Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/eOiLkipMPy6gnEpxHHr5FVhN2Xw.roa
File: eOiLkipMPy6gnEpxHHr5FVhN2Xw.roa (raw, json)
Hash identifier: BsFW6S9b3k9MaQLaEI92TjRqmYapLW9Ph+6iqgfFm2I=
Subject key identifier: 78:E8:8B:92:2A:4C:3F:2E:A0:9C:4A:71:1C:7A:F9:15:58:4D:D9:7C
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 01A160A9805325D79CE7CA2E04715CFFCB45
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/eOiLkipMPy6gnEpxHHr5FVhN2Xw.roa
Signing time: Wed 21 Oct 2026 22:51:23 +0000
ROA not before: Wed 21 Oct 2026 22:51:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218450
IP address blocks: 200.96.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:a9:80:53:25:d7:9c:e7:ca:2e:04:71:5c:ff:cb:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Oct 21 22:51:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78e88b922a4c3f2ea09c4a711c7af915584dd97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d9:ee:5f:b7:90:db:a6:b0:7f:3a:7f:8d:7f:
ce:46:52:fe:fe:c1:c9:15:b5:2e:38:ea:8f:02:27:
23:13:1a:97:11:96:a4:cf:d8:39:ca:4d:57:41:f3:
4a:6d:53:06:1d:d9:cc:69:cb:59:86:96:0b:b2:03:
9b:da:c6:3d:96:f2:f9:9d:61:96:3f:1f:ec:6f:bf:
31:8d:02:bf:a6:33:9d:3a:24:ed:7c:d3:0b:a1:a9:
bc:57:2f:86:40:c4:36:4f:1d:4f:6f:41:41:0d:a3:
30:b7:c0:30:a7:cb:36:1e:89:6f:a7:be:7e:41:7b:
c5:2c:12:15:73:e1:94:c3:c5:f9:87:24:88:b6:93:
78:d1:53:49:0e:bd:b6:e9:9c:80:e0:3a:4c:65:1a:
67:37:b8:2f:a0:4a:6a:13:36:d9:3f:cf:23:61:51:
e8:4c:33:72:05:a4:28:3d:f5:be:c8:90:de:eb:46:
5c:48:2f:b4:3a:93:70:5a:ee:35:46:b2:37:a0:84:
70:f6:f6:57:68:60:10:01:f8:62:9b:a9:ec:6b:94:
b9:bd:01:32:bd:59:c9:99:b8:d3:10:f9:18:3a:0a:
bd:2a:3f:80:57:da:e9:56:65:70:99:45:20:c2:9b:
3b:d8:03:76:f8:a3:f5:2f:3a:08:5c:38:7f:2a:c1:
74:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E8:8B:92:2A:4C:3F:2E:A0:9C:4A:71:1C:7A:F9:15:58:4D:D9:7C
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/eOiLkipMPy6gnEpxHHr5FVhN2Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.96.108.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:54:3a:9e:4d:cf:6d:67:3f:6d:e5:b8:8d:27:29:43:0a:76:
d9:bd:57:d2:8d:b1:5e:40:27:db:dc:ba:a3:8b:89:c4:a9:28:
52:6b:14:e8:12:48:7e:1b:b5:f0:04:a3:3e:04:91:d1:e3:6c:
71:c6:45:df:44:89:c7:e0:80:d4:62:33:b8:9e:1d:3b:1b:6d:
3b:eb:bf:8e:fd:40:d1:bb:e0:b2:0f:75:7d:04:4d:d4:2d:11:
4c:55:6a:92:31:34:db:c8:25:b1:06:8d:62:6c:b7:96:dc:1c:
d0:2b:28:ac:f9:b8:a7:4d:c1:88:f3:13:4b:40:b4:6b:b2:54:
2e:51:dc:91:b2:3d:68:a0:ed:b0:82:7d:27:b3:b8:3c:04:a6:
d9:e3:68:e6:07:1a:5f:a6:82:8e:a4:32:3d:0a:f7:f7:51:a3:
c4:d3:06:aa:ee:06:a5:7a:20:87:7c:3b:62:95:a8:54:5f:03:
d5:c1:2e:8b:83:06:31:4a:d3:62:7f:01:5f:f0:d7:3e:6f:79:
10:ce:6f:2b:40:91:45:30:38:9d:9f:f8:34:ae:cc:1d:b2:dc:
df:89:fe:36:0d:0e:76:ac:d0:de:2c:dd:18:65:dc:1b:dd:f7:
79:40:b0:10:55:e4:d4:e2:54:d6:15:22:cd:c6:e3:93:c0:5f:
e2:4a:bd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:39:52 2026 by rpki-client