Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/o6Hx_3iPqoSdp4Uml2gjTgniPiw.roa
File: o6Hx_3iPqoSdp4Uml2gjTgniPiw.roa (raw, json)
Hash identifier: mzV2DK4RSWBgjXyOv08JIi9yDzTRClutvtMDkbrekO4=
Subject key identifier: A3:A1:F1:FF:78:8F:AA:84:9D:A7:85:26:97:68:23:4E:09:E2:3E:2C
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A15425B1E72C6A856671B14E870BBD93F9
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/o6Hx_3iPqoSdp4Uml2gjTgniPiw.roa
Signing time: Mon 19 Oct 2026 12:31:58 +0000
ROA not before: Mon 19 Oct 2026 12:31:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9123
IP address blocks: 177.177.219.0/24 maxlen: 32
177.177.220.0/24 maxlen: 32
177.203.59.0/24 maxlen: 32
179.236.41.0/24 maxlen: 32
179.236.42.0/24 maxlen: 32
201.51.0.0/24 maxlen: 32
201.51.1.0/24 maxlen: 32
201.51.2.0/24 maxlen: 32
201.51.3.0/24 maxlen: 32
201.51.4.0/24 maxlen: 32
201.51.5.0/24 maxlen: 32
201.51.6.0/24 maxlen: 32
201.51.7.0/24 maxlen: 32
201.51.8.0/24 maxlen: 32
201.51.9.0/24 maxlen: 32
201.51.11.0/24 maxlen: 24
201.51.12.0/24 maxlen: 24
201.51.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:25:b1:e7:2c:6a:85:66:71:b1:4e:87:0b:bd:93:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Oct 19 12:31:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3a1f1ff788faa849da785269768234e09e23e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9e:7f:b8:4f:c7:56:9a:79:ef:ac:0b:75:2b:
e1:04:5f:a4:d8:be:cf:81:1d:ec:28:c9:5c:06:9d:
fb:91:f7:99:10:c8:43:55:5b:f0:47:ab:99:a3:c2:
54:b9:f6:29:c4:f8:39:3d:19:c6:48:60:e6:69:54:
ac:5d:82:b8:4f:7d:c5:45:f9:b5:8c:01:23:69:fe:
42:00:26:46:07:11:f9:1b:a4:74:bd:a0:65:a3:e8:
5d:b5:97:ca:d9:63:dc:da:5c:0a:84:2c:9b:53:e3:
06:89:be:6e:50:3f:b1:da:11:1c:06:e1:ae:c0:c1:
b7:71:0e:c1:58:36:d4:e3:89:86:60:b8:9f:f9:5d:
37:76:54:6f:bf:a5:81:66:58:bb:c0:7c:0a:63:de:
ba:9e:21:3d:bc:38:fb:c4:7f:08:ae:c8:3a:17:22:
3f:65:6f:25:cb:ce:59:5e:06:1a:e1:bb:25:01:9d:
dd:b4:1d:6c:0f:61:f6:bc:58:f4:94:fc:54:e3:6a:
48:31:e2:17:ac:b3:79:32:53:9e:d5:02:4a:24:35:
5a:7d:e0:0e:36:54:c9:58:df:d6:26:43:e9:0f:4c:
48:10:50:8c:53:9a:55:49:ca:96:f0:9c:01:82:a1:
68:72:d1:e2:94:a4:9b:2c:4f:24:73:c6:eb:b2:6a:
44:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A1:F1:FF:78:8F:AA:84:9D:A7:85:26:97:68:23:4E:09:E2:3E:2C
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/o6Hx_3iPqoSdp4Uml2gjTgniPiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.219.0-177.177.220.255
177.203.59.0/24
179.236.41.0-179.236.42.255
201.51.0.0-201.51.9.255
201.51.11.0-201.51.13.255
Signature Algorithm: sha256WithRSAEncryption
74:07:db:ef:81:91:42:a9:27:ef:75:34:2f:4d:0a:12:f1:88:
c6:7c:2c:e2:e4:79:87:fe:80:e3:c5:a5:f7:4a:c8:30:d2:91:
58:49:c4:07:1e:5d:f4:86:d2:a8:38:fa:77:89:29:9a:53:e2:
5e:a6:55:14:09:18:75:13:56:25:9c:fc:fd:c3:02:2a:e4:56:
64:a2:ed:fb:f3:e4:56:f5:1d:2a:38:d1:87:29:19:9a:d1:25:
30:fc:a4:9d:6e:6c:73:3f:f2:f7:98:bf:02:de:80:61:3f:56:
1c:06:c2:af:02:81:f5:98:d5:fd:99:d3:16:cd:6f:71:53:8e:
74:15:53:58:3e:df:48:ac:b2:a9:eb:5e:3d:68:81:bc:2f:30:
f0:4a:4f:93:e9:ee:b2:f8:0a:19:1c:fd:06:9a:ab:ec:54:a7:
35:48:14:c9:00:f5:e7:d7:1c:1e:82:c8:24:f3:23:ca:cd:76:
2a:0e:ba:be:04:a4:5f:ac:c3:73:68:f5:9c:19:b9:1b:31:f5:
1d:8e:ef:b5:70:49:28:48:cd:e9:6a:ff:d3:eb:1f:35:7f:04:
d0:de:08:00:a7:70:d2:17:1a:7f:b8:f0:36:dc:ec:52:12:17:
b2:49:d9:68:89:38:8b:a2:8e:97:03:e8:18:48:5b:01:0e:0b:
44:2e:d1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:31:42 2026 by rpki-client