Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/OkuL0jFH9Wxr8ze3v5vO1jQoo0c.roa
File: OkuL0jFH9Wxr8ze3v5vO1jQoo0c.roa (raw, json)
Hash identifier: iUfKzVmd555jisXL+xnaTzJDpDNsG+ROIoI7/2+6dXE=
Subject key identifier: 3A:4B:8B:D2:31:47:F5:6C:6B:F3:37:B7:BF:9B:CE:D6:34:28:A3:47
Certificate issuer: /CN=f6f483acd88b51f5d47f577f101b5457785e0edb
Certificate serial: 01A00F9A4158D473EDD9DD5C2351554123B8
Authority key identifier: F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/OkuL0jFH9Wxr8ze3v5vO1jQoo0c.roa
Signing time: Mon 17 Aug 2026 12:02:42 +0000
ROA not before: Mon 17 Aug 2026 12:02:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204132
IP address blocks: 89.38.71.0/24 maxlen: 24
89.44.106.0/24 maxlen: 24
89.45.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:9a:41:58:d4:73:ed:d9:dd:5c:23:51:55:41:23:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f483acd88b51f5d47f577f101b5457785e0edb
Validity
Not Before: Aug 17 12:02:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a4b8bd23147f56c6bf337b7bf9bced63428a347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:4d:af:f9:f3:79:43:54:31:bf:1d:7a:db:
ac:f7:2d:ed:a6:a6:de:9c:c8:08:15:d7:f7:53:b0:
60:a8:b1:be:5f:85:e8:2d:44:62:1e:b3:5b:24:a2:
eb:7a:55:2e:92:65:a3:9b:44:cf:60:51:5b:4f:26:
3b:d6:c9:b4:56:d4:ab:1f:8d:86:6a:59:4f:4d:ac:
d8:8a:e9:82:4a:fc:c8:f9:bc:15:f2:e4:e9:4d:51:
4f:30:4c:47:c0:82:b0:a0:3d:5f:d6:fd:f2:0d:3d:
5d:04:e4:fa:ac:92:c4:6d:61:b2:7f:09:41:70:f3:
dc:d7:4d:ab:0a:ba:20:89:89:8d:ef:f9:8a:0e:67:
f4:bb:8a:26:53:2d:7b:13:6a:57:8c:fb:27:79:80:
c9:88:01:67:eb:14:12:38:04:85:2f:e5:60:31:41:
24:5b:f2:0d:f5:9b:72:9f:e9:6f:f8:3b:89:96:0c:
5a:cf:b2:73:b0:af:ff:69:f3:38:a3:6f:3c:c5:28:
68:2a:7b:45:61:96:eb:f7:ac:bf:9e:44:e0:84:f9:
c0:a6:7e:7f:d6:8c:89:98:1a:6d:29:97:ab:13:ca:
89:27:5b:8f:56:d5:3d:5a:00:f9:bf:4a:d9:56:a2:
69:ec:78:43:2f:57:f0:6d:b9:97:59:b5:74:6a:31:
14:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4B:8B:D2:31:47:F5:6C:6B:F3:37:B7:BF:9B:CE:D6:34:28:A3:47
X509v3 Authority Key Identifier:
keyid:F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/OkuL0jFH9Wxr8ze3v5vO1jQoo0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.71.0/24
89.44.106.0/24
89.45.9.0/24
Signature Algorithm: sha256WithRSAEncryption
48:0e:6a:5d:b7:ef:b9:9b:7d:1e:da:c8:f9:ab:5e:33:a1:c1:
7e:a4:2d:be:75:9c:ed:76:36:01:95:32:78:54:39:1b:89:f5:
37:76:b2:de:3e:4a:bd:37:81:c1:52:e4:dc:22:72:40:e3:19:
04:24:da:12:f4:d4:4b:3e:8e:50:fa:30:33:e2:15:33:64:00:
bc:71:a6:36:a8:bc:f7:73:26:0f:c0:57:c5:d5:a8:57:e1:e4:
23:98:1f:28:5e:39:ee:77:24:bd:cb:6a:e6:f1:b1:de:6d:18:
29:a7:0d:2e:37:88:cb:1c:36:29:c6:a4:31:9a:5b:36:cd:c4:
0e:b1:72:1f:0c:c5:fe:08:bc:40:7e:51:18:89:30:a6:c7:6b:
3b:61:9e:5a:dd:b1:4d:37:0b:7e:be:d2:70:3b:bc:5c:1c:80:
12:3c:c5:10:4a:42:bf:35:3a:a4:bf:42:a0:02:d3:59:c2:de:
d1:53:80:83:27:3c:8a:84:18:7b:0b:70:12:66:cb:54:73:6f:
de:54:92:3c:13:f7:33:ab:fc:eb:f4:52:00:c2:50:79:9c:7a:
9c:0b:ea:54:a7:60:69:d4:b2:e5:23:54:b2:2b:f5:27:d1:77:
54:f9:7e:e0:43:fb:8b:e6:07:3c:fd:41:f6:b2:e0:86:fa:39:
fa:5d:4d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:36:23 2026 by rpki-client