Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/CO7Ox0PVxfk8C93gOlEz1A8FA0Y.roa
File: CO7Ox0PVxfk8C93gOlEz1A8FA0Y.roa (raw, json)
Hash identifier: xO4XMc+Iixlm6V1Zj/0ssIv0dZqo+/v01kJ8ncp7WJw=
Subject key identifier: 08:EE:CE:C7:43:D5:C5:F9:3C:0B:DD:E0:3A:51:33:D4:0F:05:03:46
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A0425A9E35D76837A57119A41802D1941D
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/CO7Ox0PVxfk8C93gOlEz1A8FA0Y.roa
Signing time: Thu 27 Aug 2026 08:33:50 +0000
ROA not before: Thu 27 Aug 2026 08:33:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 272013
IP address blocks: 181.41.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:5a:9e:35:d7:68:37:a5:71:19:a4:18:02:d1:94:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 27 08:33:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08eecec743d5c5f93c0bdde03a5133d40f050346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:22:13:af:06:23:64:bf:95:b0:a7:ce:6e:f7:
da:12:4f:93:e9:a4:8d:be:11:9d:2d:6a:a4:c3:ef:
c3:e4:81:1d:60:0e:7c:4d:ff:2d:60:cf:e5:ec:f3:
41:99:6e:23:4c:20:c2:b3:65:43:32:93:52:e9:10:
a6:40:8a:fb:00:48:a7:e1:f3:e1:2f:0b:54:c9:29:
7a:76:52:43:d1:d9:01:1a:fa:e4:81:19:fd:e0:82:
24:f7:49:79:d1:36:c2:8e:fb:df:56:e7:66:4d:2c:
c2:dc:d1:0a:f2:52:a4:82:4f:20:60:d0:77:02:20:
02:21:6f:a3:2c:75:e4:4e:a3:2c:57:51:2d:44:ba:
4e:46:9c:50:cd:a7:86:25:11:be:88:c3:61:04:cb:
5c:88:a8:06:6b:58:17:9b:1e:6a:a5:90:82:57:60:
3e:35:e0:8d:36:f1:21:28:b6:fa:fa:4e:19:78:bf:
d5:5f:96:dd:0b:ab:11:58:06:18:e5:36:a1:69:18:
6a:8b:94:27:8b:82:d2:b9:1f:24:71:c8:00:c0:90:
93:f5:64:56:b0:01:ae:97:67:e6:58:ad:06:3a:c7:
5e:da:dc:5c:0a:c8:f1:db:5a:6b:62:01:44:e4:82:
e0:13:6d:9c:df:29:6b:c2:55:17:7a:56:17:03:4c:
a3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EE:CE:C7:43:D5:C5:F9:3C:0B:DD:E0:3A:51:33:D4:0F:05:03:46
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/CO7Ox0PVxfk8C93gOlEz1A8FA0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.146.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:45:88:b7:10:98:29:8c:e2:a3:3a:ac:26:b1:08:cb:5f:2d:
7b:32:b9:a2:b1:1e:98:c2:64:39:d5:3f:e6:0a:ee:1b:fd:76:
4f:59:71:f5:e0:39:ba:be:f2:4e:17:fe:10:a4:87:9e:1a:44:
0b:d0:fb:37:f5:be:34:4f:06:a0:eb:1b:70:e9:fb:51:86:17:
73:e9:7a:d9:94:98:09:1f:f6:e8:bd:6c:93:96:e4:64:7e:b0:
fd:db:0b:5e:07:10:dc:74:48:b8:d6:c0:99:45:83:4b:e0:55:
09:ea:af:50:fa:25:a2:12:1d:98:36:f4:9b:12:15:f9:49:e0:
85:ea:4f:a9:43:2f:d1:6e:72:97:3f:f3:60:2a:e5:75:f4:e7:
a7:9d:61:24:4b:92:84:85:50:4f:74:87:30:ef:08:39:8b:3f:
e8:2a:3a:91:0b:33:55:7a:14:5f:c3:43:3b:d6:f7:a5:c4:b5:
55:34:69:ee:d6:14:ea:70:a6:b9:2e:84:f8:bb:45:7e:a2:71:
25:b2:f9:d0:45:52:6e:5e:4d:3c:69:78:7f:74:94:d6:fd:0a:
83:1f:9a:40:9f:57:30:13:c6:13:09:ba:6f:f0:d3:0d:fe:a3:
84:d3:e0:85:3a:49:5a:25:62:96:5f:4b:8f:84:77:34:a7:64:
c3:34:e8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 14:27:03 2026 by rpki-client