Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/oouIMRn5xmavfg3BN45yaJQjQgA.roa
File: oouIMRn5xmavfg3BN45yaJQjQgA.roa (raw, json)
Hash identifier: xx3DuD/kVyuMAI2tXLfzol9FrLR5V1fuLfH+vvapSKY=
Subject key identifier: A2:8B:88:31:19:F9:C6:66:AF:7E:0D:C1:37:8E:72:68:94:23:42:00
Certificate issuer: /CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Certificate serial: 01A140B051EF58EA88797714A5B9928DA580
Authority key identifier: F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/oouIMRn5xmavfg3BN45yaJQjQgA.roa
Signing time: Thu 15 Oct 2026 17:50:59 +0000
ROA not before: Thu 15 Oct 2026 17:50:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 91.202.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:b0:51:ef:58:ea:88:79:77:14:a5:b9:92:8d:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Validity
Not Before: Oct 15 17:50:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a28b883119f9c666af7e0dc1378e726894234200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5f:36:bc:a9:1d:ff:db:15:fd:a8:d8:c4:0d:
f5:62:22:f7:b5:83:c4:f1:79:32:76:a6:32:6b:fb:
42:05:1b:9a:d9:4d:b1:e9:7c:f4:d6:5e:73:48:7b:
a4:03:dd:5d:d8:6e:a1:74:4e:57:95:d7:68:5d:30:
0f:72:12:8e:2f:53:87:fd:0a:70:c1:9f:30:56:99:
70:30:bf:f5:b1:50:6c:32:96:41:b4:a9:a1:2c:6e:
77:68:59:ad:97:96:38:71:79:07:85:50:db:78:36:
d0:78:77:26:0c:dc:8e:a6:e3:71:9e:56:7c:3d:66:
a6:0a:a6:69:67:e4:98:58:4f:12:f9:2c:48:89:fe:
ce:dc:05:0a:59:30:d6:b0:8c:41:e8:c4:36:6f:25:
b2:83:92:f0:6e:2e:84:ad:4d:aa:a0:ff:ba:a7:01:
07:e5:36:4e:54:df:fa:a9:5a:1d:01:90:1c:0a:0a:
a4:f2:7c:04:88:fb:12:ee:c4:90:9b:bb:71:40:83:
e1:20:a7:f9:8b:67:ba:f2:69:be:bc:4a:e6:7e:a3:
e0:83:19:60:b6:4c:1b:17:08:4a:b7:b2:a9:f6:24:
51:32:f9:c2:44:2d:42:fd:6d:9b:f3:d6:d8:ec:af:
50:42:7a:9d:4a:ef:55:9b:d0:96:52:a1:6d:44:95:
de:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8B:88:31:19:F9:C6:66:AF:7E:0D:C1:37:8E:72:68:94:23:42:00
X509v3 Authority Key Identifier:
keyid:F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/oouIMRn5xmavfg3BN45yaJQjQgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.215.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e8:62:69:f8:5a:90:46:29:2d:23:1f:54:ec:61:35:aa:8b:
5a:0a:15:c1:86:7e:67:a6:e0:26:eb:5f:55:c5:89:c2:f7:75:
7b:c2:e1:4c:95:fa:cc:f4:af:e7:4e:9b:7c:df:bc:63:6d:00:
e4:6e:b2:49:b6:a3:65:93:0f:89:5e:17:d7:7a:9d:32:23:b2:
8e:76:56:69:72:f7:cf:7d:01:be:54:13:84:d5:6a:68:07:e2:
29:bc:bc:3d:48:ce:ee:c1:7a:15:a9:35:ef:f0:a9:2d:7a:94:
c9:d8:71:63:2a:2c:6c:05:61:74:1c:75:42:58:5c:e0:5f:d1:
cb:8a:d7:b2:71:7e:2e:9e:c8:e4:56:86:f3:94:cd:e6:fc:49:
76:38:2a:a5:d3:45:5f:e7:a6:ec:90:d5:73:09:0c:9b:e1:9f:
f6:44:c0:55:9c:03:ae:d0:be:da:d9:16:d9:6e:8d:95:f8:cf:
aa:4c:7b:98:b7:8b:64:c9:25:e6:2d:c1:ae:9b:73:9b:a6:2d:
fd:9f:1b:3d:a4:c0:08:60:2b:bd:9d:13:f5:eb:25:2e:e0:0b:
82:c5:66:a7:75:4d:e7:79:7e:82:b1:81:08:28:64:61:52:df:
eb:84:3b:da:71:49:83:56:b0:43:de:fa:8f:c3:f5:cf:ba:9c:
75:6d:5c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:47 2026 by rpki-client