Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/O-pdjSm1G27EcLZc1YIur1izX_U.roa
File: O-pdjSm1G27EcLZc1YIur1izX_U.roa (raw, json)
Hash identifier: jKMq7pI2u6HCOkXwOZSmin7/bWw1O5apvOvL1pGFigA=
Subject key identifier: 3B:EA:5D:8D:29:B5:1B:6E:C4:70:B6:5C:D5:82:2E:AF:58:B3:5F:F5
Certificate issuer: /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial: 01A00661CDD48F8310474341263AF2753BB1
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/O-pdjSm1G27EcLZc1YIur1izX_U.roa
Signing time: Sat 15 Aug 2026 17:04:27 +0000
ROA not before: Sat 15 Aug 2026 17:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219250
IP address blocks: 91.211.153.0/24 maxlen: 24
130.78.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:06:61:cd:d4:8f:83:10:47:43:41:26:3a:f2:75:3b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Validity
Not Before: Aug 15 17:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3bea5d8d29b51b6ec470b65cd5822eaf58b35ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:0a:5b:7f:73:76:80:ae:be:b4:e4:f6:8d:
cc:da:48:87:36:c0:9f:34:11:a8:4a:93:8b:eb:af:
ca:5c:25:a4:f9:86:f8:de:62:0a:bb:23:17:32:16:
3e:23:f7:5c:f1:22:9d:71:3a:66:c3:2e:f5:dd:2b:
35:63:fe:2b:ef:be:12:ab:05:f5:db:f2:21:a2:40:
03:12:85:3d:c2:3d:64:49:1a:27:26:1e:6a:b9:c4:
8e:1d:d2:ce:77:33:96:71:1e:fb:89:5f:7a:fa:0f:
1e:3f:e7:d3:b8:fe:9a:97:14:f2:cf:81:9a:56:58:
81:da:c9:f5:7e:e4:67:81:40:5a:0a:9e:92:b6:af:
f2:f0:0c:5b:84:43:3e:db:45:2a:c9:61:1e:a4:e2:
eb:8e:1b:11:83:a5:d1:52:bd:1d:a0:4c:1c:a8:71:
14:fd:70:3f:4f:a8:89:d2:d4:07:0d:42:8e:ba:09:
37:bf:41:9a:c0:e4:8b:0c:c7:5a:36:a4:78:d9:36:
ca:d4:15:d8:c1:64:3e:e2:f4:a7:cc:ca:67:ff:4a:
ee:b7:db:9f:cc:df:fd:73:e0:c2:88:d3:d7:ed:9d:
9f:c6:ce:70:43:10:b0:36:ea:19:d7:7a:88:d4:8f:
68:c4:b5:f7:be:ee:d7:7f:7a:37:96:0d:c3:50:44:
28:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EA:5D:8D:29:B5:1B:6E:C4:70:B6:5C:D5:82:2E:AF:58:B3:5F:F5
X509v3 Authority Key Identifier:
keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/O-pdjSm1G27EcLZc1YIur1izX_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.153.0/24
130.78.112.0/21
Signature Algorithm: sha256WithRSAEncryption
01:9f:bf:f3:f9:ac:59:03:7d:89:3b:38:7b:da:f4:78:c1:e0:
f5:93:06:44:1e:e7:db:a2:f0:2f:9a:c5:74:3b:a7:21:5d:c2:
2e:eb:cc:ee:c8:b7:d7:25:b0:d7:9c:d4:8c:d5:68:fa:b4:c4:
38:60:86:24:ce:cb:eb:63:62:ad:ad:c7:27:c0:81:21:e0:66:
83:a3:18:10:2c:46:03:7b:8c:4c:03:01:a5:7a:0a:42:08:5b:
dd:02:18:46:68:1e:7b:0d:0a:c5:a6:6b:af:39:e4:c4:94:26:
1d:cf:0c:27:6b:0f:e9:c4:d0:d9:83:77:a2:fd:b9:6b:73:6b:
ca:84:2d:cb:fa:e6:69:e8:d1:40:34:a8:ce:43:6e:27:9d:af:
12:3f:51:69:62:7f:32:60:e6:9e:94:6c:16:bc:04:68:45:4b:
6b:d9:1e:10:98:7f:32:01:ee:42:f6:b2:99:37:24:b2:be:ee:
79:5b:52:d1:44:ba:fc:f9:1c:9f:0b:0c:f0:ca:34:0f:ad:24:
3d:a1:9c:1f:3f:da:11:be:9d:fe:b9:45:88:f0:c9:2b:2f:63:
d9:92:12:ad:2a:40:bc:89:4f:b4:90:8e:24:ff:35:96:a3:41:
c7:09:e1:6f:a7:f1:fb:34:46:a4:25:ac:8d:cb:9f:29:83:7b:
71:43:f3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:52:01 2026 by rpki-client