Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/o1M2nS6jpYqNPr4PmmyksnsPNkU.roa
File: o1M2nS6jpYqNPr4PmmyksnsPNkU.roa (raw, json)
Hash identifier: jZ7Fzk5UdE4bi+zoHAjfUyUn+7hvus7ThrXaF9l7HRE=
Subject key identifier: A3:53:36:9D:2E:A3:A5:8A:8D:3E:BE:0F:9A:6C:A4:B2:7B:0F:36:45
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A0F607C654FE6467E3841434E60C689AE9
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/o1M2nS6jpYqNPr4PmmyksnsPNkU.roa
Signing time: Thu 01 Oct 2026 05:54:59 +0000
ROA not before: Thu 01 Oct 2026 05:54:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218661
IP address blocks: 2.58.154.0/24 maxlen: 24
165.84.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:07:c6:54:fe:64:67:e3:84:14:34:e6:0c:68:9a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Oct 1 05:54:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a353369d2ea3a58a8d3ebe0f9a6ca4b27b0f3645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a4:91:d4:c3:0d:77:8b:fc:f1:be:d8:c9:0b:
a9:e7:b3:fb:2e:84:64:51:e5:5d:ab:57:75:52:29:
f4:7e:11:fe:c8:47:b0:fc:fd:aa:fa:23:32:ea:ac:
18:c3:c2:68:3e:f5:73:ce:c4:ee:96:f2:05:f7:6b:
89:be:fb:9b:ae:3a:d1:3a:6a:dd:d1:f1:ad:05:a5:
db:7f:7f:e6:de:00:c5:aa:28:39:45:ef:03:7c:3f:
24:ca:de:e5:3b:3d:96:9d:9d:c9:d7:32:c3:a6:8b:
59:72:04:1f:30:15:78:fe:1e:1f:df:4a:6c:82:89:
03:a5:4f:7d:0e:bc:cc:47:27:b9:c0:49:14:37:52:
98:2f:a4:17:d4:36:85:0f:47:6d:74:28:f0:82:01:
b9:f7:ad:df:6f:27:18:43:23:e0:29:78:b6:28:6a:
d3:15:49:44:7a:c2:28:b9:3d:98:d0:2c:f0:15:2f:
3e:0b:c7:b0:dc:0a:e4:d6:5b:eb:96:8e:2a:c6:63:
f9:4c:18:c3:b4:91:f6:74:c1:d9:91:3a:98:8b:32:
6c:ea:09:69:2e:56:4e:97:ad:97:90:24:df:32:46:
07:4b:29:5b:ee:a8:db:5c:0f:13:8d:6f:09:be:66:
24:a9:85:40:0d:02:25:32:bc:df:d6:14:62:aa:9e:
bb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:53:36:9D:2E:A3:A5:8A:8D:3E:BE:0F:9A:6C:A4:B2:7B:0F:36:45
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/o1M2nS6jpYqNPr4PmmyksnsPNkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.154.0/24
165.84.230.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:95:de:ac:9a:53:5b:0a:62:3e:eb:ad:0d:ee:af:9d:c7:e7:
a5:96:6f:0d:01:1a:b0:da:0b:a7:ab:46:fc:5a:61:66:21:d1:
48:75:d8:d3:cf:80:67:b2:46:44:b0:fb:cc:ac:6a:0c:dd:31:
b5:44:29:36:9f:1c:95:5e:2d:e2:1f:6c:d6:21:8c:1d:3d:87:
77:71:3d:4e:ba:95:34:da:7a:63:19:81:15:58:71:7b:c0:a4:
34:0b:80:44:75:76:4c:4d:27:e4:f6:70:41:85:90:96:cf:26:
d4:b0:c4:eb:16:8a:dc:d5:3b:53:98:9a:98:b0:4f:aa:db:38:
b4:f3:02:c5:5e:fd:71:72:11:46:e5:f3:57:c1:74:e2:70:88:
75:5e:b7:43:1b:f4:d4:88:5d:ce:be:34:3a:72:4b:af:07:dd:
92:65:d4:77:11:0a:6a:e8:c5:57:2e:96:17:42:ba:92:7c:f3:
24:4a:c0:7b:78:a8:19:f4:c8:21:ac:f5:8a:e6:8c:59:8a:e4:
50:09:bd:c0:6d:fe:6f:db:49:6f:bf:cb:6e:25:a4:41:db:eb:
1d:f6:22:39:e6:12:f7:f8:50:ab:c9:c5:62:2c:de:19:42:17:
55:8a:30:d3:2a:63:1b:da:09:ae:ff:5e:d6:4e:70:c4:a5:be:
ec:f2:77:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:38:55 2026 by rpki-client