Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/oZMSggOY4G5PiUAmhE7aDfbZOJE.roa
File: oZMSggOY4G5PiUAmhE7aDfbZOJE.roa (raw, json)
Hash identifier: /fc9NM3fUWaJK5AukLrYsRaAr49dBf5ryXS9Z/FRPOw=
Subject key identifier: A1:93:12:82:03:98:E0:6E:4F:89:40:26:84:4E:DA:0D:F6:D9:38:91
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 01A06687F559AFC3B42259DF0A81B402F422
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/oZMSggOY4G5PiUAmhE7aDfbZOJE.roa
Signing time: Thu 03 Sep 2026 09:09:41 +0000
ROA not before: Thu 03 Sep 2026 09:09:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39855
IP address blocks: 45.86.84.0/24 maxlen: 24
45.132.112.0/24 maxlen: 24
45.152.34.0/23 maxlen: 24
79.143.128.0/24 maxlen: 24
79.143.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:87:f5:59:af:c3:b4:22:59:df:0a:81:b4:02:f4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Sep 3 09:09:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a19312820398e06e4f894026844eda0df6d93891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:39:10:dd:4b:7a:da:3f:36:f9:f7:29:91:87:
61:5c:1a:49:e0:ef:bd:83:08:21:e4:3d:3d:44:ac:
c2:6b:8a:49:e6:c9:9a:96:68:20:69:a7:3b:cc:25:
9a:31:7c:e0:f2:4f:60:a5:3e:ea:77:33:ac:cc:75:
ad:94:ce:dd:57:68:21:fb:22:ba:a4:48:8f:5f:72:
80:8e:32:bc:c7:de:3c:05:25:f6:5f:49:08:e7:b0:
b3:82:d5:eb:5c:5d:81:53:5d:25:5b:3c:01:9d:e3:
46:8e:4d:90:b5:1b:9d:ed:cb:6c:6e:d2:3c:30:7a:
d1:0c:32:17:9e:fe:d8:ba:06:39:9d:56:c9:c5:34:
cd:58:f6:1f:1e:f2:3a:5d:0f:ba:77:19:e2:60:23:
7a:10:25:9f:cc:10:f5:6c:76:74:1b:85:fb:85:c2:
85:83:6f:1e:ea:c1:25:b1:5c:f6:33:05:80:bb:42:
74:9d:68:27:02:67:64:26:a4:07:50:b3:b7:5b:eb:
a7:4e:b5:ea:7d:e9:32:a8:cc:07:9d:9e:47:6b:78:
d6:45:8d:99:cd:15:f7:f8:b6:e6:2e:81:bc:de:eb:
33:ba:bc:b2:86:34:b3:6e:c9:51:1d:97:d3:e3:60:
49:fe:e6:c4:15:60:1c:6c:65:a6:e9:71:d3:f5:55:
44:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:93:12:82:03:98:E0:6E:4F:89:40:26:84:4E:DA:0D:F6:D9:38:91
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/oZMSggOY4G5PiUAmhE7aDfbZOJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.84.0/24
45.132.112.0/24
45.152.34.0/23
79.143.128.0/24
79.143.130.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:a4:c5:8f:7f:5b:dd:f0:5e:c1:b0:ec:5b:85:2b:5d:2d:34:
9f:93:c5:81:16:a9:30:4c:97:e7:a8:e5:d7:d7:fd:69:f6:9d:
d4:5d:f1:d1:c7:f4:c0:b7:9c:f2:21:fe:3e:9c:e3:0b:64:c8:
d3:34:ef:93:ef:f0:28:77:49:de:31:b5:d9:f9:e4:d6:e8:24:
db:a3:dc:bb:84:d5:39:81:aa:2c:1f:9a:f6:4a:db:89:d8:ae:
4e:af:02:94:9c:0f:85:45:c6:fc:7d:53:82:59:95:33:a6:05:
0a:65:4c:d3:61:d3:5a:ee:70:b1:ed:5a:c7:b5:9d:49:b8:c2:
df:98:ed:81:3a:12:88:d1:08:ff:56:65:f6:89:a1:4b:51:6b:
88:ef:9c:25:e3:7c:a0:ea:a7:4d:4f:b0:9f:9d:9d:9e:fe:15:
33:a7:96:ce:00:eb:34:78:8c:8f:ec:97:d8:00:6a:63:9d:b0:
0f:6b:b1:ee:a4:31:34:1a:45:55:7f:4c:f9:73:4f:ea:19:7a:
c4:4e:1c:70:c6:24:46:37:11:83:a9:4d:d2:aa:a5:9e:f3:f8:
1e:b7:70:aa:95:2c:3e:1d:ff:b3:f5:31:b8:55:cf:ce:70:4b:
b6:b4:91:a3:e3:51:04:22:81:35:67:1b:14:67:f6:59:9d:5f:
4f:1a:5a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:36:06 2026 by rpki-client