Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/o2sIQqxtrsXU4-sHgN1DBCyW2Do.roa
File: o2sIQqxtrsXU4-sHgN1DBCyW2Do.roa (raw, json)
Hash identifier: OOS32X72fHPV4c6ntyzjKEpP2sDTlpCLbnwcUWRnCGc=
Subject key identifier: A3:6B:08:42:AC:6D:AE:C5:D4:E3:EB:07:80:DD:43:04:2C:96:D8:3A
Certificate issuer: /CN=01471c79e9642caef6a7437f1f74c5478ae52129
Certificate serial: 01A11A26B5660FFBEB3A2EBF21ABB4F10D02
Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/o2sIQqxtrsXU4-sHgN1DBCyW2Do.roa
Signing time: Thu 08 Oct 2026 06:15:06 +0000
ROA not before: Thu 08 Oct 2026 06:15:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41938
IP address blocks: 94.229.20.0/24 maxlen: 24
94.229.21.0/24 maxlen: 24
94.229.22.0/24 maxlen: 24
94.229.23.0/24 maxlen: 24
185.66.218.0/23 maxlen: 23
195.20.196.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:26:b5:66:0f:fb:eb:3a:2e:bf:21:ab:b4:f1:0d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129
Validity
Not Before: Oct 8 06:15:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a36b0842ac6daec5d4e3eb0780dd43042c96d83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7f:1d:96:30:d0:c3:0f:57:80:43:e1:3e:e9:
97:9a:cf:03:88:f0:a1:20:aa:ac:ba:53:cd:15:81:
a9:9b:ac:e1:3d:e1:57:82:4f:54:7c:07:70:c2:6a:
b7:5a:55:22:fc:71:58:64:6e:98:24:6f:bc:46:9a:
60:2a:22:69:27:7e:a0:c3:2d:01:02:79:87:49:65:
11:57:bd:3e:14:31:4a:4e:a3:fd:fd:42:78:48:9b:
a0:b3:bf:90:d8:d4:ad:39:fa:1c:e0:1f:01:09:29:
5a:b7:b4:ee:6d:76:85:5c:fe:27:a1:e8:7d:b9:4c:
1d:f6:a0:2d:75:da:76:e0:f2:c8:65:02:20:83:91:
00:98:38:bf:36:e3:ea:32:2c:c3:18:bb:2c:56:16:
9f:60:30:37:bf:fd:99:4b:9c:07:43:2b:dc:50:10:
fb:ea:11:28:48:13:19:73:b9:b2:1e:6d:ff:9a:77:
5d:d8:68:63:fa:56:54:e6:61:a7:c0:6f:9a:93:76:
b1:1f:21:9c:36:eb:c1:ea:1a:ab:27:e9:a8:44:8e:
bc:80:76:c4:f3:e1:62:34:5c:a2:ee:ca:b3:9f:7e:
39:09:fa:8e:2c:64:7d:77:2c:d6:53:23:ae:97:00:
8e:0a:fd:9b:f8:46:b8:3d:06:c7:ad:ca:98:b0:0f:
85:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6B:08:42:AC:6D:AE:C5:D4:E3:EB:07:80:DD:43:04:2C:96:D8:3A
X509v3 Authority Key Identifier:
keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/o2sIQqxtrsXU4-sHgN1DBCyW2Do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.20.0/22
185.66.218.0/23
195.20.196.0/23
Signature Algorithm: sha256WithRSAEncryption
87:75:66:2d:e5:ac:c5:5a:52:fa:7d:1d:b7:8c:c9:d7:f1:a0:
63:7a:24:c9:ec:fb:fa:43:fd:41:51:55:2d:3b:c4:d8:a1:d8:
d0:9a:50:fb:ad:4f:7c:c0:24:89:ff:f1:76:6e:3b:1f:f9:3d:
a5:ca:c3:a9:54:b5:45:eb:5d:cf:0d:4d:3d:9e:19:7d:a6:68:
00:aa:88:40:85:c9:4d:8a:c2:49:db:66:2d:ec:3b:14:f9:fe:
cd:18:c1:6f:3c:75:a8:72:99:45:12:4d:39:68:75:36:9b:9a:
5c:b7:02:44:69:65:5a:40:96:79:ec:0c:90:10:c7:8c:19:23:
78:60:b1:df:66:53:ce:ab:9a:f5:e3:ee:ca:3c:42:5b:a4:a2:
14:6d:de:5d:04:fa:f2:6d:e0:05:fa:dd:75:98:6d:dd:ae:28:
26:d9:d4:44:06:fa:ee:55:7e:7e:01:f6:b6:2a:3c:b1:63:a4:
5c:35:a8:d6:1a:73:5f:44:03:01:21:da:d4:1e:57:be:05:b8:
4e:d1:49:75:6f:53:46:11:0b:8a:7a:1f:d9:a6:02:1e:73:44:
68:b3:2f:92:7b:c2:95:dc:0b:0d:8a:da:c7:2a:15:9f:79:f0:
26:50:84:1f:92:28:cd:c8:d9:28:5b:f8:9a:f0:12:7d:f6:d7:
d0:05:f6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:11:07 2026 by rpki-client