Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/O9lVHnD2EHVTvj7ukTgRKudmQ2o.roa
File: O9lVHnD2EHVTvj7ukTgRKudmQ2o.roa (raw, json)
Hash identifier: GDENzzsOo8/Aw6HS8wSkKax7E8OzvFrFYmDsz8bDz80=
Subject key identifier: 3B:D9:55:1E:70:F6:10:75:53:BE:3E:EE:91:38:11:2A:E7:66:43:6A
Certificate issuer: /CN=ab025c6bb3dccf1b165149c2873c04b1a6c7da7a
Certificate serial: 01A11B75C8BB24D585F150BE50B9AD0D816B
Authority key identifier: AB:02:5C:6B:B3:DC:CF:1B:16:51:49:C2:87:3C:04:B1:A6:C7:DA:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/O9lVHnD2EHVTvj7ukTgRKudmQ2o.roa
Signing time: Thu 08 Oct 2026 12:21:06 +0000
ROA not before: Thu 08 Oct 2026 12:21:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5610
IP address blocks: 91.213.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:75:c8:bb:24:d5:85:f1:50:be:50:b9:ad:0d:81:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab025c6bb3dccf1b165149c2873c04b1a6c7da7a
Validity
Not Before: Oct 8 12:21:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3bd9551e70f6107553be3eee9138112ae766436a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:91:70:f3:c9:1b:43:87:1a:a3:57:2a:18:e3:
98:cb:1e:47:80:0d:f5:3b:b1:b5:7a:9d:d0:e5:fa:
5b:50:89:28:bc:8f:12:43:94:d4:5e:de:df:17:d3:
24:b1:92:d9:43:4b:1b:0d:a0:b2:bf:88:83:de:71:
4e:61:18:4a:dd:6f:41:bc:25:43:4f:15:79:50:d5:
f3:2e:54:38:6e:fb:ad:90:1a:27:4e:13:fe:34:13:
e9:4a:71:c0:41:3e:fb:79:bc:d4:9f:76:ab:4d:bf:
9f:a8:f0:94:8d:20:e9:d1:2e:ea:7f:37:0c:ad:41:
1b:f4:15:90:fd:33:e4:76:7c:56:88:0e:b9:96:18:
24:61:bd:b4:06:9e:2f:bd:18:0b:16:b9:50:b0:b0:
d9:c2:74:5c:66:a3:3d:85:ae:40:8e:05:e2:c3:7b:
e0:10:2c:17:fd:ba:32:9a:1a:e9:8d:1d:b3:07:c6:
ae:18:2a:2f:50:46:26:00:66:3b:4a:ef:be:93:52:
f3:af:91:f6:fb:f5:c6:7a:68:ac:a1:ab:5c:62:27:
aa:fe:aa:fa:90:3c:60:f0:08:d5:26:5e:54:88:98:
4e:a9:36:14:fc:82:89:ca:23:8e:9f:dd:7b:7d:4b:
6e:2d:c2:b8:5a:df:43:1c:0b:4c:54:78:d0:51:4b:
a9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D9:55:1E:70:F6:10:75:53:BE:3E:EE:91:38:11:2A:E7:66:43:6A
X509v3 Authority Key Identifier:
keyid:AB:02:5C:6B:B3:DC:CF:1B:16:51:49:C2:87:3C:04:B1:A6:C7:DA:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/O9lVHnD2EHVTvj7ukTgRKudmQ2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.10.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ca:1c:83:42:24:72:11:69:0c:2c:3c:ca:13:fc:22:4a:cc:
be:58:dd:34:ca:58:74:5d:4b:4c:c6:58:3f:4c:ca:56:26:26:
3d:58:23:e7:63:65:8d:2f:13:b6:80:60:1b:34:4a:e5:0f:9f:
72:1d:fc:8a:91:42:11:24:bd:3c:86:2e:01:23:1a:18:e9:eb:
8d:f1:b0:15:84:67:a6:f4:2d:55:ef:22:c0:38:af:78:ef:36:
b8:44:ad:fe:0c:88:41:6b:b9:21:ed:8e:64:c3:4b:a1:85:2a:
b5:67:a2:70:32:17:5d:1b:52:58:8c:cd:1f:29:60:39:eb:9d:
ee:b8:dc:f7:80:a6:34:11:2d:1c:78:ec:9d:40:2b:10:d9:a9:
c6:6a:bf:c5:68:e6:1c:12:c5:ef:7b:95:7c:87:bd:7d:aa:af:
98:00:6b:29:6a:29:73:78:23:69:eb:ba:fa:e8:24:f8:b8:f8:
28:ed:59:38:3b:36:ba:d6:63:82:17:2d:f2:74:03:ec:dc:db:
5f:ef:17:01:5c:07:9f:cc:c5:64:a2:8d:63:9d:d5:3c:44:94:
9c:4a:b1:cb:36:2e:70:3b:6e:ab:29:b4:a2:89:86:92:9c:6c:
92:25:02:c5:52:75:3c:c6:97:22:40:8e:2a:f9:13:dd:53:33:
b4:df:63:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:38:47 2026 by rpki-client