Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/o4VrCjgrvDvaBmCZ-cNCUifsT6I.roa
File: o4VrCjgrvDvaBmCZ-cNCUifsT6I.roa (raw, json)
Hash identifier: dhsBHmxhwHsBALmpaF9PFJFgsPXNC1cXxm70ub/rK9Q=
Subject key identifier: A3:85:6B:0A:38:2B:BC:3B:DA:06:60:99:F9:C3:42:52:27:EC:4F:A2
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01A0863AFB6F7B648595CCD9597D0954C79E
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/o4VrCjgrvDvaBmCZ-cNCUifsT6I.roa
Signing time: Wed 09 Sep 2026 12:53:27 +0000
ROA not before: Wed 09 Sep 2026 12:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204203
IP address blocks: 94.184.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:3a:fb:6f:7b:64:85:95:cc:d9:59:7d:09:54:c7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Sep 9 12:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3856b0a382bbc3bda066099f9c3425227ec4fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8e:06:fc:3b:95:14:5c:91:d2:40:ed:2f:86:
66:ae:b3:d6:70:f7:74:2c:50:16:85:95:46:7e:87:
f8:ab:d2:a5:17:63:b0:03:4a:03:c8:93:c3:b0:2a:
f4:df:1f:08:1c:d4:a3:a0:86:43:9c:bb:c6:1f:4b:
c9:97:06:ae:62:36:7a:13:96:15:67:ef:40:19:d3:
16:c6:bc:1c:d9:15:58:d8:51:1f:2d:db:e9:75:5f:
98:12:33:a8:28:c0:5c:13:a0:4e:7c:89:12:45:15:
ce:b7:42:dc:57:77:24:f0:f3:cb:ea:85:91:82:2e:
8d:c0:7e:55:20:cf:ae:fe:b2:6e:c0:fd:8b:ad:ea:
15:7d:e5:6e:93:d8:44:4d:b2:11:30:44:9d:08:fd:
1a:1b:82:1a:2b:03:9c:eb:d5:4a:24:bd:a4:8c:91:
02:95:a6:7b:0e:2d:ad:f1:2e:c6:a2:c9:67:ab:1e:
5d:5b:b5:83:cd:86:ac:c5:38:f3:8d:62:06:b9:12:
72:94:35:20:ad:ca:88:88:b7:61:42:4c:fd:90:f2:
7d:10:c3:22:5f:ae:e0:d6:d5:07:7a:4a:c3:c1:c6:
31:b3:7a:8a:80:1d:f5:c1:5c:f4:d8:da:2a:c2:58:
06:32:03:1d:e2:66:3e:a6:f7:50:d2:8e:2c:64:40:
fc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:85:6B:0A:38:2B:BC:3B:DA:06:60:99:F9:C3:42:52:27:EC:4F:A2
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/o4VrCjgrvDvaBmCZ-cNCUifsT6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.35.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:7b:78:82:93:da:d0:7f:20:96:cd:65:1c:bb:af:23:ee:17:
da:54:11:da:26:b1:c2:64:03:ca:30:e2:70:3b:54:b5:6c:03:
5d:b3:15:23:19:a9:fa:44:e9:c6:ed:74:40:ac:7d:15:78:c0:
29:cf:bf:45:d7:12:3e:f5:4c:27:c6:86:18:de:d3:f6:dc:94:
5c:28:44:34:ff:72:8c:92:e6:83:a0:62:bd:57:c9:45:4d:ed:
e4:11:fa:42:9c:da:31:b5:88:a8:5e:3a:04:e6:d5:a2:26:5c:
a8:83:66:cf:2f:c1:03:af:04:1e:1c:f7:16:42:de:7d:f6:52:
d7:33:b3:af:1d:79:e2:fe:51:65:73:91:22:54:1b:03:d3:32:
d2:91:ab:03:59:6d:d0:4e:bd:c1:5f:16:47:76:2e:b5:0e:25:
9e:2a:ac:ec:4c:fd:04:de:25:07:fe:ec:0e:2d:50:5f:a0:74:
ba:cd:fd:64:40:04:7d:11:af:06:c1:ae:33:fb:b2:5e:66:54:
ce:7d:b5:15:d6:e7:9a:4c:7c:8b:94:5d:b6:96:eb:89:ce:09:
5f:e5:ef:0a:23:b3:93:d5:c1:60:66:01:33:72:97:f9:10:3d:
a4:53:1a:49:0b:2b:4d:54:0f:03:64:cf:c0:9d:c3:1b:3d:0d:
95:50:de:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:01:09 2026 by rpki-client