Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/MyOAGaj-Db57Y4hT-ajOiqcApzM.roa
File: MyOAGaj-Db57Y4hT-ajOiqcApzM.roa (raw, json)
Hash identifier: fYT7KyHQG2l76gWePFojrIDu/57eHj7V9Jb/Qq+a9aA=
Subject key identifier: 33:23:80:19:A8:FE:0D:BE:7B:63:88:53:F9:A8:CE:8A:A7:00:A7:33
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A115F96054160D81FCB8F961650DD810D7
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/MyOAGaj-Db57Y4hT-ajOiqcApzM.roa
Signing time: Wed 07 Oct 2026 10:47:06 +0000
ROA not before: Wed 07 Oct 2026 10:47:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39640
IP address blocks: 167.160.31.0/24 maxlen: 24
185.216.131.0/24 maxlen: 24
201.49.188.0/22 maxlen: 22
206.203.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:f9:60:54:16:0d:81:fc:b8:f9:61:65:0d:d8:10:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Oct 7 10:47:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33238019a8fe0dbe7b638853f9a8ce8aa700a733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3b:1a:92:8d:16:8e:e1:da:00:85:28:ec:ad:
7a:4c:4c:57:55:fa:29:6c:0e:2d:ba:b0:ca:5b:1c:
b7:eb:6c:cc:9f:f5:f3:d8:7a:02:ed:03:c9:a1:0f:
45:f7:2a:08:0c:8b:1a:8c:d5:d5:05:87:20:03:82:
db:3f:19:00:ee:a0:74:a9:4b:f9:50:e0:e6:52:9f:
2d:2c:76:27:09:9e:8b:ad:d2:eb:24:b1:be:e5:56:
b3:b9:a9:4a:bc:22:9f:b7:61:4a:de:2b:7c:8e:0c:
07:03:ab:f3:3f:e7:6e:df:9d:ff:09:60:f4:7c:e0:
13:fc:d8:a7:e4:f7:46:f5:dc:cf:d5:a2:0d:1f:f8:
ef:f7:b1:aa:c5:60:7f:17:08:ad:33:ee:7f:99:0a:
aa:aa:b2:32:de:ae:4d:03:99:94:fe:0b:6e:9a:e0:
64:17:d5:d2:df:b1:e9:8b:0c:53:e4:27:2c:07:63:
6c:ed:ff:e1:c4:1f:06:20:87:d2:c9:a7:ad:ab:b0:
df:f3:a3:9a:fd:51:bd:40:6a:c0:91:7e:bb:2b:4d:
82:0c:7e:48:87:57:dd:0e:3b:d1:05:e8:2f:82:3c:
6f:aa:0f:c5:06:4d:40:9e:47:0c:24:3c:d8:dc:ec:
43:c8:3a:37:7b:6b:b6:a9:f0:1d:d8:0e:4b:04:eb:
b4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:23:80:19:A8:FE:0D:BE:7B:63:88:53:F9:A8:CE:8A:A7:00:A7:33
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/MyOAGaj-Db57Y4hT-ajOiqcApzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.160.31.0/24
185.216.131.0/24
201.49.188.0/22
206.203.0.0/18
Signature Algorithm: sha256WithRSAEncryption
94:11:d7:c0:dc:85:1e:ea:85:d8:db:f5:14:21:dd:0a:50:76:
d0:b2:9f:aa:63:a3:95:71:76:98:15:7b:b0:f3:1e:de:51:6f:
3d:46:0d:ed:e7:26:4a:c2:5b:3e:4d:b6:90:b2:3c:cd:42:0f:
93:ac:1b:c4:73:28:de:c3:f3:c0:55:e2:87:7d:d8:0c:bc:b4:
01:75:c1:32:ad:dc:22:53:5b:87:4a:ba:9d:b5:d8:be:78:1a:
97:dd:f7:99:9b:80:24:86:15:a8:08:1a:fb:aa:a8:76:49:ca:
19:ff:66:7e:f1:6d:22:df:41:6c:0d:1e:22:74:c2:d0:d1:7f:
7e:cd:f2:82:60:7c:93:fe:1c:6d:f7:2d:00:56:77:cf:1e:cc:
a6:98:14:a3:a0:01:10:06:71:3d:11:71:44:99:6c:e9:a3:43:
ef:08:28:e4:ec:7d:06:da:54:a1:d1:89:2e:13:23:e6:36:d7:
92:04:a8:1e:22:86:fd:58:2b:04:63:b3:48:50:14:53:74:03:
49:c6:dd:62:91:9c:b2:f6:a1:9b:63:06:3b:75:ee:04:38:e4:
86:9a:91:32:81:8d:98:87:db:d7:1b:82:c9:14:3a:96:47:43:
4c:f8:1d:69:47:99:0d:9f:fd:9c:a0:f2:c5:5e:c8:10:4f:2f:
6e:1a:79:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:51:43 2026 by rpki-client