Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/S1obrMP08-kmGB7VLUhtFfd_rkk.roa
File: S1obrMP08-kmGB7VLUhtFfd_rkk.roa (raw, json)
Hash identifier: BUfpEz9i0Kw5yTFcpK1oW0WW3YPJnb9EaktEtTRt6HA=
Subject key identifier: 4B:5A:1B:AC:C3:F4:F3:E9:26:18:1E:D5:2D:48:6D:15:F7:7F:AE:49
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01A13FB241B396A35828EE9897277C2430B7
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/S1obrMP08-kmGB7VLUhtFfd_rkk.roa
Signing time: Thu 15 Oct 2026 13:13:29 +0000
ROA not before: Thu 15 Oct 2026 13:13:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 84.55.8.0/22 maxlen: 24
88.223.43.0/24 maxlen: 24
95.173.40.0/24 maxlen: 24
95.173.42.0/24 maxlen: 24
95.173.43.0/24 maxlen: 24
95.173.44.0/24 maxlen: 24
95.173.45.0/24 maxlen: 24
95.173.48.0/24 maxlen: 24
95.173.50.0/24 maxlen: 24
95.173.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:b2:41:b3:96:a3:58:28:ee:98:97:27:7c:24:30:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Oct 15 13:13:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b5a1bacc3f4f3e926181ed52d486d15f77fae49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a6:68:02:24:45:43:4e:a6:93:40:6c:51:18:
5c:d9:8c:6c:67:53:d1:1f:b5:d2:4b:bc:8a:c0:69:
b6:1d:31:c3:e6:7c:2c:6b:da:92:03:d0:18:43:3b:
4b:2a:c9:b5:72:dd:93:8f:90:3e:d6:d4:a4:31:e0:
eb:bd:09:31:0b:86:32:c7:81:53:91:45:9c:bb:81:
73:cc:57:bf:93:f8:03:68:88:13:e9:5d:b9:b5:19:
2c:ca:0d:e1:5b:30:8a:fd:39:54:eb:b0:6b:fe:c0:
b2:a0:9f:4a:80:59:8a:a4:b3:ee:86:1c:54:e4:2a:
31:43:3c:48:e5:76:70:5c:2d:6f:24:00:8e:d2:d0:
d6:63:77:c4:d0:d8:7c:aa:34:8e:d2:d0:0b:9e:b0:
1e:03:c0:56:03:0b:73:dd:34:03:96:8a:34:d2:99:
dd:48:ac:b8:fb:b1:2e:ba:9a:dd:e2:2f:ec:2b:2a:
6b:d4:58:77:62:cf:30:97:de:bb:4b:fa:8f:14:99:
56:9b:84:3c:ad:84:52:74:89:45:8f:d7:a9:9e:e7:
1f:13:d9:58:4f:8c:49:2e:be:92:6e:af:14:1d:19:
28:12:e2:61:6e:71:62:6b:53:ff:ea:11:8c:51:00:
5a:45:be:09:15:56:80:09:a9:1d:8f:69:33:43:9f:
9b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5A:1B:AC:C3:F4:F3:E9:26:18:1E:D5:2D:48:6D:15:F7:7F:AE:49
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/S1obrMP08-kmGB7VLUhtFfd_rkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.8.0/22
88.223.43.0/24
95.173.40.0/24
95.173.42.0-95.173.45.255
95.173.48.0/24
95.173.50.0/23
Signature Algorithm: sha256WithRSAEncryption
16:8d:f8:a3:7f:12:80:c9:f7:a4:6b:50:ae:44:78:c8:a8:64:
3d:81:a3:e4:33:32:d0:da:4c:76:f7:fb:e2:27:c0:46:b5:35:
5a:8d:1c:70:3f:12:db:7a:69:88:e3:7e:7f:a0:67:2e:79:9d:
9c:4f:b7:d0:d8:86:13:b4:e9:8c:5d:a7:4d:b6:06:70:0f:e8:
02:dc:02:50:50:0f:f7:76:8d:68:79:89:47:f0:28:ba:e7:25:
2b:d4:a3:39:a1:74:44:e1:13:63:d8:d5:c6:ad:05:90:a6:2e:
04:e3:ba:ad:b5:17:b4:33:4e:d7:6e:ab:75:63:e2:af:c4:d1:
ed:d4:5f:0a:94:ad:8e:a7:bd:be:79:d4:97:27:5f:07:db:66:
39:09:9b:5e:b1:19:6d:d1:fe:58:4e:c2:17:0f:4c:42:6c:41:
21:b0:cf:e3:7a:8a:99:29:58:5a:e5:8f:01:93:87:a7:ff:14:
e2:8e:f9:a3:c9:8c:df:aa:67:f3:4a:13:c4:c2:e8:dc:2a:a4:
27:c7:db:3f:b2:b0:8b:65:ed:97:71:a2:38:5e:16:cc:9b:47:
97:b4:c1:ab:69:1b:c1:e7:c9:a2:f6:b4:2e:25:71:7d:ab:e1:
bd:f1:05:df:a1:9f:3c:ad:d0:32:f6:15:28:22:6d:a8:c0:45:
39:37:b6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:47:33 2026 by rpki-client