Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/odgvgX5OKnBuqpCEQFyifLcuH4A.roa
File: odgvgX5OKnBuqpCEQFyifLcuH4A.roa (raw, json)
Hash identifier: TEyEnNRYzz8D2aikUvWtRtpqlSUUtFDnA9JCdB95CsE=
Subject key identifier: A1:D8:2F:81:7E:4E:2A:70:6E:AA:90:84:40:5C:A2:7C:B7:2E:1F:80
Certificate issuer: /CN=d4e2971e5d8169c940af020db027bedad8991590
Certificate serial: 01A0F266836AEE151830BEDEC87A4F222308
Authority key identifier: D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/odgvgX5OKnBuqpCEQFyifLcuH4A.roa
Signing time: Wed 30 Sep 2026 12:59:59 +0000
ROA not before: Wed 30 Sep 2026 12:59:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48294
IP address blocks: 45.86.222.0/23 maxlen: 23
45.91.36.0/22 maxlen: 22
84.252.104.0/24 maxlen: 24
91.132.128.0/22 maxlen: 22
185.124.0.0/22 maxlen: 22
185.126.160.0/22 maxlen: 22
2a05:2680::/29 maxlen: 29
2a0b:cb40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:66:83:6a:ee:15:18:30:be:de:c8:7a:4f:22:23:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e2971e5d8169c940af020db027bedad8991590
Validity
Not Before: Sep 30 12:59:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1d82f817e4e2a706eaa9084405ca27cb72e1f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:6b:f0:20:22:00:91:b6:b8:29:66:57:e7:
fa:53:bc:58:dc:4a:97:e2:5a:f7:05:ca:6f:f9:48:
a0:26:7d:90:d9:b6:a3:a0:38:fb:88:aa:7e:0a:c5:
bf:ed:43:82:2d:3f:12:ac:ed:97:2e:b6:c2:5b:d4:
f1:2b:56:2b:51:1b:7a:4c:27:e1:c5:93:40:38:9f:
76:dd:d3:22:15:22:f5:12:4a:4c:99:c8:c8:41:4c:
40:d8:4a:1b:bc:c9:98:8a:fd:d4:be:ad:49:18:bf:
a3:e9:a2:60:22:79:40:48:62:22:3f:04:5c:f6:d8:
ae:83:ce:ac:19:7a:70:1c:9b:25:71:de:1a:d8:83:
e4:e7:33:5b:e5:55:2e:4f:ea:2b:bf:39:08:a7:e0:
e5:44:87:87:a5:8e:48:f2:41:37:d6:08:99:19:8c:
95:90:d9:92:c2:d4:b3:e5:1e:78:7c:88:9a:be:64:
01:15:ac:2f:4c:47:ff:2e:51:76:9f:df:3d:82:7c:
b4:a0:f5:16:23:eb:d1:55:98:b2:e6:27:16:d0:4b:
16:3e:79:0f:e7:26:63:c9:95:bc:f7:2e:46:58:2d:
f2:39:3f:d5:fb:9b:35:04:60:db:9a:47:97:3a:5c:
bc:54:6d:6f:0d:5e:f8:bf:75:f2:13:ec:70:08:c2:
a4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D8:2F:81:7E:4E:2A:70:6E:AA:90:84:40:5C:A2:7C:B7:2E:1F:80
X509v3 Authority Key Identifier:
keyid:D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/odgvgX5OKnBuqpCEQFyifLcuH4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.222.0/23
45.91.36.0/22
84.252.104.0/24
91.132.128.0/22
185.124.0.0/22
185.126.160.0/22
IPv6:
2a05:2680::/29
2a0b:cb40::/29
Signature Algorithm: sha256WithRSAEncryption
9d:47:e5:78:d7:4c:bb:52:d2:ff:e0:c0:8a:3d:b5:7d:6a:f4:
f3:f2:68:32:2e:c5:91:fa:5e:9d:74:ac:40:f4:3a:ec:65:ef:
cf:78:e8:67:36:1d:e6:3e:78:ef:0b:8f:57:ec:3c:22:85:a6:
bf:64:a3:4d:ae:cd:39:db:36:65:e5:88:32:a0:70:e4:4b:15:
e4:36:91:7c:5c:57:85:85:13:7b:a6:89:34:60:a4:81:c8:8b:
5f:7b:15:93:00:ee:da:4f:e7:34:8c:c8:62:cc:69:7a:e7:5e:
5c:7b:02:34:6e:32:f2:d9:2e:12:c3:d4:1f:82:29:73:a6:7a:
ad:e7:b2:54:4d:28:d0:83:3f:5d:16:98:0e:3f:a1:87:64:28:
68:d4:45:9f:cb:92:da:41:b2:a2:a2:95:c5:6e:2c:e0:4e:91:
5c:37:48:31:b2:2c:00:c3:9a:f1:88:45:59:d7:05:98:34:9b:
a0:c9:f6:d9:b8:6e:de:26:07:f6:4c:31:ab:79:15:64:8e:66:
fc:e0:bf:81:e8:4f:a4:b2:db:ee:5a:56:2c:11:4a:dd:fd:a8:
06:09:fb:96:9d:4d:9d:ea:7c:e7:e7:9f:3d:d1:0d:1a:57:30:
72:29:d0:07:18:87:d4:79:be:94:72:ff:ba:ea:07:47:e8:4b:
b7:55:39:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:59:44 2026 by rpki-client