Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/OJirt1wFzwbAHrdg81cQDXpKVE4.roa
File: OJirt1wFzwbAHrdg81cQDXpKVE4.roa (raw, json)
Hash identifier: ZrhMeJvZbCUyLVGp+g8LjIbIo+0t4e1qLJNqV5+TNAY=
Subject key identifier: 38:98:AB:B7:5C:05:CF:06:C0:1E:B7:60:F3:57:10:0D:7A:4A:54:4E
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 01A1464B7C4A572593DFEC14C8622251478A
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/OJirt1wFzwbAHrdg81cQDXpKVE4.roa
Signing time: Fri 16 Oct 2026 19:58:34 +0000
ROA not before: Fri 16 Oct 2026 19:58:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200104
IP address blocks: 217.147.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:4b:7c:4a:57:25:93:df:ec:14:c8:62:22:51:47:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Oct 16 19:58:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3898abb75c05cf06c01eb760f357100d7a4a544e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:01:91:dc:f8:d3:5b:93:20:d0:50:ff:86:
a8:67:e1:52:b4:48:4f:25:db:9e:2f:e5:6f:95:b8:
78:30:04:8f:01:a5:a8:72:34:31:44:a1:47:75:ab:
4a:f7:b9:2d:94:6e:86:60:44:57:e4:ac:a1:4d:07:
87:72:db:75:3f:03:d8:4f:3d:36:e7:43:89:f3:e8:
ff:97:d8:52:b2:ee:36:e6:01:7b:17:9f:b2:b7:9f:
4e:87:52:54:ad:4e:62:f4:51:56:42:43:32:a2:95:
39:77:f7:de:19:aa:8c:5d:14:a2:2b:00:0f:66:5f:
06:2d:f7:ba:fb:b4:61:bc:48:ed:fd:7d:6e:5e:52:
7a:76:a2:f3:cf:8f:b4:de:3a:84:b9:e8:26:d1:ae:
7b:fa:9a:67:b4:0e:ef:56:c0:6c:c5:b2:d8:12:9d:
2b:20:02:ad:a8:b2:38:9c:e2:de:c9:5b:0e:99:2d:
81:ae:2b:2c:7c:e0:d0:d3:d8:f1:25:5e:8c:f6:f1:
df:88:d1:88:33:46:e8:60:23:3a:bb:d7:f9:1c:12:
4d:a1:f7:c0:e7:27:2c:e3:e8:67:4d:ea:26:46:9b:
f0:7c:69:9c:61:1a:68:46:78:3f:45:54:6a:b9:36:
27:9b:42:8d:d5:23:69:aa:b2:0a:b4:7a:a9:d4:4a:
c7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:98:AB:B7:5C:05:CF:06:C0:1E:B7:60:F3:57:10:0D:7A:4A:54:4E
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/OJirt1wFzwbAHrdg81cQDXpKVE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.168.0/24
Signature Algorithm: sha256WithRSAEncryption
87:0e:29:87:73:aa:5c:b3:a3:e4:a0:f3:66:0a:c8:c4:a0:47:
e6:31:8b:d0:b5:53:fa:68:fc:a1:31:93:6a:e2:89:af:a2:6b:
92:59:60:45:7f:29:b4:6a:3e:ac:1e:d3:9f:cc:77:4a:18:02:
fd:59:53:af:a3:e8:b2:00:11:f0:19:6b:a9:20:db:12:9c:4c:
13:33:81:cd:d2:ee:92:8e:e0:48:82:a3:65:15:a9:0b:c9:19:
59:83:53:0b:4a:79:72:35:94:94:90:f9:b8:78:28:4d:22:4d:
1b:cc:df:ee:8c:75:1a:77:82:d9:bf:65:9a:c7:c9:3d:0b:59:
74:fd:1d:ba:a0:97:c7:38:36:f2:a8:78:34:a2:2e:b9:4a:40:
76:13:e4:24:cc:04:da:b9:bf:fc:cc:09:e1:cf:df:67:9a:6f:
9a:2e:62:ab:9c:5c:6a:6a:17:00:be:fb:73:82:d6:f3:3c:8f:
7b:32:aa:f5:e6:73:aa:a2:a5:41:93:95:6f:11:1e:32:ae:92:
22:4f:ed:2c:7c:02:ce:fe:02:74:e8:be:a1:af:b9:d1:5f:69:
eb:02:63:d0:3f:b5:1d:5f:40:c9:46:c0:51:8d:e7:27:ae:82:
96:0a:ca:be:87:c2:5e:aa:ff:b9:a3:45:ef:7a:62:35:dd:c2:
8a:b0:16:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:02:48 2026 by rpki-client