Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/o4oKcqDS76WfTLmc4kzA_rWpCcE.roa
File: o4oKcqDS76WfTLmc4kzA_rWpCcE.roa (raw, json)
Hash identifier: aiaFyW5XBXQdiVVn+HAZOYyaN6UWsK9u9KhblN52g6o=
Subject key identifier: A3:8A:0A:72:A0:D2:EF:A5:9F:4C:B9:9C:E2:4C:C0:FE:B5:A9:09:C1
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 019FCEF64B5B85BBD0175ECEAC1D03584EE2
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/o4oKcqDS76WfTLmc4kzA_rWpCcE.roa
Signing time: Tue 04 Aug 2026 22:47:55 +0000
ROA not before: Tue 04 Aug 2026 22:47:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 5.102.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:f6:4b:5b:85:bb:d0:17:5e:ce:ac:1d:03:58:4e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Aug 4 22:47:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a38a0a72a0d2efa59f4cb99ce24cc0feb5a909c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6a:d5:ce:08:a1:1b:8d:61:59:66:5c:00:24:
37:f8:55:90:53:fd:4d:ea:93:f4:82:49:20:b6:21:
45:59:c4:cc:e4:97:6d:ee:22:9f:fa:5f:bb:73:11:
0f:c4:e1:3c:9e:47:e0:37:a0:9c:3e:fb:1a:32:c4:
9c:36:f5:60:8b:f0:6b:50:20:50:a8:06:82:f1:0b:
b8:a9:8e:02:1f:d4:72:a0:e2:5c:dd:4f:22:bf:78:
bd:ee:fb:82:eb:12:63:93:4b:a1:8e:63:b4:fb:03:
5a:5d:fa:9e:e6:ac:8f:92:ba:c3:43:f1:42:ee:0d:
59:71:23:91:f7:92:eb:df:3a:1a:c8:09:a6:fe:91:
79:b5:2d:91:53:04:1a:ad:de:e5:66:29:af:a1:03:
aa:96:b3:fe:bb:18:27:a1:4e:ec:6b:2e:d2:4c:a9:
65:72:e8:9a:fa:28:3f:7e:1c:28:d1:bc:51:d6:8f:
46:fd:a9:74:40:89:d4:61:98:75:56:b1:0e:5e:c4:
06:92:de:06:6a:72:04:54:13:42:69:aa:0f:e5:05:
ed:2d:e3:72:2e:b9:ff:29:88:01:c2:77:41:85:84:
cc:4d:08:87:a1:57:cf:51:01:94:18:9d:cd:3e:f6:
22:a4:18:b8:7c:d3:a2:05:1d:6f:57:9a:ba:5a:2b:
59:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8A:0A:72:A0:D2:EF:A5:9F:4C:B9:9C:E2:4C:C0:FE:B5:A9:09:C1
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/o4oKcqDS76WfTLmc4kzA_rWpCcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.39.0/24
Signature Algorithm: sha256WithRSAEncryption
38:84:c4:84:91:a8:69:34:6c:b0:b9:7c:d6:c4:d5:2b:77:cf:
f2:df:ed:8e:0a:fb:2d:b1:5b:c9:ca:89:bb:04:68:d1:75:ba:
e8:09:8f:51:1e:08:d9:d3:28:4b:76:0c:40:1b:3a:64:d1:50:
cb:2f:d9:3b:1f:d2:37:68:5f:24:b8:cc:63:26:e7:7d:52:ac:
86:c7:a4:e8:e4:27:52:53:47:f7:44:f2:b7:65:08:da:7a:16:
a5:76:1e:d7:3a:9e:fc:ae:90:9e:60:85:ce:b4:3e:7e:8e:3e:
cd:9e:94:7f:56:94:b3:8d:56:8f:d5:10:88:40:92:c5:b2:a3:
df:5b:48:51:3e:35:7c:d1:cd:70:81:1e:b9:72:53:f7:43:1e:
17:16:d9:52:72:8c:2c:58:c6:4d:ba:36:58:17:1f:77:53:7e:
01:7d:64:b1:71:37:89:bc:34:3d:ed:e9:70:81:a1:78:13:02:
52:09:eb:e2:ba:95:fd:fc:91:54:45:9c:5c:47:53:1c:70:0f:
2a:1e:e1:05:3e:f9:61:23:b4:be:63:13:5d:39:49:6f:9a:d4:
ea:e2:bc:21:f9:84:6e:90:96:81:8c:e9:cb:92:a7:c0:c9:74:
13:09:f3:01:dc:95:c7:fa:5f:b8:56:3b:50:88:6d:9b:9c:15:
ff:34:fe:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 14:18:36 2026 by rpki-client