Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/o1nTmEm1gCstJMw7wpnSZMxMONQ.roa
File: o1nTmEm1gCstJMw7wpnSZMxMONQ.roa (raw, json)
Hash identifier: pg0A+jsUZK8QeY09ViiYP2qIWGZZ0uwQp9do9UnjuSo=
Subject key identifier: A3:59:D3:98:49:B5:80:2B:2D:24:CC:3B:C2:99:D2:64:CC:4C:38:D4
Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial: 01A07ACEFBCEF9A9131E809CFA25F7ABB1F1
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/o1nTmEm1gCstJMw7wpnSZMxMONQ.roa
Signing time: Mon 07 Sep 2026 07:39:40 +0000
ROA not before: Mon 07 Sep 2026 07:39:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42830
IP address blocks: 2.59.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:ce:fb:ce:f9:a9:13:1e:80:9c:fa:25:f7:ab:b1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Validity
Not Before: Sep 7 07:39:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a359d39849b5802b2d24cc3bc299d264cc4c38d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:30:13:d0:53:ca:a6:1d:e7:8e:a7:b1:3b:f7:
55:61:69:63:35:2a:46:99:ff:9e:d6:d0:af:a0:3f:
77:6a:08:67:55:f1:49:3c:c7:5e:ad:1c:d9:99:01:
6e:7a:5d:53:7d:e7:48:f2:47:d1:d3:4b:31:0d:b7:
d1:75:81:12:d5:6d:39:6c:00:99:3a:9b:9d:f6:65:
57:e2:1b:9b:28:52:6a:73:ef:d4:ab:67:8b:05:7c:
a2:ef:49:0c:1e:ff:2a:88:b0:14:26:db:8a:6e:9e:
f0:46:be:68:5d:11:84:66:19:e3:c7:d6:32:d6:99:
8f:1f:dd:37:89:8b:06:e3:0d:2b:b4:18:ec:35:f1:
c4:54:9d:da:32:90:13:6a:6d:2c:29:3f:07:5f:91:
af:bf:0c:f4:02:d2:d1:3d:0c:12:f3:70:90:ce:1b:
7c:17:a5:d4:34:3f:1f:15:4b:cd:30:b0:e7:86:a6:
0c:8c:49:35:4e:f7:cb:ff:80:43:9b:6a:67:ba:15:
57:5c:95:11:a4:f6:ef:ca:5d:2f:d3:6c:09:dd:d0:
39:b0:a2:10:dc:dc:07:a4:cc:c3:68:42:28:66:71:
97:7d:f7:6f:f8:9c:d2:b2:50:b5:05:cc:85:73:fd:
49:65:90:8e:ac:77:0d:db:51:9c:d3:d1:c2:76:9b:
65:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:59:D3:98:49:B5:80:2B:2D:24:CC:3B:C2:99:D2:64:CC:4C:38:D4
X509v3 Authority Key Identifier:
keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/o1nTmEm1gCstJMw7wpnSZMxMONQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.10.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:eb:36:87:35:e8:a7:6d:d9:4f:f1:3a:70:09:2e:e4:16:04:
07:83:46:84:11:5b:e0:12:05:cd:28:ed:c2:83:d7:cc:57:35:
11:19:28:94:78:03:61:1f:e3:38:3b:a5:f7:d2:1e:58:55:91:
7d:ba:8c:c1:f0:e7:ab:8d:79:16:80:b8:4a:db:b8:42:18:7c:
7d:28:c8:19:29:5d:51:7c:01:7e:7f:5b:3d:c7:92:62:b1:e6:
5d:86:08:12:95:f7:7f:e0:98:7f:ff:5d:28:46:b3:9e:99:ac:
f0:98:7d:31:29:3f:f1:8f:94:27:91:79:75:5c:b1:43:5c:0a:
4d:34:03:8c:6a:a3:5e:7a:ad:9a:ac:80:ea:07:47:4b:df:7e:
d2:9c:ef:1f:fe:a8:11:96:a5:2a:e8:77:5b:0e:7a:9b:e8:2d:
38:58:2e:82:9f:8a:a5:0a:68:08:c0:18:b9:c6:d7:eb:54:f4:
df:cd:ae:a9:a7:fd:ff:24:eb:08:4d:26:be:25:b9:b3:1e:37:
3d:07:ee:e5:85:b5:5d:f6:20:b3:01:cf:5e:9c:d7:24:97:e0:
29:5b:76:7f:83:7c:c7:e5:eb:81:e2:f4:e4:f9:c4:37:fa:cf:
99:ef:00:b5:3b:1f:51:4a:ad:1e:bc:26:5e:4b:e7:6c:a4:97:
f3:e7:fd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:31:43 2026 by rpki-client