Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/oEZkCYyrtppA-RjBJVsTUj5sauY.roa
File: oEZkCYyrtppA-RjBJVsTUj5sauY.roa (raw, json)
Hash identifier: 4YoPoKLuzSsKYi0sRFdBU8PzUS5iiBV8DQgLhMWCkuQ=
Subject key identifier: A0:46:64:09:8C:AB:B6:9A:40:F9:18:C1:25:5B:13:52:3E:6C:6A:E6
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01A0EC16959073B501C2A4B92BF6AEEE7B61
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/oEZkCYyrtppA-RjBJVsTUj5sauY.roa
Signing time: Tue 29 Sep 2026 07:34:58 +0000
ROA not before: Tue 29 Sep 2026 07:34:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 77.246.222.0/24 maxlen: 24
88.80.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:16:95:90:73:b5:01:c2:a4:b9:2b:f6:ae:ee:7b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Sep 29 07:34:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a04664098cabb69a40f918c1255b13523e6c6ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:57:26:7f:71:4d:53:87:dc:65:89:c1:54:99:
53:b8:c0:1f:fa:99:73:f3:ad:ac:e9:66:4e:17:03:
55:41:8c:84:b7:ea:63:77:56:66:d4:9f:c5:74:22:
02:d2:d4:d4:40:8f:ad:08:4f:e3:b7:63:d1:84:6c:
34:15:2b:7c:11:2f:2b:25:6c:39:f0:09:ae:80:9e:
50:57:de:84:dd:61:48:b7:f2:fa:87:ff:ad:d9:46:
bb:93:e2:5d:0f:3e:e7:d4:c1:81:a2:78:5c:e9:22:
94:81:4e:83:82:1b:59:0c:67:90:ae:ee:5e:d7:90:
ef:f2:bf:90:e6:90:5f:70:8c:1e:6c:fe:01:20:8e:
5d:65:f6:a1:af:2b:94:f6:44:77:c2:5a:7e:5d:06:
b8:7d:09:13:21:42:3d:dd:bd:50:a8:08:26:ca:5b:
18:ba:ce:d9:9f:97:cf:d5:6f:c5:e9:3b:db:2b:e8:
55:2c:70:c2:2b:0e:39:3b:c0:99:78:10:3d:87:34:
ef:eb:12:cc:cc:d2:59:62:4a:33:dc:fd:36:14:8b:
07:17:07:f2:76:53:d4:19:00:a2:39:0a:92:c4:3d:
dd:b2:66:ba:d9:83:0b:1c:c1:6c:6b:32:3c:b5:29:
c6:53:62:04:c4:d6:2f:9c:93:76:96:a4:82:4d:a8:
da:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:46:64:09:8C:AB:B6:9A:40:F9:18:C1:25:5B:13:52:3E:6C:6A:E6
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/oEZkCYyrtppA-RjBJVsTUj5sauY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.222.0/24
88.80.142.0/24
Signature Algorithm: sha256WithRSAEncryption
69:c0:bc:cd:0d:d8:89:8c:43:6a:de:56:33:f4:5f:21:f9:bf:
96:46:2a:af:97:07:43:0e:62:e6:d3:3c:9e:28:41:b2:ac:23:
8b:f2:39:8c:29:ed:4a:31:cd:8c:1b:db:f1:a9:9f:25:92:0e:
70:ad:59:31:4f:19:55:c1:67:40:67:e2:b4:8f:dc:49:eb:33:
f8:c2:d9:47:79:8a:32:b8:02:77:a7:4f:88:6b:e5:ea:b0:ad:
0e:f8:dd:c8:9d:fa:3f:98:26:3e:78:62:5f:73:ab:18:67:3e:
7c:4a:06:4c:6c:c2:e2:13:b5:56:6a:ef:9e:db:4c:f6:ca:7a:
18:9b:a0:ef:f7:1c:22:16:4b:56:d0:2d:71:80:07:65:37:c8:
f0:5e:ed:44:81:02:79:05:e7:2c:84:64:79:08:e3:3f:c6:31:
cb:9a:77:d2:5f:49:16:6d:de:66:71:f0:f1:f2:e5:c7:c4:84:
02:75:6d:14:5c:e1:a6:24:52:ea:03:3f:fe:43:23:7f:64:e1:
41:4f:f0:c5:47:7e:37:9f:f3:dd:b7:08:49:b7:d1:51:45:5d:
f5:a2:d7:0d:9f:a5:2f:bf:1a:6d:56:2b:54:3e:a3:ec:be:74:
c5:0a:a4:2f:dd:67:f0:e3:ff:3f:8d:cd:90:85:1e:33:6d:ed:
e8:06:5b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:47:30 2026 by rpki-client