Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/oUXEVU1ZfAi0mZ4spdFr2NwwX3s.roa
File: oUXEVU1ZfAi0mZ4spdFr2NwwX3s.roa (raw, json)
Hash identifier: eNTlyblxvYeRepiAEswZWgtB3T3q/6iMNle/ME4/RoY=
Subject key identifier: A1:45:C4:55:4D:59:7C:08:B4:99:9E:2C:A5:D1:6B:D8:DC:30:5F:7B
Certificate issuer: /CN=d1df4803e54b084a99cb7bb044bf791327594b73
Certificate serial: 01A10A7AAE211EF1C15036AA90467D16808F
Authority key identifier: D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/oUXEVU1ZfAi0mZ4spdFr2NwwX3s.roa
Signing time: Mon 05 Oct 2026 05:12:54 +0000
ROA not before: Mon 05 Oct 2026 05:12:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.142.133.0/24 maxlen: 24
91.193.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:7a:ae:21:1e:f1:c1:50:36:aa:90:46:7d:16:80:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1df4803e54b084a99cb7bb044bf791327594b73
Validity
Not Before: Oct 5 05:12:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a145c4554d597c08b4999e2ca5d16bd8dc305f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4b:d9:53:6b:44:2b:c0:79:a8:73:fb:6c:6a:
b5:df:84:ea:bf:2a:fb:dc:dc:69:ef:b7:28:5f:9b:
5e:f9:83:7c:3e:8d:28:45:c1:32:17:e2:44:0c:e0:
dc:d0:a9:c6:4c:eb:a7:c7:e6:d2:32:bf:4e:04:d3:
05:e2:58:14:38:11:60:21:fe:10:1f:66:96:c0:a0:
e2:c7:76:2b:de:40:08:7f:d1:a5:ea:2f:d4:2d:a7:
25:be:7f:13:48:cc:5d:af:0a:ff:22:f1:23:64:90:
f0:6f:9a:59:a7:9d:fb:90:af:1e:66:01:ce:ce:01:
23:e1:f2:fc:40:47:82:ff:e1:c4:d9:d5:e4:4d:84:
d9:7b:91:bc:8b:d5:b4:91:49:58:d6:e7:25:f7:0d:
93:d5:ff:98:2e:d6:df:9f:ba:13:a8:2f:47:73:d1:
d6:c7:39:a8:91:07:70:79:a3:4c:80:22:90:00:a3:
0f:29:f2:26:9c:ce:93:25:be:7d:19:86:9c:d8:5a:
27:a8:dc:58:a0:54:c1:6f:8f:2b:1c:ed:78:e4:3b:
5a:45:43:36:ba:a4:fa:a0:27:d9:37:62:64:96:f7:
67:11:d0:09:a2:b2:ce:1d:28:91:0c:6e:23:9c:2a:
e9:74:74:75:04:b3:64:80:98:46:6b:f5:b6:2c:87:
5e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:45:C4:55:4D:59:7C:08:B4:99:9E:2C:A5:D1:6B:D8:DC:30:5F:7B
X509v3 Authority Key Identifier:
keyid:D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/oUXEVU1ZfAi0mZ4spdFr2NwwX3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.133.0/24
91.193.74.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:31:41:1a:1b:9a:d0:90:e7:ca:54:65:bb:8f:06:d8:d1:be:
bf:e6:9b:3d:06:97:41:87:65:d9:bf:54:a4:ca:05:c8:4f:76:
62:36:74:d3:52:36:3e:39:fd:40:0d:4c:9f:0c:8d:7f:e1:b5:
9e:3f:33:15:7f:a6:73:5b:9d:c9:90:9f:39:10:0d:a4:2d:fd:
a8:f2:d6:80:0d:41:7c:fc:c7:85:85:21:6e:3a:23:61:5a:63:
70:c0:b4:97:92:40:c5:c7:e7:07:78:7e:87:4e:92:68:cc:61:
ae:fb:51:32:87:79:0d:1f:1d:60:e3:4a:77:4d:1f:87:fe:f8:
2e:a8:cd:3c:88:49:6c:05:04:98:af:da:8d:71:4f:42:26:8d:
a8:a1:d7:5a:24:f1:c1:8f:d7:ae:5a:fb:c7:60:54:cc:2e:b4:
16:e2:8f:38:d3:5a:df:3b:2f:80:d7:11:a5:dc:9d:7f:3f:6d:
9a:e9:82:7a:63:ae:2c:51:d2:a6:6d:48:0a:a3:96:15:4f:e0:
e5:24:0b:d9:b6:50:e9:32:93:6b:87:3a:ea:e8:4c:42:a2:9c:
95:02:35:0a:27:69:2e:89:ac:64:6c:cd:c1:89:f8:a6:ce:a4:
89:16:3f:c2:e5:63:22:bb:a7:16:18:42:a8:f0:84:5f:47:92:
04:5b:31:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:25:50 2026 by rpki-client