Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/oZk022Uzrddlew7HUihOqnvD09c.roa
File: oZk022Uzrddlew7HUihOqnvD09c.roa (raw, json)
Hash identifier: dwxrsadoT/LqWkbIyIuXpQYj7jm07uhTLFbkxlkUhvs=
Subject key identifier: A1:99:34:DB:65:33:AD:D7:65:7B:0E:C7:52:28:4E:AA:7B:C3:D3:D7
Certificate issuer: /CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Certificate serial: 01A0D8B7D086BD688EBE7F8C4B97EB1ECA29
Authority key identifier: 8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/oZk022Uzrddlew7HUihOqnvD09c.roa
Signing time: Fri 25 Sep 2026 13:18:40 +0000
ROA not before: Fri 25 Sep 2026 13:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202794
IP address blocks: 159.200.221.0/24 maxlen: 24
195.222.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:b7:d0:86:bd:68:8e:be:7f:8c:4b:97:eb:1e:ca:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Validity
Not Before: Sep 25 13:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a19934db6533add7657b0ec752284eaa7bc3d3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:1e:fc:2b:3a:bc:1b:cf:6e:fa:e3:9f:0c:
76:62:39:8f:8d:76:27:2b:6d:5d:54:24:ed:e3:81:
8e:1e:1e:a6:b6:52:8b:5a:dd:99:86:7f:c3:76:95:
77:1c:e5:40:f7:b6:5e:36:cd:d0:e5:83:28:f0:71:
c5:88:20:a8:ce:d6:4c:8b:1a:c7:37:a5:59:2e:64:
53:e1:83:df:c4:12:c4:ec:4d:98:96:7e:af:af:f7:
71:25:7f:74:33:74:86:55:ec:51:ac:b9:43:d2:8f:
4a:88:cf:0c:91:b1:6d:55:e4:90:20:c9:11:ae:c2:
e1:86:3e:e8:90:e7:42:ba:d3:f5:c6:89:71:62:e8:
5f:72:2e:81:72:3e:b2:bd:b3:12:08:73:ee:9c:be:
63:93:9c:ea:c7:c6:a3:ee:88:fb:ab:c4:fd:3b:d9:
d6:b2:20:d2:e7:29:5b:34:48:ed:65:0e:a2:b3:5b:
41:f5:17:fe:39:7d:b6:c6:7a:31:78:73:83:55:16:
d5:8c:90:cf:c4:04:6a:e4:74:08:c2:59:69:cc:2b:
09:de:15:b1:26:22:56:18:59:17:2a:24:c2:16:80:
da:23:e7:da:6a:a8:9d:dc:2c:c1:a3:e1:27:ae:5c:
9e:9a:ac:1f:a8:1a:e4:db:54:7d:cc:e1:9a:61:a5:
6e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:99:34:DB:65:33:AD:D7:65:7B:0E:C7:52:28:4E:AA:7B:C3:D3:D7
X509v3 Authority Key Identifier:
keyid:8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/oZk022Uzrddlew7HUihOqnvD09c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.200.221.0/24
195.222.106.0/24
Signature Algorithm: sha256WithRSAEncryption
44:04:4b:c0:b0:79:9b:b3:fd:d0:b0:40:56:9f:99:48:04:fe:
84:93:57:28:c6:b6:a1:25:74:ed:72:4d:72:04:7b:37:88:30:
fb:98:54:06:34:7f:e2:3b:a0:25:4c:03:c7:37:43:c6:eb:bb:
50:e6:b1:ad:53:c9:e1:3c:f4:0b:8b:d4:9b:12:d5:fe:22:f1:
91:2c:54:14:bf:cf:25:7e:dc:38:f9:7d:f0:1d:40:a0:36:23:
fc:60:eb:75:29:e9:96:b7:30:fe:6d:57:66:fe:c5:48:c5:9c:
2c:ac:46:28:3b:13:f3:64:f7:fd:16:78:a6:1d:27:4c:f2:f3:
02:50:67:5e:24:b0:5f:2a:13:2e:8d:3d:6b:c9:bb:de:a3:27:
85:9a:03:f4:4f:61:a0:8a:ce:3a:49:ad:0e:84:1a:21:cc:21:
34:ec:a0:dc:6b:7c:99:39:6e:da:0f:18:77:ec:91:a4:a9:c9:
a1:85:5a:e3:38:9b:40:1e:d2:72:2c:f8:1c:fc:77:b6:d8:c0:
e8:11:88:2f:54:09:d8:be:53:0b:b5:6f:f8:be:c5:53:98:2f:
41:a7:7a:65:03:ab:e2:14:cb:8e:a0:df:b3:29:1b:ef:ce:03:
4b:ea:1d:09:66:5e:96:3e:b8:14:cf:17:89:8a:cb:6b:62:55:
02:b0:f4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 02:54:02 2026 by rpki-client