCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.24.160.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:2a:36:40:b1:66:0c:01:cf:b6:3b:fd:16:e6:d2:bd:6f:8e:
aa:85:e9:2e:9e:a6:a4:34:d1:91:c5:5a:6c:3c:96:a1:66:4c:
b2:58:c7:ab:d3:69:48:88:f7:93:29:d6:c9:b3:ad:9a:24:b5:
17:fb:8a:9a:85:b9:2b:83:86:09:18:c0:98:4f:08:a3:62:f6:
b2:3f:8d:b1:71:cb:81:2f:ec:e7:b2:b8:93:4e:7c:01:cb:cf:
f3:28:67:6a:da:77:5f:6d:b4:0c:58:ab:9d:ff:7d:a4:6b:b7:
13:62:62:17:fd:fb:93:7e:3f:e6:dc:01:9e:b0:82:f7:1d:b6:
ff:71:cd:09:87:08:33:ed:35:3b:18:bc:8a:3a:40:b1:55:0f:
5d:74:ac:5c:30:93:bb:0f:dd:3b:08:82:7a:94:31:af:86:84:
6d:bf:77:19:5c:c9:ed:6e:d9:1a:fb:47:99:6b:19:d9:a1:fe:
cd:34:2c:20:b8:d3:2a:8f:d9:6e:bb:4e:9e:96:1e:2b:9c:1a:
eb:11:62:f7:a2:67:9b:3c:3d:44:35:06:50:33:ce:54:19:6d:
43:9b:0d:a5:c1:4b:8b:43:7b:d8:5a:ba:99:69:f4:ff:17:9a:
70:ef:0e:e6:19:88:fc:4b:f4:3c:17:d6:54:54:e9:cc:28:41:
cd:c5:23:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:43:22 2026 by rpki-client