Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/p0OOu-EXOC2g_R6lyfexE_r16Ao.roa
File: p0OOu-EXOC2g_R6lyfexE_r16Ao.roa (raw, json)
Hash identifier: ZlvylEjRcEnA6eiAcBPumF2966A8gS8YrsSV2eU7uT8=
Subject key identifier: A7:43:8E:BB:E1:17:38:2D:A0:FD:1E:A5:C9:F7:B1:13:FA:F5:E8:0A
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 01A05E8E527BD6D4FDA9BE78374DDE364956
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/p0OOu-EXOC2g_R6lyfexE_r16Ao.roa
Signing time: Tue 01 Sep 2026 19:59:40 +0000
ROA not before: Tue 01 Sep 2026 19:59:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6939
IP address blocks: 84.247.59.0/24 maxlen: 24
86.104.8.0/24 maxlen: 24
89.42.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5e:8e:52:7b:d6:d4:fd:a9:be:78:37:4d:de:36:49:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Sep 1 19:59:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7438ebbe117382da0fd1ea5c9f7b113faf5e80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cc:cd:fb:1d:ae:e8:72:8d:7e:09:04:b1:f4:
7b:3e:a0:fd:59:f0:38:ca:e1:32:3d:c9:43:4d:95:
ba:98:20:87:c5:53:3b:97:a6:5d:2a:fb:e0:3b:3c:
d9:ca:76:21:83:6d:19:de:63:22:05:a1:10:5c:7b:
ec:4e:8c:5e:84:f2:41:68:19:ad:b5:20:fd:a9:f5:
33:48:bb:7f:7a:85:b6:f5:c8:d2:de:0f:8d:86:f7:
33:f7:86:12:ae:2d:a2:13:c5:e5:99:3b:3e:13:d2:
1f:0c:72:00:72:a5:ba:9f:74:0c:f8:5b:d4:32:2c:
bb:3e:d9:aa:4c:02:a7:c8:dd:b4:22:61:b4:da:d5:
f3:de:a6:2c:c9:cf:5a:b3:fa:5e:22:0b:ba:61:f6:
47:b6:c0:f6:d7:db:32:fb:37:9c:b4:1b:33:97:49:
1d:68:82:97:13:05:fa:a5:ad:92:75:38:32:c3:68:
12:21:5e:80:49:ca:65:00:04:dd:9e:e6:e6:b0:08:
0e:4b:79:59:cd:84:f0:0c:65:98:69:29:f3:d9:e2:
8f:a7:2f:59:2c:a3:9a:fc:d3:97:77:91:f6:51:5a:
00:62:ed:4a:ea:13:f6:b1:eb:82:cc:fd:d7:f5:42:
8f:8b:e2:e6:10:29:75:07:5a:64:d6:3f:9d:ae:35:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:43:8E:BB:E1:17:38:2D:A0:FD:1E:A5:C9:F7:B1:13:FA:F5:E8:0A
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/p0OOu-EXOC2g_R6lyfexE_r16Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.59.0/24
86.104.8.0/24
89.42.40.0/24
Signature Algorithm: sha256WithRSAEncryption
05:91:77:ab:b0:37:36:d9:e2:3d:e3:51:01:16:3f:a0:60:f4:
74:e9:11:a0:f3:65:42:c4:ca:3e:bb:14:09:b0:ee:a8:86:75:
f5:e4:fc:c9:0f:3a:de:01:21:34:8c:a8:bf:3d:c9:de:76:0a:
33:d2:23:dd:4c:ab:e9:ff:b4:d3:9b:19:f0:05:71:de:f8:55:
5e:c8:21:0f:5d:04:32:4f:83:7e:30:9a:78:da:54:b3:f9:4a:
b9:04:99:ed:c7:c7:59:c3:f4:ef:25:c2:8b:4c:80:27:79:ed:
6f:92:fb:d8:51:07:f7:10:fd:1b:11:f5:f7:7d:57:f7:d8:ee:
ca:e3:e5:77:d6:11:2f:a8:e6:e9:9d:ef:81:ae:f0:3c:45:93:
81:8c:c2:11:54:fe:b3:b7:93:6d:75:c3:8a:8c:87:46:3c:ae:
12:7f:c0:31:0b:c6:4f:be:37:d1:9b:0f:17:53:8c:c0:58:9e:
31:02:a1:4e:93:e9:16:9a:94:30:66:71:d9:83:63:dc:9f:ad:
5e:7a:20:90:3d:ef:cc:90:71:43:99:46:49:4b:aa:63:5f:16:
d4:95:a1:78:a8:6f:9f:55:b9:2a:fd:b9:4c:39:a5:fb:d7:f6:
3d:68:09:41:5e:e0:dc:83:ee:6b:cb:61:78:65:5b:17:0d:57:
d8:d1:5e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:26 2026 by rpki-client