Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/okJj0d-EOkTfQupXyqLnQHIPiko.roa
File: okJj0d-EOkTfQupXyqLnQHIPiko.roa (raw, json)
Hash identifier: Ph95pABJ+nhC77BMV9tRk0nmh81+NSdTETeu6o1wtvY=
Subject key identifier: A2:42:63:D1:DF:84:3A:44:DF:42:EA:57:CA:A2:E7:40:72:0F:8A:4A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019A02988E43B67680E9FE65FADF12881137
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/okJj0d-EOkTfQupXyqLnQHIPiko.roa
Signing time: Mon 20 Oct 2025 17:09:03 +0000
ROA not before: Mon 20 Oct 2025 17:09:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201106
IP address blocks: 77.239.116.0/22 maxlen: 24
144.31.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:98:8e:43:b6:76:80:e9:fe:65:fa:df:12:88:11:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 20 17:09:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a24263d1df843a44df42ea57caa2e740720f8a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:0f:d6:fd:71:7d:28:94:f3:c8:77:3d:cd:
77:eb:55:9a:d2:36:f0:9e:72:b5:48:53:d6:73:48:
e7:ca:f4:5f:1f:50:ee:07:d0:12:bc:c2:3a:18:bd:
ba:b9:57:7c:73:c7:4b:58:8f:76:30:fc:07:7f:bc:
78:fe:21:85:1f:74:66:d0:eb:a3:e3:9e:cf:41:09:
72:31:f6:39:8a:3d:32:9d:4a:41:f7:56:50:5e:6c:
26:f6:61:d5:d1:19:7c:2a:da:64:84:fb:ad:99:29:
27:94:d9:1f:17:4e:d8:63:57:b2:52:8f:d0:10:90:
90:29:5b:76:b3:e5:7e:03:d4:c7:b6:13:96:cb:78:
52:de:e9:95:d5:3e:6c:fd:70:7c:3e:c5:c2:a1:b8:
7a:55:31:d0:8f:dd:c2:bc:f6:c4:f8:8d:d5:eb:77:
a6:76:d4:e4:94:39:eb:4b:34:79:c5:44:3f:09:92:
ba:d9:32:4e:95:54:43:61:06:43:87:ba:0c:fb:99:
65:1d:f6:81:a1:17:96:1d:57:1c:35:27:20:04:cd:
ed:d2:d0:a8:49:e9:ed:ed:77:42:34:6f:59:8c:78:
18:9b:17:66:7e:cc:fb:af:3f:8d:05:5a:e1:a3:f5:
01:7f:22:c3:25:d2:84:28:35:a3:81:1e:da:5d:6f:
36:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:42:63:D1:DF:84:3A:44:DF:42:EA:57:CA:A2:E7:40:72:0F:8A:4A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/okJj0d-EOkTfQupXyqLnQHIPiko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.239.116.0/22
144.31.180.0/22
Signature Algorithm: sha256WithRSAEncryption
48:4b:23:7e:b8:2d:f7:46:bf:3b:02:36:55:ec:af:5d:d6:40:
6d:7b:c5:9f:c2:95:4c:3e:c5:06:26:25:90:58:48:fd:7c:c7:
b3:d7:7d:20:c8:ba:3b:2c:d6:93:19:56:8b:8f:83:d5:6d:4e:
ca:2e:0a:6c:ce:4a:b4:a5:84:1d:f8:c9:42:1c:a2:a4:f3:a2:
21:17:74:e5:d0:20:00:2f:3d:a5:5d:65:2a:79:4f:0c:a8:33:
af:77:79:cd:d8:99:21:74:1b:12:85:d5:85:33:7e:b9:e2:86:
e4:2d:1b:a7:f8:78:e9:99:25:96:92:ad:ef:d6:bd:9f:2a:95:
db:d1:7c:70:af:52:17:d7:a7:8a:8d:c8:ff:61:20:f3:4b:2e:
83:36:e8:db:ce:49:60:56:a2:56:6e:66:a4:d4:32:26:17:cf:
a9:51:c4:e5:a8:c8:d7:38:78:88:ce:70:db:a5:b0:8f:5b:7b:
75:fb:33:00:4f:d1:89:50:bd:0a:12:c0:3e:49:3f:6a:7a:3f:
2b:7d:44:91:aa:3d:fb:21:7e:9c:a6:f7:c3:a4:ed:b7:13:0a:
64:10:ff:d5:37:bd:59:c8:03:6d:ad:b7:18:4d:69:21:0a:af:
5e:6b:9d:ed:5a:09:d5:df:94:c8:56:b0:a1:8b:83:ef:6a:45:
43:c3:ee:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:01:08 2025 by rpki-client