Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/oC8FXJObom-hoRSFpIAkPp_lSgI.roa
File: oC8FXJObom-hoRSFpIAkPp_lSgI.roa (raw, json)
Hash identifier: DcpXnqFpt4l+rCFMeeri/A3lAT2kqKalUAGWgt9Co7k=
Subject key identifier: A0:2F:05:5C:93:9B:A2:6F:A1:A1:14:85:A4:80:24:3E:9F:E5:4A:02
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 01A0619CF8E03EF23AC29BE759DBAC22C2E1
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/oC8FXJObom-hoRSFpIAkPp_lSgI.roa
Signing time: Wed 02 Sep 2026 10:14:32 +0000
ROA not before: Wed 02 Sep 2026 10:14:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213702
IP address blocks: 95.164.12.0/24 maxlen: 24
95.164.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:9c:f8:e0:3e:f2:3a:c2:9b:e7:59:db:ac:22:c2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Sep 2 10:14:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a02f055c939ba26fa1a11485a480243e9fe54a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:80:ac:89:95:7f:d8:cd:50:03:71:e0:74:
e9:f1:44:eb:45:e6:b0:34:28:d9:42:05:f0:2d:03:
dd:71:7a:ce:e5:89:57:62:5e:48:0e:e0:3d:43:cd:
78:ef:97:ee:e8:d6:e0:98:c9:1f:39:cd:43:5c:95:
0c:f2:78:82:58:38:42:4b:11:13:89:a3:95:83:33:
07:30:ea:85:0f:f5:a0:85:4a:5f:72:50:6f:da:6a:
ce:9b:dd:b0:66:94:07:07:6c:5e:bc:a0:80:31:dc:
fe:55:1b:94:2d:16:97:e2:86:8d:d3:f2:f9:37:93:
6c:18:70:94:11:f2:95:e3:d7:01:02:88:9d:d2:f8:
49:8d:c6:9f:96:20:44:1a:b2:06:da:83:50:bb:4a:
ee:cb:1b:f0:e6:3e:b3:06:c5:9c:35:a4:50:ae:ab:
2d:11:9d:20:01:ca:e6:5d:2f:bc:34:52:e2:b8:67:
09:9d:0e:1a:44:2c:af:34:3f:d4:8c:c4:37:cf:e4:
c1:ff:e0:72:e7:96:58:26:84:7d:1a:28:a7:c3:3a:
5d:5f:2b:88:e8:69:0d:f2:0e:63:7c:8d:a0:d6:30:
82:da:d3:10:b9:f3:57:70:4c:ce:b6:a8:97:56:63:
19:63:79:7f:f4:38:85:84:4f:52:0e:9b:49:9c:bd:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2F:05:5C:93:9B:A2:6F:A1:A1:14:85:A4:80:24:3E:9F:E5:4A:02
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/oC8FXJObom-hoRSFpIAkPp_lSgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.12.0/24
95.164.250.0/24
Signature Algorithm: sha256WithRSAEncryption
41:50:63:c5:92:bb:da:3b:a3:11:ad:b6:93:11:48:3d:26:52:
b3:89:a0:b4:49:5c:53:9b:5b:7b:01:dc:67:77:33:64:6c:85:
ce:f0:4a:d4:d0:54:b8:c2:d5:09:cb:76:03:9d:c0:9a:23:bc:
0c:b2:8c:3b:2a:2e:5a:f4:a2:d4:08:cc:0c:3e:1f:f7:f4:83:
b6:e7:a6:d1:36:52:cf:2c:28:f3:0a:14:aa:f8:3f:a7:47:1c:
10:d5:1f:81:ee:19:e7:f8:c2:59:2c:2a:5e:27:f1:53:9c:6a:
ee:3b:d4:4b:cf:74:73:5b:dc:13:5d:83:d0:6f:e3:ef:40:02:
05:25:c6:e6:6a:09:7c:df:88:df:50:85:9f:1f:88:a3:35:f9:
6e:6e:a6:7c:c0:01:60:4c:7c:73:74:0b:40:60:4e:d0:03:a5:
9f:ee:bc:2d:23:bc:d9:f5:93:df:dc:d2:e9:7a:85:f6:ee:65:
6a:1e:ad:82:ac:a8:83:d7:ad:4f:eb:9d:e6:b9:97:d3:a6:6a:
21:5d:95:c1:bf:9b:5c:d2:cd:59:57:59:3c:db:f0:f5:18:db:
55:1f:d5:83:95:1f:ea:6a:e7:ce:56:71:f1:eb:56:a1:85:67:
95:3d:ac:59:d1:d3:9f:11:7f:a3:10:a8:b9:d5:80:1c:15:d2:
32:6a:d2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:52:32 2026 by rpki-client