Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/opSIGkOnBkZvoVUAlYliwMWRtHM.roa
File: opSIGkOnBkZvoVUAlYliwMWRtHM.roa (raw, json)
Hash identifier: UhK9HvzCWGQjnjOj5kqLjjS4yrTQ8KUq4l/hKCCuZEE=
Subject key identifier: A2:94:88:1A:43:A7:06:46:6F:A1:55:00:95:89:62:C0:C5:91:B4:73
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 01A14528594618CCADE92F8511C26B2748DB
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/opSIGkOnBkZvoVUAlYliwMWRtHM.roa
Signing time: Fri 16 Oct 2026 14:40:34 +0000
ROA not before: Fri 16 Oct 2026 14:40:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35000
IP address blocks: 185.136.32.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:28:59:46:18:cc:ad:e9:2f:85:11:c2:6b:27:48:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Oct 16 14:40:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a294881a43a706466fa15500958962c0c591b473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:b2:a2:d0:04:a4:4e:d4:55:c0:0c:f0:d7:
b5:d3:41:4d:23:5d:b7:bd:ae:b6:9f:4f:d5:9f:da:
04:17:49:de:86:39:37:b2:5a:e8:db:b6:80:0d:6e:
24:5f:d7:2d:3c:7b:87:ea:0d:3c:ed:02:4c:ab:aa:
20:40:54:2a:91:35:dd:ae:fd:e0:66:b2:68:6d:0a:
4f:46:e5:3d:08:43:ed:74:22:a3:cb:83:03:94:89:
12:5b:a0:ec:c3:d1:51:7c:df:7e:01:7a:4b:ee:99:
8f:d3:6a:6a:f6:9c:9c:e7:6d:ec:10:7a:90:fd:61:
62:f0:7a:16:cd:56:38:62:39:7d:00:9a:b3:7e:67:
c4:5a:78:99:e3:31:be:9d:cf:94:25:f4:c8:6a:03:
4f:75:c0:a3:08:51:b7:8d:ff:cd:ca:6f:1b:1f:90:
76:b6:d5:e4:58:09:21:c8:36:17:7d:7a:74:c2:73:
f2:87:b8:ea:ff:79:cd:45:f3:a9:17:9b:d8:48:84:
28:17:cb:79:b0:e8:bf:d0:01:08:d6:a1:14:81:ca:
00:7d:13:6b:61:3f:aa:fb:11:46:4d:c9:a2:bc:7a:
14:df:f8:f4:6b:0a:88:b3:e6:1f:10:8a:f2:26:48:
ff:28:e4:8b:ea:cb:67:4f:77:dc:61:c2:5c:29:8c:
ab:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:94:88:1A:43:A7:06:46:6F:A1:55:00:95:89:62:C0:C5:91:B4:73
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/opSIGkOnBkZvoVUAlYliwMWRtHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.32.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:fa:87:2a:3d:a2:4d:73:fc:90:5c:f2:aa:b4:06:d0:ff:fb:
e1:04:70:d1:15:3d:62:87:80:43:33:cc:86:50:fc:80:62:11:
56:48:ea:7f:97:f1:62:60:25:f9:7e:13:68:52:75:1a:4d:e3:
da:16:cd:36:74:be:2c:c3:0b:40:5d:56:e3:4c:09:9d:71:b4:
c1:f1:11:7c:64:89:85:fc:77:6a:82:29:df:54:d7:49:e8:57:
5f:3d:23:e9:90:04:1c:0f:bb:5e:8d:ff:54:0b:c6:d2:0e:80:
57:da:55:ee:cb:ce:84:83:7d:5a:3f:f6:02:88:6e:a9:46:cf:
95:f9:2a:0e:26:a7:45:3b:b1:e0:da:40:92:5f:56:b6:3b:fd:
b9:f6:5b:2e:d2:7f:60:9d:0e:e2:cf:8b:4e:4f:d6:92:62:4c:
dd:dc:1b:2f:12:f9:41:aa:d7:2d:05:d9:c9:07:4e:4a:b8:83:
52:ad:12:04:5f:50:ee:1d:d0:ee:bf:3f:a1:d6:a9:08:8e:5d:
78:14:d9:1b:59:7f:85:2e:fe:fc:13:25:e2:5a:fa:e0:77:90:
a5:c2:cd:62:db:bf:ce:3f:4e:ee:06:17:28:1c:6d:69:4f:75:
e1:35:b1:55:34:df:f5:68:45:eb:e5:6b:56:99:76:24:26:b0:
b3:60:37:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:00 2026 by rpki-client