Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/0op4kBn3nhJDS2c-3qkz2b-MpN8.roa
File: 0op4kBn3nhJDS2c-3qkz2b-MpN8.roa (raw, json)
Hash identifier: p0a4okV6J9l4+O2oGkvx7QwdvUvDDySRezt3gBKNWXg=
Subject key identifier: D2:8A:78:90:19:F7:9E:12:43:4B:67:3E:DE:A9:33:D9:BF:8C:A4:DF
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019E55903EFC26EF3A5575804AD6BD8F7259
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/0op4kBn3nhJDS2c-3qkz2b-MpN8.roa
Signing time: Sat 23 May 2026 15:59:37 +0000
ROA not before: Sat 23 May 2026 15:59:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207805
IP address blocks: 46.20.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:55:90:3e:fc:26:ef:3a:55:75:80:4a:d6:bd:8f:72:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: May 23 15:59:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d28a789019f79e12434b673edea933d9bf8ca4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:23:cc:25:df:1e:6c:18:7d:df:af:2b:2d:a2:
82:d0:36:64:18:f9:69:b8:ce:b7:28:47:46:c2:d3:
f2:02:eb:6d:dd:ce:c7:20:39:8c:81:b1:2f:d4:ae:
fa:cd:90:d4:3a:fc:4e:13:3a:ba:c0:13:a9:55:fe:
d9:c0:db:87:68:d6:13:b1:c4:be:0a:3f:47:75:65:
c2:96:07:a1:8c:fb:35:be:04:4d:d1:56:fd:9c:07:
7e:b0:8f:4c:d1:8d:60:da:9e:c4:1b:38:08:f6:ed:
81:11:00:a7:9d:19:ed:b2:f0:09:1c:be:f6:19:1e:
84:c5:ff:19:00:d9:47:52:e3:98:fe:70:59:f1:c2:
57:2b:09:1f:0f:4a:a1:ad:36:ea:23:4f:28:24:17:
fb:f9:f6:89:96:d2:35:2c:b0:87:d3:7b:0c:df:62:
fc:94:1d:64:e6:13:34:b6:95:2c:27:32:3a:bc:d8:
54:9e:31:8c:2c:4e:9d:a4:d9:55:34:e3:75:ad:0d:
00:10:0d:c1:a9:b6:e9:dd:02:20:24:3f:f6:e9:9c:
43:74:43:f9:1b:03:4b:87:ab:c7:72:d3:96:35:33:
8c:61:49:9b:65:f2:0e:af:49:eb:b4:3d:68:07:d1:
f8:32:70:1d:32:24:78:ad:e5:e1:74:c6:c7:90:f0:
15:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8A:78:90:19:F7:9E:12:43:4B:67:3E:DE:A9:33:D9:BF:8C:A4:DF
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/0op4kBn3nhJDS2c-3qkz2b-MpN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.97.0/24
Signature Algorithm: sha256WithRSAEncryption
24:9f:54:35:91:b9:00:0f:72:7f:bf:5b:52:e1:96:eb:32:9a:
e8:86:d9:01:2b:64:e5:2a:89:88:9f:60:bb:23:74:4c:1f:e6:
5b:81:0e:3f:6b:ed:f6:20:9d:d6:7f:b8:fc:02:d0:ef:b6:0a:
ff:b0:17:65:1f:ca:e9:60:aa:9f:32:36:96:7a:2f:12:86:fe:
73:8a:85:45:ea:91:61:88:57:2d:73:60:8e:57:95:5f:94:55:
58:bb:68:cc:5e:64:f4:e4:69:b0:0b:73:7e:fc:ff:b4:26:48:
27:1c:22:e2:24:56:5d:50:ea:8b:94:96:33:d5:f5:8a:20:2d:
dd:f9:be:4f:ce:a3:e1:37:5d:a4:89:30:ea:ab:aa:49:b8:29:
88:67:25:3c:9e:9a:cf:0b:f1:8b:83:0e:56:c8:79:8b:4e:08:
cf:8a:70:c2:43:8c:83:de:9c:c5:09:e4:db:bd:fc:36:7b:dc:
83:65:b7:99:b1:ab:53:75:b6:55:bb:18:29:19:95:00:ba:3c:
25:4e:00:26:d7:f3:88:4e:22:f7:e4:da:1d:2a:73:79:98:48:
94:cf:b2:e2:05:7c:3b:4c:44:f9:ed:0b:c8:cd:6b:c3:2d:59:
d1:a8:0f:67:2f:37:34:a1:42:24:c7:c2:45:40:bb:89:46:74:
ca:eb:da:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:45 2026 by rpki-client