Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/oKt2Cid9yLvhIC5MK3q_6cG1q5g.roa
File: oKt2Cid9yLvhIC5MK3q_6cG1q5g.roa (raw, json)
Hash identifier: i3gzQ6XHE8PbwTvwhvxi9lLYpqn8rRftO7aMWIOG900=
Subject key identifier: A0:AB:76:0A:27:7D:C8:BB:E1:20:2E:4C:2B:7A:BF:E9:C1:B5:AB:98
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F236869B86B7FA0D46C7D3E79C98459B0
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/oKt2Cid9yLvhIC5MK3q_6cG1q5g.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210976
IP address blocks: 201.51.10.0/24 maxlen: 24
201.51.16.0/24 maxlen: 32
201.51.17.0/24 maxlen: 32
201.51.18.0/24 maxlen: 32
201.51.19.0/24 maxlen: 32
201.51.20.0/24 maxlen: 32
201.51.21.0/24 maxlen: 32
201.51.22.0/24 maxlen: 32
201.51.23.0/24 maxlen: 32
201.51.24.0/24 maxlen: 32
201.51.25.0/24 maxlen: 32
201.51.26.0/24 maxlen: 32
201.51.27.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:69:b8:6b:7f:a0:d4:6c:7d:3e:79:c9:84:59:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0ab760a277dc8bbe1202e4c2b7abfe9c1b5ab98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:88:e2:c3:06:f2:ef:d3:c8:10:3c:53:9e:
af:5f:e2:e4:21:0d:dc:94:c3:fa:f3:72:68:13:ee:
d0:8c:a1:7b:8c:ca:01:77:76:13:56:10:99:ba:f4:
92:2f:87:8c:03:cd:9b:cb:20:fa:b8:cd:67:34:6b:
44:15:46:72:f6:07:5f:1c:3f:bf:0c:9f:f4:0f:69:
a2:b6:7e:0c:e1:18:4e:f8:f0:dc:e4:16:c1:f9:7a:
85:4c:6e:b1:7b:fc:c6:3f:f6:13:13:78:03:be:21:
24:da:d7:87:80:b0:c2:cd:0b:61:30:38:97:f9:f6:
ca:90:f0:b0:75:70:73:9f:f0:08:f7:5d:97:73:f9:
1b:0b:15:1a:2a:97:33:ba:56:ab:fd:23:8d:59:e0:
30:02:43:71:6a:b7:3d:45:6f:c0:5f:69:ba:88:42:
d3:c3:f4:6a:b7:1f:51:3e:b0:d1:1f:f7:6d:2b:20:
80:ce:52:b4:a0:1c:f8:13:4c:c5:0a:44:79:97:76:
9f:2b:de:91:08:0e:0e:72:65:9c:9e:0e:3b:45:a9:
b5:8a:4b:4e:0f:d1:20:6c:f8:f6:1d:f2:06:d4:b4:
3b:c5:7b:46:a4:04:31:e6:88:ad:22:e3:35:13:b9:
93:44:f0:c9:d4:04:17:9f:1e:90:30:95:91:ce:b2:
b5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AB:76:0A:27:7D:C8:BB:E1:20:2E:4C:2B:7A:BF:E9:C1:B5:AB:98
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/oKt2Cid9yLvhIC5MK3q_6cG1q5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.51.10.0/24
201.51.16.0-201.51.27.255
Signature Algorithm: sha256WithRSAEncryption
55:c0:f7:fa:b4:1b:70:86:3f:a4:32:39:bf:83:39:7f:ed:03:
96:c8:e6:71:d8:02:0f:0b:a2:21:f6:5c:a5:d6:ba:de:79:b0:
0a:44:0b:2b:f3:32:65:dc:d2:78:51:8a:25:c0:0b:ba:70:7a:
1b:f1:5f:f5:23:72:c5:98:46:28:1b:8b:b0:1f:ac:a7:3f:cc:
e9:19:2d:99:16:5e:3b:0e:ef:59:6c:1b:6f:97:bb:45:3a:20:
be:0d:0c:93:6d:bd:ef:89:0d:66:5b:cd:a3:bc:c1:34:ec:71:
3a:94:0e:97:0f:0a:60:65:3e:54:09:ef:f1:90:32:14:03:04:
1a:3c:e5:aa:10:52:8a:e2:93:52:a9:ee:12:2b:df:ba:29:90:
6e:d6:68:bd:0a:60:75:04:0a:1b:23:c5:bc:6a:7e:64:73:b7:
89:16:80:35:98:29:3a:15:07:44:0c:86:d9:25:1f:9b:8d:d4:
1d:39:4d:a9:75:57:a0:3e:0b:38:0a:a3:cd:7f:d7:f0:f1:6f:
da:e0:39:41:c5:99:3d:0e:df:d4:40:34:40:16:bc:02:cc:51:
74:ed:b5:f1:ba:88:6e:03:2b:f8:d6:af:2a:cf:05:12:d8:15:
90:30:f1:d7:cb:09:29:6c:13:77:ed:54:31:32:96:86:13:00:
c8:9f:5e:f6
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ8jaGm4a3+g1Gx9PnnJhFmwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZmEyNjIzYjIyMmQwOGQ5MzU2OTc1MDQ0Yjk0MDdiNWZl
YTQ4YmEwHhcNMjYwNzAyMTUxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGFiNzYwYTI3N2RjOGJiZTEyMDJlNGMyYjdhYmZlOWMxYjVhYjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9eI4sMG8u/TyBA8U56vX+LkIQ3c
lMP683JoE+7QjKF7jMoBd3YTVhCZuvSSL4eMA82byyD6uM1nNGtEFUZy9gdfHD+/
DJ/0D2mitn4M4RhO+PDc5BbB+XqFTG6xe/zGP/YTE3gDviEk2teHgLDCzQthMDiX
+fbKkPCwdXBzn/AI912Xc/kbCxUaKpczular/SONWeAwAkNxarc9RW/AX2m6iELT
w/Rqtx9RPrDRH/dtKyCAzlK0oBz4E0zFCkR5l3afK96RCA4OcmWcng47Ram1iktO
D9EgbPj2HfIG1LQ7xXtGpAQx5oitIuM1E7mTRPDJ1AQXnx6QMJWRzrK1xwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFKCrdgonfci74SAuTCt6v+nBtauYMB8GA1UdIwQY
MBaAFGn6JiOyItCNk1aXUES5QHtf6ki6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYt
NzJmYjk3ZDU5Y2U0LzEvb0t0MkNpZDl5THZoSUM1TUszcV82Y0cxcTVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYtNzJmYjk3ZDU5Y2U0
LzEvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAyTMKMAwD
BATJMxADBALJMxgwDQYJKoZIhvcNAQELBQADggEBAFXA9/q0G3CGP6QyOb+DOX/t
A5bI5nHYAg8LoiH2XKXWut55sApECyvzMmXc0nhRiiXAC7pwehvxX/UjcsWYRigb
i7AfrKc/zOkZLZkWXjsO71lsG2+Xu0U6IL4NDJNtve+JDWZbzaO8wTTscTqUDpcP
CmBlPlQJ7/GQMhQDBBo85aoQUorik1Kp7hIr37opkG7WaL0KYHUEChsjxbxqfmRz
t4kWgDWYKToVB0QMhtklH5uN1B05Tal1V6A+CzgKo81/1/Dxb9rgOUHFmT0O39RA
NEAWvALMUXTttfG6iG4DK/jWryrPBRLYFZAw8dfLCSlsE3ftVDEyloYTAMifXvY=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:27:40 2026 by rpki-client