Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/9okxpKR53j_wPBq5poJcbcWbCuU.roa
File: 9okxpKR53j_wPBq5poJcbcWbCuU.roa (raw, json)
Hash identifier: g6ME8XCY/1PYlaKndRMLOkvVq06aR4XG5jU3acn3n1Q=
Subject key identifier: F6:89:31:A4:A4:79:DE:3F:F0:3C:1A:B9:A6:82:5C:6D:C5:9B:0A:E5
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 019FAD83A8310FE72CF63C52F11B6D092EF8
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/9okxpKR53j_wPBq5poJcbcWbCuU.roa
Signing time: Wed 29 Jul 2026 10:55:14 +0000
ROA not before: Wed 29 Jul 2026 10:55:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4637
IP address blocks: 81.172.116.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:83:a8:31:0f:e7:2c:f6:3c:52:f1:1b:6d:09:2e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: Jul 29 10:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f68931a4a479de3ff03c1ab9a6825c6dc59b0ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:94:d5:3b:84:88:ee:aa:bf:2c:2e:37:4c:
19:89:a0:49:68:96:91:3d:6f:fb:eb:eb:ed:d4:5a:
92:a2:5e:6b:d2:76:93:17:8c:52:03:f6:8d:f7:f7:
5f:4e:a0:60:38:c9:cd:49:aa:a2:42:c5:88:c2:fa:
9c:55:ca:40:63:23:c9:c2:cb:51:68:17:00:53:bf:
d0:1a:75:2e:99:4f:32:80:a0:de:a3:0a:c1:4b:fa:
c2:ae:97:e9:f2:c8:be:f7:4b:77:0b:c8:fb:79:8f:
5f:32:c3:c1:4f:3f:e3:f3:5c:66:a3:ca:35:23:94:
09:54:4b:48:95:5d:12:4c:26:f9:2d:39:17:75:91:
c9:84:8f:48:c9:35:51:7e:86:92:bb:35:37:24:39:
08:56:44:13:ef:b2:56:cd:ec:bc:7e:bc:c7:70:c4:
e3:70:5b:ec:d6:30:71:59:af:a7:f3:80:5e:bf:88:
1f:a5:ea:93:b9:c4:06:c6:7e:7d:44:1d:b1:91:cf:
d1:e3:60:50:d3:8a:26:41:20:bc:f2:78:70:75:27:
ad:8f:1d:d0:06:84:8f:0f:cf:d1:5b:c9:ff:5b:15:
4b:fb:30:09:ee:d4:d2:39:31:b5:a4:07:1b:a0:1d:
6f:21:67:af:37:37:d8:55:8c:b5:e7:85:80:a6:ed:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:89:31:A4:A4:79:DE:3F:F0:3C:1A:B9:A6:82:5C:6D:C5:9B:0A:E5
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/9okxpKR53j_wPBq5poJcbcWbCuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.172.116.0/24
Signature Algorithm: sha256WithRSAEncryption
52:f0:93:e9:de:b7:3e:92:71:b4:b5:ea:ed:62:77:45:45:5d:
29:8c:7d:43:64:c9:34:e6:47:0d:52:cc:e5:78:9d:5d:65:d5:
b6:e4:46:34:1b:7f:df:41:35:dd:50:82:96:35:53:2d:2b:ce:
e6:99:a0:26:f9:b5:1c:b7:15:ff:81:d7:11:03:9f:5b:c8:82:
8e:9c:d0:3e:0f:ac:ca:01:ef:85:c6:db:85:ea:34:cd:36:56:
bd:b3:c5:33:da:f6:60:bf:74:61:50:4f:6f:18:1c:02:fa:2b:
bd:cb:4c:34:be:b7:ba:e2:22:0c:dc:d1:26:a3:c5:5d:24:36:
99:f7:6e:e4:01:70:2f:6b:84:02:e0:d6:b5:2c:9b:fc:4b:24:
d5:76:9f:be:1f:d7:ab:db:d6:5a:1e:e5:22:c2:37:c2:4c:31:
e6:6c:a0:4b:b3:c1:ac:0a:94:1b:52:95:26:76:38:44:4e:00:
cb:3b:ed:d7:5f:78:3e:77:b7:da:4a:67:4e:98:b6:18:f7:b9:
2d:65:45:41:74:cb:c5:2b:21:a2:73:46:ec:58:58:e5:cc:36:
c2:63:da:26:b7:95:51:2c:22:83:a3:84:da:39:b0:e9:ce:03:
9f:95:10:ea:97:ac:8f:90:d7:25:6b:55:d7:98:f8:81:61:2f:
de:7a:c8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 11:02:46 2026 by rpki-client