Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/oHHHt0jfKTUPHqrJISRojxeNu1Q.roa
File: oHHHt0jfKTUPHqrJISRojxeNu1Q.roa (raw, json)
Hash identifier: a1osG73s3bmcdnUypPYKkALJ60GXKBFHPhpvTLcPUxc=
Subject key identifier: A0:71:C7:B7:48:DF:29:35:0F:1E:AA:C9:21:24:68:8F:17:8D:BB:54
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019DCDF1760066079C804D738BD1D5BBFB1A
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/oHHHt0jfKTUPHqrJISRojxeNu1Q.roa
Signing time: Mon 27 Apr 2026 07:57:26 +0000
ROA not before: Mon 27 Apr 2026 07:57:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48207
IP address blocks: 109.196.110.0/24 maxlen: 24
185.39.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f1:76:00:66:07:9c:80:4d:73:8b:d1:d5:bb:fb:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Apr 27 07:57:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a071c7b748df29350f1eaac92124688f178dbb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:84:14:b6:49:85:93:ee:e9:37:8d:d2:fe:c4:
49:32:ab:2c:a4:e7:7d:b1:ce:f3:88:80:a2:11:ce:
d6:82:05:0a:da:a6:6c:dc:6f:0d:ea:76:cc:69:bf:
dc:63:b5:a0:67:a3:ec:ce:37:80:76:35:01:43:c9:
05:20:1d:f6:17:c2:19:bb:03:37:3f:ea:26:20:b0:
dd:a4:0c:27:a7:d0:9d:71:8c:ab:c6:ee:1f:1c:1a:
2e:91:44:ce:fe:3b:ec:10:8c:81:fb:43:2c:f3:b8:
5a:fd:a3:43:23:25:56:3a:be:ac:c1:18:74:cd:8c:
e6:57:5d:cd:fe:37:0d:99:e0:03:9c:ac:cc:07:17:
37:f3:b2:d5:e5:97:7e:1f:38:70:0f:5e:d3:be:d8:
36:8f:28:38:9a:15:ea:43:05:05:33:52:37:14:e0:
a8:38:a5:49:47:9f:5b:50:ae:bb:ce:aa:d8:8f:ba:
0d:fe:fb:8c:c2:e0:8e:8d:24:03:f1:6a:e4:f6:1e:
48:e5:5b:65:7a:b7:18:f0:6f:20:01:56:29:2a:e5:
93:dc:9b:14:4a:86:80:20:23:2e:81:03:da:7a:ca:
71:eb:3e:b2:0d:df:7c:5e:d5:7a:8d:c9:44:34:b2:
78:d8:c3:11:ea:dd:22:ed:34:be:90:33:71:6a:02:
c0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:71:C7:B7:48:DF:29:35:0F:1E:AA:C9:21:24:68:8F:17:8D:BB:54
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/oHHHt0jfKTUPHqrJISRojxeNu1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.196.110.0/24
185.39.19.0/24
Signature Algorithm: sha256WithRSAEncryption
89:4e:2f:79:e4:fd:f3:68:07:ca:48:6b:89:ac:84:75:73:d1:
cd:fc:6a:a0:51:35:b3:2d:75:d6:42:ad:b4:de:48:10:66:8b:
92:fe:5e:23:19:bb:18:7a:c9:2b:85:60:07:61:83:f8:2d:1d:
b6:cb:86:99:bf:73:7e:a6:f8:61:30:04:85:49:f7:21:54:65:
7a:7d:f8:0c:7d:9e:04:a7:8f:c9:5b:ee:8d:1c:c0:4a:91:e5:
e7:98:8b:25:92:1d:1d:b8:41:5b:11:a9:37:80:2d:52:49:5b:
4c:36:63:ed:0c:63:96:b2:ab:b0:ac:f2:62:1b:0e:fb:11:5e:
5c:2a:04:ff:98:c6:ae:92:a9:86:3b:8f:c1:1b:36:7d:7e:53:
88:01:f5:a5:be:ea:00:7f:db:0d:c9:7a:81:49:59:2d:9d:52:
e4:9d:e3:26:4f:4c:f0:28:f4:73:89:bf:a6:19:70:d5:4d:df:
91:b9:95:49:d0:c6:92:01:a8:49:3d:21:1e:e4:91:ce:7e:0f:
72:67:1a:63:cd:32:a4:eb:22:35:92:71:02:07:0c:98:08:dd:
1c:8d:4a:ed:41:09:d5:6d:51:12:8b:36:01:4a:9b:ef:b6:96:
35:7b:3b:52:da:8c:07:5e:fd:b4:bc:f1:7d:6e:93:9a:44:dc:
62:07:2f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 05:35:44 2026 by rpki-client