Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/ohqdftajPFDU1OVPF1qaxVqFgc8.roa
File: ohqdftajPFDU1OVPF1qaxVqFgc8.roa (raw, json)
Hash identifier: Q1/rIJYg8YaOrQt9nO7nG34OoQxmBrKa0Zu/Z68gD+g=
Subject key identifier: A2:1A:9D:7E:D6:A3:3C:50:D4:D4:E5:4F:17:5A:9A:C5:5A:85:81:CF
Certificate issuer: /CN=794838864d6805162693bdf249f3b8ac31f680bd
Certificate serial: 01A13BE5B99A3BD99B238846445187D392DB
Authority key identifier: 79:48:38:86:4D:68:05:16:26:93:BD:F2:49:F3:B8:AC:31:F6:80:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/ohqdftajPFDU1OVPF1qaxVqFgc8.roa
Signing time: Wed 14 Oct 2026 19:31:13 +0000
ROA not before: Wed 14 Oct 2026 19:31:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402722
IP address blocks: 201.78.140.0/24 maxlen: 24
201.78.141.0/24 maxlen: 24
201.78.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:e5:b9:9a:3b:d9:9b:23:88:46:44:51:87:d3:92:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794838864d6805162693bdf249f3b8ac31f680bd
Validity
Not Before: Oct 14 19:31:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a21a9d7ed6a33c50d4d4e54f175a9ac55a8581cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:02:aa:e8:37:8c:2f:2a:61:fd:a4:0d:f3:ee:
cb:45:96:59:7e:78:8c:c3:bb:f8:ec:db:12:f6:d8:
1f:2d:c0:43:07:72:e9:c9:64:b8:21:86:31:ab:2a:
bd:56:ea:e4:b4:3a:fb:c1:13:79:49:fe:e3:03:09:
e5:ac:27:e9:d8:ab:59:0b:75:ae:d0:06:8c:55:e6:
99:cc:c8:d9:fb:6e:98:fd:e8:46:40:7b:fc:fe:08:
a2:3b:80:74:5d:f2:bf:5e:57:d0:19:dc:b7:0c:cf:
35:3c:24:69:74:49:34:08:90:0e:7b:3f:49:ed:2a:
3d:0f:0f:88:ce:64:00:af:4c:06:62:2b:7f:8a:a7:
83:d7:3c:64:8f:10:09:a8:26:05:8d:00:e9:46:7c:
a9:bb:d0:1d:43:af:e9:60:21:67:78:ed:24:7a:20:
c2:1b:2d:ca:80:04:61:96:fd:cb:9f:48:ea:c4:69:
6b:77:b3:e4:85:e6:85:b5:f4:39:d6:d9:c6:11:e5:
e6:29:61:1e:f1:4c:5a:17:e9:c2:95:05:7e:4b:c7:
1c:8a:f0:16:0c:bb:cb:ab:6e:b1:8d:ff:cf:dc:84:
29:71:55:28:9d:3f:98:bc:d8:f6:8b:3f:31:a7:32:
4c:37:86:cb:b9:87:0c:cb:33:a2:68:f7:1b:69:b9:
9c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1A:9D:7E:D6:A3:3C:50:D4:D4:E5:4F:17:5A:9A:C5:5A:85:81:CF
X509v3 Authority Key Identifier:
keyid:79:48:38:86:4D:68:05:16:26:93:BD:F2:49:F3:B8:AC:31:F6:80:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/ohqdftajPFDU1OVPF1qaxVqFgc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.78.140.0/23
201.78.143.0/24
Signature Algorithm: sha256WithRSAEncryption
35:78:a6:71:8c:08:ba:b6:da:93:a0:40:94:b1:f4:fd:fb:66:
32:88:e7:83:b2:98:3e:ba:fe:fd:76:80:e4:bd:81:f2:36:88:
5f:95:11:cb:d1:79:28:eb:22:e2:3e:30:8f:4d:33:b3:8b:0a:
04:ff:73:c5:e7:d8:35:bd:c9:fa:9d:32:00:46:8c:d9:16:11:
7b:f3:cb:22:88:cd:82:56:b1:05:a3:65:0b:85:36:b3:ac:bf:
fa:7e:73:ce:e9:31:a0:a4:80:13:78:61:09:a0:9f:60:09:b6:
ab:e1:2b:de:7e:cd:8d:68:29:03:7c:63:5e:c7:eb:95:93:2d:
22:e7:7e:36:ce:73:7c:40:82:69:15:ed:be:3b:40:6b:9f:5c:
1e:ec:c0:b9:63:24:5e:34:63:f7:b6:d5:08:c4:a8:b6:91:af:
df:da:c5:d5:64:ad:0e:9c:04:5e:29:47:93:6c:3e:db:52:1d:
8d:71:ac:52:36:94:97:24:e7:ce:2b:2c:00:0f:4c:dd:71:60:
8b:b1:8e:bb:50:1d:d4:d6:75:d7:44:1d:64:aa:e0:00:57:96:
89:d2:08:10:d1:a9:28:12:8f:7f:15:30:71:12:c9:4f:7f:c2:
83:03:f5:d6:bd:4e:e0:8c:e7:bd:b9:2b:13:53:7d:ac:cc:59:
59:7d:b4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 11:37:27 2026 by rpki-client