Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/oEh0zsLA5UZA39x6EQVj8UEWV3w.roa
File: oEh0zsLA5UZA39x6EQVj8UEWV3w.roa (raw, json)
Hash identifier: ofYRIlGpqs1J+0rHlZ3ROlJLZnu8I5050yPMB/ZXDFo=
Subject key identifier: A0:48:74:CE:C2:C0:E5:46:40:DF:DC:7A:11:05:63:F1:41:16:57:7C
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 019FDCBBED26CF7970CDD69FB483DDE71300
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/oEh0zsLA5UZA39x6EQVj8UEWV3w.roa
Signing time: Fri 07 Aug 2026 14:58:51 +0000
ROA not before: Fri 07 Aug 2026 14:58:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57803
IP address blocks: 5.59.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:bb:ed:26:cf:79:70:cd:d6:9f:b4:83:dd:e7:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Aug 7 14:58:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a04874cec2c0e54640dfdc7a110563f14116577c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6f:09:c5:ea:16:f5:43:e7:97:70:47:50:a6:
19:81:0f:f6:2a:d8:db:22:ff:bf:c7:3f:98:a5:6f:
d2:2c:15:3c:28:3b:3e:f3:a6:4b:df:a9:47:21:d0:
f2:1c:2b:ee:df:60:f3:0d:3e:5c:77:53:af:b3:b8:
79:5c:98:bb:36:d3:64:f5:d0:3f:d8:41:89:b6:c2:
25:a2:f8:b5:bd:fc:2f:20:07:17:2c:43:b8:46:70:
66:31:1c:77:14:ff:31:8d:d4:f9:a9:49:dc:02:16:
c3:b3:22:a8:40:73:d4:39:33:90:ad:81:94:e0:e7:
4a:66:36:31:5a:91:66:3f:9c:a4:b3:b2:df:72:31:
b7:b6:fd:5a:5c:60:b4:fd:47:02:69:cb:60:a0:b3:
c6:ef:93:7f:9a:42:b9:14:c8:13:e8:68:d7:5a:49:
4c:fe:ee:ee:48:0c:24:61:b9:7b:e5:00:89:86:09:
1c:47:de:49:df:20:ff:70:5f:a4:1e:64:79:c0:4a:
a4:14:69:4d:df:74:7d:d1:b5:d2:3d:bf:c9:b7:8c:
b7:b1:42:76:c6:1d:ed:34:f9:81:fe:aa:d6:ec:8f:
dc:53:72:ff:f6:4c:c5:ee:a3:b5:86:7e:7a:52:23:
80:96:b7:5d:b1:68:b9:ed:b4:19:a7:d3:80:18:21:
8e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:48:74:CE:C2:C0:E5:46:40:DF:DC:7A:11:05:63:F1:41:16:57:7C
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/oEh0zsLA5UZA39x6EQVj8UEWV3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.104.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:44:86:1f:a5:b8:31:f9:c7:fb:56:85:34:68:7e:67:bc:d8:
46:84:7d:72:3e:86:8a:35:80:a1:d7:8a:71:e9:c0:20:62:e9:
bf:82:43:82:b9:8d:f8:6a:22:7c:00:89:b7:88:78:a0:e6:d8:
e1:29:3c:39:b2:4c:2e:4d:97:0c:5c:3d:d9:0f:38:90:ef:26:
0d:c3:79:3a:2b:2d:ba:ef:0b:ea:9c:ac:c7:b9:ee:86:1c:c8:
f6:52:10:1c:d0:66:8a:e5:b5:89:25:7d:fd:d0:45:1b:ee:11:
b4:98:ad:61:d2:d9:da:e6:fc:88:18:a0:d4:68:19:5e:e3:62:
16:68:79:e6:53:3d:c3:ec:de:f1:81:98:a5:69:10:8a:74:88:
e7:8a:51:3d:98:50:d0:d0:84:88:ab:ea:68:73:64:eb:f4:f7:
5f:09:63:84:19:44:9a:d4:dc:f8:4e:b9:98:a4:7f:46:d1:d3:
97:a7:00:a2:ab:53:e6:f4:d9:31:80:2c:33:aa:ed:77:46:f9:
a2:bc:54:23:cf:c0:7c:dd:b0:9c:a6:3f:f9:e5:dc:34:84:bc:
6d:ea:14:9f:71:94:c6:c7:a4:8f:f1:55:11:67:38:db:b0:c4:
a8:89:f5:3c:28:75:24:81:1f:de:76:02:02:80:f3:52:26:c8:
69:c1:20:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 02:47:52 2026 by rpki-client