Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/o12-ltrKgI_4fGaq0qoW_8OmM5k.roa
File: o12-ltrKgI_4fGaq0qoW_8OmM5k.roa (raw, json)
Hash identifier: W1W76nq2njebPKh6pNWncQQPVtrVvoWY91Y2JLAdp7k=
Subject key identifier: A3:5D:BE:96:DA:CA:80:8F:F8:7C:66:AA:D2:AA:16:FF:C3:A6:33:99
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01A04D025092E1766D69DDA985643F2AD603
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/o12-ltrKgI_4fGaq0qoW_8OmM5k.roa
Signing time: Sat 29 Aug 2026 10:13:12 +0000
ROA not before: Sat 29 Aug 2026 10:13:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 91.108.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4d:02:50:92:e1:76:6d:69:dd:a9:85:64:3f:2a:d6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Aug 29 10:13:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a35dbe96daca808ff87c66aad2aa16ffc3a63399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:b2:a5:9c:01:03:ee:bb:ae:98:15:91:3c:
1c:9d:0a:5f:91:48:cd:4d:51:7d:19:cd:4c:c6:0f:
bb:1c:32:d1:2a:34:93:72:e9:85:e8:61:01:f7:ee:
88:53:90:7b:f3:1a:c3:30:e4:7d:e1:52:7a:02:db:
0d:be:0d:99:ae:cb:b6:7e:20:44:f6:cd:50:af:94:
89:ea:01:38:09:dc:d5:bc:87:1c:3e:b8:70:2d:c9:
f8:cd:dc:08:da:60:cd:8a:2a:ea:ca:43:07:c6:6e:
49:d8:52:40:eb:36:70:49:5b:77:67:e3:8c:cd:88:
ad:e6:65:bc:66:ed:eb:d7:bf:81:c2:18:ba:a1:1b:
67:cd:83:e5:c0:44:76:4e:7d:0a:f6:d8:9f:26:31:
7f:1a:a4:e3:60:cf:2c:b7:29:f9:b0:f8:31:72:60:
78:6d:e8:e3:d7:48:26:21:76:3c:25:65:f5:28:5f:
42:d2:87:6b:ad:31:82:8f:dc:1a:71:bf:5f:5f:d4:
b7:ca:57:54:3f:7d:92:39:5e:89:b5:a2:4b:9e:e2:
c5:ea:01:31:75:65:a5:08:cb:6d:f6:c9:29:a7:99:
82:31:09:68:24:3f:83:52:e1:da:06:87:40:58:a1:
54:67:d2:34:8e:01:cc:f9:25:9a:29:00:94:a2:92:
b3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5D:BE:96:DA:CA:80:8F:F8:7C:66:AA:D2:AA:16:FF:C3:A6:33:99
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/o12-ltrKgI_4fGaq0qoW_8OmM5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.226.0/24
Signature Algorithm: sha256WithRSAEncryption
46:39:a1:6c:56:59:c7:43:25:91:52:68:83:63:3a:39:cc:0c:
d1:cd:1b:9b:6a:db:57:16:b7:37:ae:be:5b:7b:ed:41:7f:19:
cd:7b:0c:8b:e9:bf:7b:d9:df:b5:b0:b5:b8:da:32:ec:fc:14:
fb:b8:21:04:0a:31:e6:47:92:aa:eb:c5:ef:96:94:49:9b:78:
62:9b:69:fe:36:fb:b1:93:9b:84:7d:7f:db:28:ac:d1:d1:1e:
f8:a8:ab:66:c2:8e:f8:80:55:b0:69:81:3f:e8:b5:e5:28:17:
97:88:90:38:9c:39:a4:8b:d4:9b:2c:17:58:9e:ce:d4:fd:fa:
2a:7f:b6:45:d4:cc:90:4f:2c:0b:bd:69:fb:1b:c9:42:30:d3:
c9:be:65:7c:34:7f:c1:fd:2b:16:6b:76:57:1b:49:23:90:d1:
89:7a:91:fd:47:60:5e:49:20:60:4f:4f:d3:8e:1b:55:d5:b8:
02:0d:07:ec:c9:7b:e9:df:57:59:c1:1a:9f:bd:a5:1d:08:0e:
7d:bc:60:ad:ba:04:d0:0b:b9:4f:1c:15:e4:b8:a8:a9:c1:89:
bb:e6:3b:ed:76:eb:f4:a3:92:0f:63:32:34:6b:fd:b8:5c:18:
68:b7:5e:43:ca:ab:07:8a:0c:81:d1:60:8f:c5:f9:a4:d3:6c:
ee:1e:29:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:03:03 2026 by rpki-client