Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/oIk73gNoCg2v2yRwvBO3Eev2uCc.roa
File: oIk73gNoCg2v2yRwvBO3Eev2uCc.roa (raw, json)
Hash identifier: xwkJbEt0QIoptDqbDED+QIX4MpHgchE3dXY1gSI0gHs=
Subject key identifier: A0:89:3B:DE:03:68:0A:0D:AF:DB:24:70:BC:13:B7:11:EB:F6:B8:27
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 019F238012B71F3AB4209A5EDD3CBDE720E5
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/oIk73gNoCg2v2yRwvBO3Eev2uCc.roa
Signing time: Thu 02 Jul 2026 15:43:43 +0000
ROA not before: Thu 02 Jul 2026 15:43:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 80.91.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 07:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:80:12:b7:1f:3a:b4:20:9a:5e:dd:3c:bd:e7:20:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Jul 2 15:43:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0893bde03680a0dafdb2470bc13b711ebf6b827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:07:91:6e:35:32:28:44:ee:c9:d6:89:50:a7:
61:cc:ff:68:a8:f6:bf:31:fc:cb:42:ba:8c:f2:30:
d3:31:fe:05:84:a5:b4:7c:11:59:c1:3e:1b:ec:82:
56:34:09:cd:a3:42:97:98:5a:07:6c:bd:32:62:e4:
17:cd:37:74:13:5c:63:ba:48:da:c2:83:52:68:17:
8e:1f:3f:81:5a:ed:89:09:51:4a:14:00:59:c3:cd:
7f:11:e0:e9:ee:5d:ae:ef:f8:bf:ce:5a:8b:96:0f:
d5:7c:e4:32:f1:24:d6:3d:86:93:83:48:57:84:a9:
48:c7:7f:58:be:a0:81:b5:10:43:06:e2:f1:c5:8d:
d7:10:3b:b8:04:93:5d:23:4b:a2:db:bd:66:01:86:
b5:58:fc:7b:38:98:83:04:f6:5a:ca:ae:41:ab:6a:
ed:76:34:bf:3a:2f:5d:9c:0c:59:29:ab:eb:95:ec:
81:6e:a5:85:ba:dc:fe:67:13:81:04:71:69:8e:ab:
1d:30:47:06:d6:33:f0:6c:5a:e9:aa:ed:a5:2f:de:
e7:8c:fd:69:0a:0b:13:b4:49:8f:13:f6:ec:f9:6a:
9d:c3:52:67:d7:f6:a6:c4:62:6c:f9:0d:e0:6c:15:
c9:d7:69:53:92:fd:76:4c:fb:8e:57:c1:e5:ca:63:
8a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:89:3B:DE:03:68:0A:0D:AF:DB:24:70:BC:13:B7:11:EB:F6:B8:27
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/oIk73gNoCg2v2yRwvBO3Eev2uCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.81.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:99:c1:24:ba:a3:69:bf:b0:67:f8:cb:88:56:0c:c5:87:ae:
e0:47:de:19:64:16:ac:20:f1:5e:c4:70:95:55:7c:ce:ee:46:
34:cb:52:4f:32:5b:91:6b:3c:95:d1:5f:f2:40:5e:3a:cb:c0:
ae:e7:e9:a4:37:ef:5d:7a:96:de:24:72:25:97:d1:1c:e5:cd:
07:88:ac:91:1d:b6:d2:cd:09:56:9f:5b:4f:a4:29:32:8b:87:
52:97:25:cd:ee:51:45:e0:76:33:53:15:6e:7d:58:88:5a:13:
78:29:2d:09:41:d8:f3:2d:99:2e:00:89:e9:35:51:23:00:77:
14:ba:ee:8e:c2:c8:04:54:37:d8:8d:69:60:36:0f:7d:81:ca:
a0:a9:47:da:6d:9e:22:1b:b8:fb:c0:a0:82:e1:97:39:e6:54:
25:c2:02:26:79:e0:b8:24:7d:b3:b6:e6:18:89:9e:43:c7:df:
32:cf:e6:fc:ea:19:0c:6f:68:f6:e7:25:b9:39:22:3d:ea:c2:
7a:3e:e4:58:71:2a:97:27:52:1d:37:49:00:fc:98:b1:1d:5a:
9c:e2:08:d6:8d:72:61:ea:fa:e3:78:c2:60:54:7c:40:d1:c7:
b3:93:21:41:bd:7f:b4:42:8a:a9:fd:b6:96:bb:51:1f:9e:cf:
67:05:15:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:06 2026 by rpki-client